Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/f904daffde29f93b5fee2fb5498d7445f3ff5310.roa
File:                     f904daffde29f93b5fee2fb5498d7445f3ff5310.roa (raw, json)
Hash identifier:          M3DzfV8ifQQiLzr5AHDfzoeSC70gdKx6Qln5o9xOepw=
Subject key identifier:   5E:4E:22:5E:02:DD:2A:29:CF:96:5D:0B:05:05:65:9A:1B:E5:47:7B
Certificate issuer:       /CN=5ddf424db6364fbbd65117f50773ca8bce9ec973
Certificate serial:       1853F0
Authority key identifier: C3:57:47:6F:6C:90:7A:A1:A5:55:3F:8F:A4:FD:E3:37:BC:15:A3:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ddf424db6364fbbd65117f50773ca8bce9ec973.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/f904daffde29f93b5fee2fb5498d7445f3ff5310.roa
Signing time:             Tue 16 Jan 2024 10:08:59 +0000
ROA not before:           Tue 16 Jan 2024 10:08:59 +0000
ROA not after:            Fri 16 Jan 2026 10:08:59 +0000
asID:                     271909
IP address blocks:        2803:9210::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594352 (0x1853f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddf424db6364fbbd65117f50773ca8bce9ec973
        Validity
            Not Before: Jan 16 10:08:59 2024 GMT
            Not After : Jan 16 10:08:59 2026 GMT
        Subject: CN=f904daffde29f93b5fee2fb5498d7445f3ff5310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:6f:df:aa:c0:62:ec:f0:23:8c:04:c7:87:
                    1b:c4:8b:85:41:a3:5f:e3:3e:07:9f:21:be:7b:84:
                    79:8e:10:a8:e1:24:0c:ce:eb:bf:aa:d5:45:a7:0d:
                    81:15:30:13:f7:95:28:e4:1f:ab:52:4b:2e:42:30:
                    7f:60:67:d8:c9:05:57:21:df:1a:0a:fe:e7:95:84:
                    86:82:f2:24:4e:5b:98:11:79:aa:d2:ae:05:51:49:
                    9c:43:4c:c3:d4:5f:de:9e:20:d6:25:55:a2:b8:75:
                    f7:36:47:ac:95:bb:e9:59:bc:62:a1:1e:d6:ce:43:
                    11:4f:af:cf:ab:03:6e:55:6b:30:32:34:e7:e6:8e:
                    38:60:0a:2b:54:2f:35:3d:a0:5b:06:84:65:10:8d:
                    1b:c0:2e:81:f1:f7:bd:7d:bb:64:d9:db:71:d2:34:
                    47:7a:55:65:d9:d3:80:56:ea:40:16:e7:0a:4a:ca:
                    b0:11:d6:38:91:5d:85:6b:f3:9b:26:53:d2:82:01:
                    e9:8c:2f:fc:4c:e9:78:26:e5:05:a6:d9:7c:ee:be:
                    80:6c:db:24:36:46:18:e4:f9:8c:88:ef:0c:c1:4b:
                    6b:0e:84:5b:61:32:7c:9b:27:27:59:7b:3b:68:36:
                    ce:a2:8a:89:7d:c8:ce:de:68:af:92:13:a8:dc:5e:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4E:22:5E:02:DD:2A:29:CF:96:5D:0B:05:05:65:9A:1B:E5:47:7B
            X509v3 Authority Key Identifier:
                keyid:C3:57:47:6F:6C:90:7A:A1:A5:55:3F:8F:A4:FD:E3:37:BC:15:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ddf424db6364fbbd65117f50773ca8bce9ec973.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/f904daffde29f93b5fee2fb5498d7445f3ff5310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/5ddf424db6364fbbd65117f50773ca8bce9ec973.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9210::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:9c:c3:94:b5:e4:f8:04:51:c6:7a:b8:5d:b9:71:33:32:
         34:fa:8d:f7:60:f3:0a:5a:d1:09:08:0d:de:78:df:9a:ca:f5:
         e7:8d:bb:bd:2b:ef:30:6b:06:65:bc:5f:fc:13:ce:93:74:b8:
         74:95:23:37:03:19:50:e5:75:73:f4:d7:16:95:c5:55:47:dc:
         b6:31:c2:17:8d:b0:15:e7:1a:fa:78:c4:52:8a:73:5b:f1:14:
         6a:7b:a5:3d:41:18:04:e4:ea:8d:48:e2:41:b9:ed:ba:5a:01:
         38:4e:61:48:be:3b:36:3c:7d:9a:23:88:ca:33:e7:2a:00:da:
         2a:de:8d:d6:b8:2d:98:e6:74:5c:79:01:e6:cd:b6:ae:e8:dd:
         da:40:59:25:07:d4:92:92:fa:85:b5:2e:a2:97:0c:a4:54:d1:
         b5:d7:d3:52:1e:c0:c6:47:68:e7:93:3d:09:f9:c1:1d:72:54:
         a9:26:b2:c8:98:33:b8:90:da:dd:53:b6:38:ed:c4:64:c8:09:
         5c:97:0c:47:ab:53:de:14:a4:81:9c:cf:65:ae:5d:2a:9f:60:
         bf:39:74:cc:9e:60:22:45:09:85:19:30:71:1e:b9:e5:3b:8a:
         f4:fc:fd:09:40:d8:f0:3a:ec:3c:04:88:e8:a1:8a:d8:ce:9a:
         e6:ef:37:e6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGFPwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
ZGY0MjRkYjYzNjRmYmJkNjUxMTdmNTA3NzNjYThiY2U5ZWM5NzMwHhcNMjQwMTE2
MTAwODU5WhcNMjYwMTE2MTAwODU5WjAzMTEwLwYDVQQDEyhmOTA0ZGFmZmRlMjlm
OTNiNWZlZTJmYjU0OThkNzQ0NWYzZmY1MzEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi2Vv36rAYuzwI4wEx4cbxIuFQaNf4z4HnyG+e4R5jhCo4SQM
zuu/qtVFpw2BFTAT95Uo5B+rUksuQjB/YGfYyQVXId8aCv7nlYSGgvIkTluYEXmq
0q4FUUmcQ0zD1F/eniDWJVWiuHX3NkeslbvpWbxioR7WzkMRT6/PqwNuVWswMjTn
5o44YAorVC81PaBbBoRlEI0bwC6B8fe9fbtk2dtx0jRHelVl2dOAVupAFucKSsqw
EdY4kV2Fa/ObJlPSggHpjC/8TOl4JuUFptl87r6AbNskNkYY5PmMiO8MwUtrDoRb
YTJ8mycnWXs7aDbOooqJfcjO3mivkhOo3F6wiQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFF5OIl4C3Sopz5ZdCwUFZZob5Ud7MB8GA1UdIwQYMBaAFMNXR29skHqhpVU/
j6T94ze8FaNZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWRkZjQy
NGRiNjM2NGZiYmQ2NTExN2Y1MDc3M2NhOGJjZTllYzk3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWU1MWE1NTQtZGNhNS00ZDMyLWJjNWEtZTgwZTg4
YTgxZTJiL2Y5MDRkYWZmZGUyOWY5M2I1ZmVlMmZiNTQ5OGQ3NDQ1ZjNmZjUzMTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZTUxYTU1NC1kY2E1LTRkMzItYmM1YS1lODBl
ODhhODFlMmIvNWRkZjQyNGRiNjM2NGZiYmQ2NTExN2Y1MDc3M2NhOGJjZTllYzk3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDkhAwDQYJKoZIhvcNAQELBQADggEBADmunMOUteT4BFHG
erhduXEzMjT6jfdg8wpa0QkIDd5435rK9eeNu70r7zBrBmW8X/wTzpN0uHSVIzcD
GVDldXP01xaVxVVH3LYxwheNsBXnGvp4xFKKc1vxFGp7pT1BGATk6o1I4kG57bpa
AThOYUi+OzY8fZojiMoz5yoA2irejda4LZjmdFx5AebNtq7o3dpAWSUH1JKS+oW1
LqKXDKRU0bXX01IewMZHaOeTPQn5wR1yVKkmssiYM7iQ2t1TtjjtxGTICVyXDEer
U94UpIGcz2WuXSqfYL85dMyeYCJFCYUZMHEeueU7ivT8/QlA2PA67DwEiOihitjO
mubvN+Y=
-----END CERTIFICATE-----