Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/8b1d23f06166fcc083f1975890e9baa94ec84cdd.roa
File:                     8b1d23f06166fcc083f1975890e9baa94ec84cdd.roa (raw, json)
Hash identifier:          LocbM0hr3fsPJpyKwmyWiVfAU85sqecBl4Fa8Oz2p2Y=
Subject key identifier:   E7:54:0C:12:12:CC:DC:B0:8F:D7:CD:FF:EF:64:68:AA:9D:B1:E5:E9
Certificate issuer:       /CN=4d446954aafa3d753308d3a0466a8574d0f27367
Certificate serial:       1B7966
Authority key identifier: 54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/8b1d23f06166fcc083f1975890e9baa94ec84cdd.roa
Signing time:             Tue 10 Oct 2023 16:46:33 +0000
ROA not before:           Mon 09 Oct 2023 16:46:32 +0000
ROA not after:            Fri 10 Oct 2025 16:46:32 +0000
asID:                     270173
IP address blocks:        2806:30c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800550 (0x1b7966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d446954aafa3d753308d3a0466a8574d0f27367
        Validity
            Not Before: Oct  9 16:46:32 2023 GMT
            Not After : Oct 10 16:46:32 2025 GMT
        Subject: CN=8b1d23f06166fcc083f1975890e9baa94ec84cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:8c:af:9b:78:ba:04:db:c5:1a:23:43:50:
                    ae:af:b8:e4:af:20:9d:ec:24:7d:a1:f9:bf:d6:94:
                    a3:d4:7e:50:5b:6f:c2:bc:6a:6f:0d:09:bc:3f:67:
                    1e:1f:a9:d2:7e:cc:25:54:ca:f8:47:c8:88:13:bc:
                    f1:62:4f:7b:53:e5:8e:f0:00:a3:1b:49:f3:d5:84:
                    1c:d4:28:2b:34:79:1c:8e:0b:23:9b:d8:c5:ad:d1:
                    1a:3b:17:fe:43:bf:30:c4:3f:8f:ee:3d:5e:ef:75:
                    a4:f8:3e:a6:e5:b7:92:06:eb:cb:fe:c8:b5:bb:fc:
                    a3:96:80:1a:25:4d:a1:73:aa:21:ca:e7:5e:f0:b1:
                    27:90:cd:9f:f7:78:f7:d2:f4:5e:4d:0a:e7:74:9b:
                    24:06:f6:d5:00:c6:c1:0b:2d:38:ff:25:4e:96:e6:
                    10:0b:1a:11:22:b6:4c:a0:0a:f5:fc:f7:13:5f:7f:
                    e3:03:2f:79:e6:8d:59:0b:4e:10:de:c5:8f:db:ce:
                    e1:85:06:a0:ea:60:65:12:99:24:9d:f2:44:88:6b:
                    8e:76:cb:45:b2:a1:b2:d3:8f:3a:05:a0:80:3e:e1:
                    ce:d4:20:27:f2:dc:ce:91:1d:9c:94:40:d8:a5:0a:
                    23:7e:a0:f2:68:04:04:a5:a3:d9:6f:b4:8c:a0:15:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:54:0C:12:12:CC:DC:B0:8F:D7:CD:FF:EF:64:68:AA:9D:B1:E5:E9
            X509v3 Authority Key Identifier:
                keyid:54:8F:B2:46:83:67:6F:24:AD:15:AC:B9:28:7E:CE:97:D6:1B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d446954aafa3d753308d3a0466a8574d0f27367.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/8b1d23f06166fcc083f1975890e9baa94ec84cdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e876fd2-310e-4a96-8e91-2c2626e4003e/4d446954aafa3d753308d3a0466a8574d0f27367.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:30c::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:12:a2:59:cb:92:28:d8:74:04:7b:f3:ba:b6:b4:27:20:a3:
         39:31:0b:c8:81:6f:1e:54:96:dd:7b:d2:57:fd:f9:c5:7c:9b:
         da:d2:36:37:c8:74:4b:23:08:e1:08:80:b7:62:78:8f:cb:ae:
         9b:c1:62:b9:5f:3b:03:00:90:fc:b6:43:39:17:dd:a0:38:82:
         ef:98:52:4a:82:74:9b:ac:9d:50:f0:6b:81:f9:9d:6a:c3:c1:
         c2:ef:26:7a:99:ec:d5:fb:0b:00:eb:71:b5:8e:a5:cb:6d:a1:
         90:2e:4f:4f:09:a9:f0:fa:2e:7e:5f:b5:fd:af:f3:c6:0d:e9:
         24:58:dc:88:70:55:cb:2d:3d:60:3e:59:9a:d5:b5:05:4b:a2:
         a0:bb:ca:a9:86:2c:a9:ec:4c:43:9d:e2:70:f6:ca:3f:b2:45:
         89:30:f2:c2:b6:9c:81:8f:2b:53:40:96:a1:aa:79:1d:8b:7c:
         e5:38:88:0c:94:27:cd:79:e3:c2:40:df:64:7d:7b:75:7b:01:
         5c:7f:a0:be:5f:69:a7:7d:05:67:be:dc:c1:d0:09:85:a1:1b:
         a1:2e:0b:fe:fd:c2:18:66:2d:e4:ce:98:2c:83:0d:36:95:b8:
         a4:91:f3:85:04:2b:48:5c:1a:b8:1e:b4:99:42:84:74:a0:98:
         91:a1:fc:e6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDG3lmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
NDQ2OTU0YWFmYTNkNzUzMzA4ZDNhMDQ2NmE4NTc0ZDBmMjczNjcwHhcNMjMxMDA5
MTY0NjMyWhcNMjUxMDEwMTY0NjMyWjAzMTEwLwYDVQQDEyg4YjFkMjNmMDYxNjZm
Y2MwODNmMTk3NTg5MGU5YmFhOTRlYzg0Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAls+Mr5t4ugTbxRojQ1Cur7jkryCd7CR9ofm/1pSj1H5QW2/C
vGpvDQm8P2ceH6nSfswlVMr4R8iIE7zxYk97U+WO8ACjG0nz1YQc1CgrNHkcjgsj
m9jFrdEaOxf+Q78wxD+P7j1e73Wk+D6m5beSBuvL/si1u/yjloAaJU2hc6ohyude
8LEnkM2f93j30vReTQrndJskBvbVAMbBCy04/yVOluYQCxoRIrZMoAr1/PcTX3/j
Ay955o1ZC04Q3sWP287hhQag6mBlEpkknfJEiGuOdstFsqGy0486BaCAPuHO1CAn
8tzOkR2clEDYpQojfqDyaAQEpaPZb7SMoBVbDQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOdUDBISzNywj9fN/+9kaKqdseXpMB8GA1UdIwQYMBaAFFSPskaDZ28krRWs
uSh+zpfWG6rdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ0NDY5
NTRhYWZhM2Q3NTMzMDhkM2EwNDY2YTg1NzRkMGYyNzM2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWU4NzZmZDItMzEwZS00YTk2LThlOTEtMmMyNjI2
ZTQwMDNlLzhiMWQyM2YwNjE2NmZjYzA4M2YxOTc1ODkwZTliYWE5NGVjODRjZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZTg3NmZkMi0zMTBlLTRhOTYtOGU5MS0yYzI2
MjZlNDAwM2UvNGQ0NDY5NTRhYWZhM2Q3NTMzMDhkM2EwNDY2YTg1NzRkMGYyNzM2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgGAwwwDQYJKoZIhvcNAQELBQADggEBABkSolnLkijYdAR7
87q2tCcgozkxC8iBbx5Ult170lf9+cV8m9rSNjfIdEsjCOEIgLdieI/LrpvBYrlf
OwMAkPy2QzkX3aA4gu+YUkqCdJusnVDwa4H5nWrDwcLvJnqZ7NX7CwDrcbWOpctt
oZAuT08JqfD6Ln5ftf2v88YN6SRY3IhwVcstPWA+WZrVtQVLoqC7yqmGLKnsTEOd
4nD2yj+yRYkw8sK2nIGPK1NAlqGqeR2LfOU4iAyUJ81548JA32R9e3V7AVx/oL5f
aad9BWe+3MHQCYWhG6EuC/79whhmLeTOmCyDDTaVuKSR84UEK0hcGrgetJlChHSg
mJGh/OY=
-----END CERTIFICATE-----