Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/9137d1b8cd17d2cb39b86faebf709575c541fc97.roa
File:                     9137d1b8cd17d2cb39b86faebf709575c541fc97.roa (raw, json)
Hash identifier:          931ehGE9Xq67Qc4d70NjI+extuXp9VGl9T2uSNjIA+8=
Subject key identifier:   80:E8:E8:5E:DF:81:76:CE:AF:39:C5:11:8C:75:FB:76:80:1E:5F:6F
Certificate issuer:       /CN=f59034a47bc7b32a68881b8889be41399703be74
Certificate serial:       1DB4B8
Authority key identifier: 28:AE:CB:EB:18:78:8A:F5:68:2B:5C:0B:4E:37:C4:25:52:5D:6E:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59034a47bc7b32a68881b8889be41399703be74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/9137d1b8cd17d2cb39b86faebf709575c541fc97.roa
Signing time:             Fri 10 Mar 2023 12:43:25 +0000
ROA not before:           Wed 08 Mar 2023 12:34:46 +0000
ROA not after:            Mon 10 Mar 2025 13:34:46 +0000
asID:                     265749
IP address blocks:        2803:cbc0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946808 (0x1db4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59034a47bc7b32a68881b8889be41399703be74
        Validity
            Not Before: Mar  8 12:34:46 2023 GMT
            Not After : Mar 10 13:34:46 2025 GMT
        Subject: CN=9137d1b8cd17d2cb39b86faebf709575c541fc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:a5:7f:ef:6e:c1:58:ef:af:5c:f9:84:1d:
                    f2:3c:b3:b7:99:b3:b4:e0:8e:83:06:bd:98:27:e0:
                    5c:6e:a8:f1:ff:07:4d:63:3b:1f:28:c6:ba:e3:54:
                    ac:14:87:c8:7e:67:04:02:a9:46:59:0f:a2:8d:5b:
                    4b:e4:06:84:c1:f0:e2:9d:d1:10:1f:f0:73:22:c1:
                    3f:d2:03:4f:02:61:d5:09:cb:00:28:27:d8:97:6e:
                    e4:00:d7:02:89:64:5a:30:a8:3e:78:83:23:99:e6:
                    15:38:3d:6b:8e:2f:18:18:37:4f:91:d7:54:e0:d1:
                    bf:eb:e6:58:de:ee:b8:b9:c3:26:1d:08:b3:e2:51:
                    88:e8:88:f2:58:ff:9b:f0:b8:f5:e3:b7:3b:e5:53:
                    54:29:fa:76:b9:5e:c9:52:aa:c8:28:8a:e0:34:01:
                    1e:65:a2:52:ab:85:e0:20:8e:a8:6f:63:89:27:9a:
                    a6:6b:a9:ac:fa:70:c4:15:02:da:29:05:65:fc:9d:
                    e2:d8:56:75:86:28:9f:27:08:a3:e0:57:6e:78:d9:
                    1d:a6:23:a0:e6:6c:aa:1a:9a:4a:19:aa:87:7e:23:
                    b6:5f:a4:aa:25:58:40:85:1b:ac:37:c9:4e:84:6b:
                    e7:9c:78:47:0d:5a:28:55:79:73:06:ec:3b:48:bb:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:E8:5E:DF:81:76:CE:AF:39:C5:11:8C:75:FB:76:80:1E:5F:6F
            X509v3 Authority Key Identifier:
                keyid:28:AE:CB:EB:18:78:8A:F5:68:2B:5C:0B:4E:37:C4:25:52:5D:6E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59034a47bc7b32a68881b8889be41399703be74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/9137d1b8cd17d2cb39b86faebf709575c541fc97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6609e06b-e5d7-48c9-b0a0-0013e99ce9d7/f59034a47bc7b32a68881b8889be41399703be74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:46:a5:5b:76:90:b3:92:94:db:7e:14:bc:f0:da:89:44:8c:
         e1:a0:b2:c3:47:36:0a:28:bc:85:0a:ff:71:72:4c:01:0d:8c:
         a2:91:32:8a:28:64:a2:8d:75:4a:ec:e3:33:35:99:d9:51:8f:
         44:2a:be:83:8a:7e:94:48:4d:fd:c2:f6:df:ed:c0:e6:54:d3:
         1e:87:3e:42:23:e4:d0:4f:b1:9f:43:ce:f7:e7:98:95:36:a1:
         c9:60:ed:f3:0c:10:b7:35:6c:c7:17:eb:ee:e4:80:44:c0:c2:
         f9:63:3e:5b:8f:c5:b6:b5:84:b2:0b:16:f2:ef:84:38:1d:48:
         e9:41:c0:c1:11:57:1e:e0:d6:64:8a:d9:47:76:ef:92:c5:b4:
         d2:b3:b5:cb:cb:4f:e6:be:f3:f6:ad:7b:88:a1:6e:7e:28:ef:
         0d:6c:6b:f9:28:5f:4c:d5:8d:c4:f7:a4:44:31:f4:a5:7b:d0:
         7f:cd:d8:49:12:4c:2b:49:54:d4:33:f2:ae:7e:d8:38:fa:8f:
         af:e3:34:0f:c5:a5:4e:c1:42:57:87:9b:99:52:55:7c:6e:11:
         69:30:c8:ca:9e:20:40:1e:6d:8f:21:ce:d7:e7:9a:9b:df:c1:
         fa:44:f0:11:9f:a1:c0:9a:57:38:a4:d1:65:c6:ea:66:5f:60:
         d0:e5:f2:50
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHbS4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OTAzNGE0N2JjN2IzMmE2ODg4MWI4ODg5YmU0MTM5OTcwM2JlNzQwHhcNMjMwMzA4
MTIzNDQ2WhcNMjUwMzEwMTMzNDQ2WjAzMTEwLwYDVQQDEyg5MTM3ZDFiOGNkMTdk
MmNiMzliODZmYWViZjcwOTU3NWM1NDFmYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxRulf+9uwVjvr1z5hB3yPLO3mbO04I6DBr2YJ+Bcbqjx/wdN
YzsfKMa641SsFIfIfmcEAqlGWQ+ijVtL5AaEwfDindEQH/BzIsE/0gNPAmHVCcsA
KCfYl27kANcCiWRaMKg+eIMjmeYVOD1rji8YGDdPkddU4NG/6+ZY3u64ucMmHQiz
4lGI6IjyWP+b8Lj147c75VNUKfp2uV7JUqrIKIrgNAEeZaJSq4XgII6ob2OJJ5qm
a6ms+nDEFQLaKQVl/J3i2FZ1hiifJwij4FdueNkdpiOg5myqGppKGaqHfiO2X6Sq
JVhAhRusN8lOhGvnnHhHDVooVXlzBuw7SLs6FQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIDo6F7fgXbOrznFEYx1+3aAHl9vMB8GA1UdIwQYMBaAFCiuy+sYeIr1aCtc
C043xCVSXW6sMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU5MDM0
YTQ3YmM3YjMyYTY4ODgxYjg4ODliZTQxMzk5NzAzYmU3NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjYwOWUwNmItZTVkNy00OGM5LWIwYTAtMDAxM2U5
OWNlOWQ3LzkxMzdkMWI4Y2QxN2QyY2IzOWI4NmZhZWJmNzA5NTc1YzU0MWZjOTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NjA5ZTA2Yi1lNWQ3LTQ4YzktYjBhMC0wMDEz
ZTk5Y2U5ZDcvZjU5MDM0YTQ3YmM3YjMyYTY4ODgxYjg4ODliZTQxMzk5NzAzYmU3
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDy8AwDQYJKoZIhvcNAQELBQADggEBAApGpVt2kLOSlNt+
FLzw2olEjOGgssNHNgoovIUK/3FyTAENjKKRMoooZKKNdUrs4zM1mdlRj0QqvoOK
fpRITf3C9t/twOZU0x6HPkIj5NBPsZ9DzvfnmJU2oclg7fMMELc1bMcX6+7kgETA
wvljPluPxba1hLILFvLvhDgdSOlBwMERVx7g1mSK2Ud275LFtNKztcvLT+a+8/at
e4ihbn4o7w1sa/koX0zVjcT3pEQx9KV70H/N2EkSTCtJVNQz8q5+2Dj6j6/jNA/F
pU7BQleHm5lSVXxuEWkwyMqeIEAebY8hztfnmpvfwfpE8BGfocCaVzik0WXG6mZf
YNDl8lA=
-----END CERTIFICATE-----