Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/bec06da18b3edf99717ceb9608ecd3d397f31d5f.roa
File:                     bec06da18b3edf99717ceb9608ecd3d397f31d5f.roa (raw, json)
Hash identifier:          n8K2w/eu5vOJjRCsYkUNiGVuTlwEUSg/ub9Va3o0GeU=
Subject key identifier:   5A:67:4B:20:61:26:D4:FD:91:28:D5:0E:5F:5E:4D:76:C0:CE:37:67
Certificate issuer:       /CN=70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287
Certificate serial:       1EB10A
Authority key identifier: 80:14:79:54:5E:0A:B4:F5:6E:58:C3:EA:7A:D6:4E:DB:A8:5A:A6:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/bec06da18b3edf99717ceb9608ecd3d397f31d5f.roa
Signing time:             Thu 29 Feb 2024 19:50:59 +0000
ROA not before:           Thu 29 Feb 2024 19:50:59 +0000
ROA not after:            Sat 28 Feb 2026 19:50:59 +0000
asID:                     27964
IP address blocks:        2803:6ee0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011402 (0x1eb10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287
        Validity
            Not Before: Feb 29 19:50:59 2024 GMT
            Not After : Feb 28 19:50:59 2026 GMT
        Subject: CN=bec06da18b3edf99717ceb9608ecd3d397f31d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:a3:c1:34:fd:de:b3:7b:a3:e0:14:9e:1a:
                    70:47:95:d2:93:b4:77:5b:53:18:d9:4d:0b:6e:87:
                    f5:4b:59:33:0e:04:11:71:84:3b:33:11:49:09:21:
                    4d:c2:bf:32:40:0e:57:56:d1:32:04:3d:d5:2f:e2:
                    58:b3:b9:e2:63:c3:22:27:5c:57:ec:6f:a3:95:d2:
                    0b:20:39:fe:93:65:09:be:aa:18:af:f2:3c:c0:de:
                    d9:c3:48:3c:6b:2b:3a:5e:cc:14:79:7f:cb:9a:8b:
                    79:f0:9a:d2:b5:91:fd:a9:7b:ba:00:06:c7:33:7f:
                    26:32:4a:22:b1:50:c6:0a:96:33:cd:c4:03:22:95:
                    b6:48:c1:f4:16:e2:fb:7c:bc:6d:43:72:0e:2e:7e:
                    25:12:eb:1b:28:3f:11:a8:30:2e:17:6b:a8:6e:48:
                    f4:1d:74:b9:99:b9:21:26:dd:cd:79:50:02:2f:55:
                    16:80:96:60:a8:ea:06:d5:fd:e6:05:6f:0a:4e:44:
                    47:89:01:6b:ad:fb:0f:0c:d2:d7:e4:98:0e:3a:83:
                    8e:34:14:68:2c:be:da:46:a5:2a:a3:72:cb:f0:29:
                    df:d3:14:8c:2f:56:e1:de:04:a2:f3:be:7d:40:ee:
                    9e:2f:d0:35:aa:ae:13:e5:83:88:d2:d9:9e:61:70:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:67:4B:20:61:26:D4:FD:91:28:D5:0E:5F:5E:4D:76:C0:CE:37:67
            X509v3 Authority Key Identifier:
                keyid:80:14:79:54:5E:0A:B4:F5:6E:58:C3:EA:7A:D6:4E:DB:A8:5A:A6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/bec06da18b3edf99717ceb9608ecd3d397f31d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66878e2d-2037-43a0-8432-7dba374cc44b/70bd51b247bb1c40b4d3b6bb2f7bd567d86e8287.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:67:f5:c8:d9:c6:8f:de:91:db:f2:16:31:9d:cf:01:2f:b3:
         f7:4d:2c:a9:df:40:56:2e:cd:82:e6:ac:73:3d:da:5a:c7:34:
         c9:8f:54:24:92:a2:f6:72:57:8d:3e:9c:24:55:14:d0:56:e5:
         4b:70:f8:d8:a7:c9:82:2f:a8:73:3b:a4:46:3b:73:2c:71:db:
         e4:41:c4:ed:f2:8d:f6:29:dd:f3:1b:0f:59:ac:6c:6a:2f:21:
         ab:ab:3c:fc:d1:09:5f:0e:98:f5:05:f1:35:66:bf:41:4c:30:
         ac:b4:3d:d4:80:ff:9c:e0:70:58:40:00:52:3d:f9:4d:58:c0:
         d3:12:50:c9:3c:45:25:99:56:ea:8f:4f:5a:9f:49:b0:70:a8:
         a5:c5:f0:aa:5a:e4:db:0f:a9:7b:15:88:e3:f0:a3:4e:68:f6:
         20:6a:9a:64:21:c3:7f:45:19:90:20:63:e3:6d:aa:4b:21:43:
         be:06:3b:ba:76:e0:89:06:59:8a:2a:da:60:0a:9d:bd:cc:a5:
         20:cb:07:ff:08:1c:b4:12:2b:6c:f9:2a:c8:7c:e1:35:00:a6:
         dc:21:24:cd:2f:83:7c:e4:9b:1f:00:51:82:33:df:65:06:6e:
         cd:1c:e2:23:bd:1e:25:5d:db:3c:40:0e:9f:ed:41:26:94:38:
         97:ab:bf:ba
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHrEKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
YmQ1MWIyNDdiYjFjNDBiNGQzYjZiYjJmN2JkNTY3ZDg2ZTgyODcwHhcNMjQwMjI5
MTk1MDU5WhcNMjYwMjI4MTk1MDU5WjAzMTEwLwYDVQQDEyhiZWMwNmRhMThiM2Vk
Zjk5NzE3Y2ViOTYwOGVjZDNkMzk3ZjMxZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1YijwTT93rN7o+AUnhpwR5XSk7R3W1MY2U0Lbof1S1kzDgQR
cYQ7MxFJCSFNwr8yQA5XVtEyBD3VL+JYs7niY8MiJ1xX7G+jldILIDn+k2UJvqoY
r/I8wN7Zw0g8ays6XswUeX/Lmot58JrStZH9qXu6AAbHM38mMkoisVDGCpYzzcQD
IpW2SMH0FuL7fLxtQ3IOLn4lEusbKD8RqDAuF2uobkj0HXS5mbkhJt3NeVACL1UW
gJZgqOoG1f3mBW8KTkRHiQFrrfsPDNLX5JgOOoOONBRoLL7aRqUqo3LL8Cnf0xSM
L1bh3gSi8759QO6eL9A1qq4T5YOI0tmeYXCWHQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFFpnSyBhJtT9kSjVDl9eTXbAzjdnMB8GA1UdIwQYMBaAFIAUeVReCrT1bljD
6nrWTtuoWqYtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzBiZDUx
YjI0N2JiMWM0MGI0ZDNiNmJiMmY3YmQ1NjdkODZlODI4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjY4NzhlMmQtMjAzNy00M2EwLTg0MzItN2RiYTM3
NGNjNDRiL2JlYzA2ZGExOGIzZWRmOTk3MTdjZWI5NjA4ZWNkM2QzOTdmMzFkNWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Njg3OGUyZC0yMDM3LTQzYTAtODQzMi03ZGJh
Mzc0Y2M0NGIvNzBiZDUxYjI0N2JiMWM0MGI0ZDNiNmJiMmY3YmQ1NjdkODZlODI4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDbuAwDQYJKoZIhvcNAQELBQADggEBAANn9cjZxo/ekdvy
FjGdzwEvs/dNLKnfQFYuzYLmrHM92lrHNMmPVCSSovZyV40+nCRVFNBW5Utw+Nin
yYIvqHM7pEY7cyxx2+RBxO3yjfYp3fMbD1msbGovIaurPPzRCV8OmPUF8TVmv0FM
MKy0PdSA/5zgcFhAAFI9+U1YwNMSUMk8RSWZVuqPT1qfSbBwqKXF8Kpa5NsPqXsV
iOPwo05o9iBqmmQhw39FGZAgY+NtqkshQ74GO7p24IkGWYoq2mAKnb3MpSDLB/8I
HLQSK2z5Ksh84TUAptwhJM0vg3zkmx8AUYIz32UGbs0c4iO9HiVd2zxADp/tQSaU
OJerv7o=
-----END CERTIFICATE-----