Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/654dc2cf519b91a615c4e46c34b1cc16d2cf0019.roa
File:                     654dc2cf519b91a615c4e46c34b1cc16d2cf0019.roa (raw, json)
Hash identifier:          PxShp4mIDIIhwCkISsWmKV5Q3/PfX1zk3vqYMTkEzAM=
Subject key identifier:   75:41:70:FB:B0:6E:67:71:64:DA:70:5A:56:19:B2:BD:F3:1C:2E:0A
Certificate issuer:       /CN=0617fe284eadaecc300caf805a55753001bc6052
Certificate serial:       064415
Authority key identifier: 23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/654dc2cf519b91a615c4e46c34b1cc16d2cf0019.roa
Signing time:             Tue 04 Jul 2023 01:50:18 +0000
ROA not before:           Mon 03 Jul 2023 01:50:18 +0000
ROA not after:            Fri 04 Jul 2025 01:50:18 +0000
asID:                     270141
IP address blocks:        2806:3dc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410645 (0x64415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0617fe284eadaecc300caf805a55753001bc6052
        Validity
            Not Before: Jul  3 01:50:18 2023 GMT
            Not After : Jul  4 01:50:18 2025 GMT
        Subject: CN=654dc2cf519b91a615c4e46c34b1cc16d2cf0019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:35:40:9a:98:0f:d7:2f:40:52:44:aa:9f:
                    92:c1:60:de:f0:43:06:44:cc:70:6a:04:42:c9:70:
                    20:35:26:e8:2b:79:c1:04:af:6d:b7:49:6c:4e:80:
                    79:c0:e7:40:37:f5:39:53:4b:2a:81:79:81:50:93:
                    9a:cc:58:9a:9b:11:ad:f7:46:cf:4e:ee:3f:42:66:
                    12:c6:d7:b2:24:76:1d:51:66:5d:88:1e:c2:db:cf:
                    d2:73:0c:93:70:6d:ff:f0:be:5d:bf:2e:89:5c:69:
                    2e:28:89:e3:b1:be:f3:20:e4:64:74:f3:d8:81:48:
                    48:31:5e:21:32:35:6d:e5:d4:03:eb:eb:a8:82:f8:
                    20:a9:24:68:ad:4d:c8:75:2c:cc:87:e7:2c:88:cb:
                    50:7c:e8:95:57:7b:a1:76:39:b6:09:5d:cb:40:2c:
                    c4:2d:ac:4a:f4:4d:19:d4:07:f1:94:57:fb:2b:a9:
                    31:1b:0c:4a:65:eb:1e:aa:52:aa:6d:17:d2:95:63:
                    ea:a8:d6:eb:cd:63:ea:8a:8b:25:09:49:f9:07:e7:
                    3b:1c:c2:c6:49:51:58:9c:0d:77:ef:41:50:de:fd:
                    9a:c6:82:c2:ee:7a:09:32:72:9b:6b:51:f8:98:18:
                    06:f8:94:f1:ac:6e:85:76:58:94:60:90:2a:ec:80:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:70:FB:B0:6E:67:71:64:DA:70:5A:56:19:B2:BD:F3:1C:2E:0A
            X509v3 Authority Key Identifier:
                keyid:23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/654dc2cf519b91a615c4e46c34b1cc16d2cf0019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:9c:97:33:5e:21:11:8b:52:a1:c6:19:49:49:89:7f:61:cc:
         2d:f1:a1:0a:82:b7:16:f0:49:82:a8:1d:ff:9e:ec:cc:bd:24:
         99:bb:76:9b:ea:f1:d3:a6:42:43:3d:b5:91:8d:1f:55:6c:ac:
         16:ee:9b:45:d5:a5:5e:a5:95:7c:cb:4d:15:45:6a:c2:2c:d8:
         51:3c:a1:aa:e9:53:6e:49:b9:c4:25:61:6f:1b:c5:67:5c:06:
         9f:98:1e:67:37:5b:65:58:f4:85:c7:9f:29:4e:88:3b:bf:7b:
         00:68:a9:1c:21:74:13:26:bb:ae:fc:d0:22:de:13:d0:af:35:
         42:48:02:29:ab:5c:09:a4:db:ca:99:6a:49:ee:2d:b4:0d:d2:
         ac:ae:44:27:5c:6e:1a:fd:16:39:9f:66:d2:c6:a8:98:cd:8b:
         7d:fe:7e:85:de:0f:9e:59:85:db:61:b8:39:1f:12:6e:dd:3c:
         df:e1:1b:08:f6:c2:e5:46:20:65:ad:e2:36:f9:f2:16:de:b4:
         ae:c4:f8:bf:e9:8d:e5:4b:8a:7e:79:28:df:2c:54:da:d8:1a:
         cd:c0:3a:ff:d2:69:73:b3:bc:46:95:5f:51:ef:f5:d0:eb:f2:
         81:3e:c9:88:f3:8e:6c:88:ea:e4:9d:c7:cd:b7:ea:26:ce:63:
         1e:d1:f6:28
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBkQVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA2
MTdmZTI4NGVhZGFlY2MzMDBjYWY4MDVhNTU3NTMwMDFiYzYwNTIwHhcNMjMwNzAz
MDE1MDE4WhcNMjUwNzA0MDE1MDE4WjAzMTEwLwYDVQQDEyg2NTRkYzJjZjUxOWI5
MWE2MTVjNGU0NmMzNGIxY2MxNmQyY2YwMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyto1QJqYD9cvQFJEqp+SwWDe8EMGRMxwagRCyXAgNSboK3nB
BK9tt0lsToB5wOdAN/U5U0sqgXmBUJOazFiamxGt90bPTu4/QmYSxteyJHYdUWZd
iB7C28/ScwyTcG3/8L5dvy6JXGkuKInjsb7zIORkdPPYgUhIMV4hMjVt5dQD6+uo
gvggqSRorU3IdSzMh+csiMtQfOiVV3uhdjm2CV3LQCzELaxK9E0Z1AfxlFf7K6kx
GwxKZeseqlKqbRfSlWPqqNbrzWPqioslCUn5B+c7HMLGSVFYnA1370FQ3v2axoLC
7noJMnKba1H4mBgG+JTxrG6FdliUYJAq7IBAlwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHVBcPuwbmdxZNpwWlYZsr3zHC4KMB8GA1UdIwQYMBaAFCMRrARoA4C9bXIB
fiOyJkgkVjx4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDYxN2Zl
Mjg0ZWFkYWVjYzMwMGNhZjgwNWE1NTc1MzAwMWJjNjA1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjg1NDEyYjktMGExMi00OTQ1LTk5YjctMGQ3OGQ0
MDYxYmYzLzY1NGRjMmNmNTE5YjkxYTYxNWM0ZTQ2YzM0YjFjYzE2ZDJjZjAwMTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ODU0MTJiOS0wYTEyLTQ5NDUtOTliNy0wZDc4
ZDQwNjFiZjMvMDYxN2ZlMjg0ZWFkYWVjYzMwMGNhZjgwNWE1NTc1MzAwMWJjNjA1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgGA9wwDQYJKoZIhvcNAQELBQADggEBAJ2clzNeIRGLUqHG
GUlJiX9hzC3xoQqCtxbwSYKoHf+e7My9JJm7dpvq8dOmQkM9tZGNH1VsrBbum0XV
pV6llXzLTRVFasIs2FE8oarpU25JucQlYW8bxWdcBp+YHmc3W2VY9IXHnylOiDu/
ewBoqRwhdBMmu6780CLeE9CvNUJIAimrXAmk28qZaknuLbQN0qyuRCdcbhr9Fjmf
ZtLGqJjNi33+foXeD55ZhdthuDkfEm7dPN/hGwj2wuVGIGWt4jb58hbetK7E+L/p
jeVLin55KN8sVNrYGs3AOv/SaXOzvEaVX1Hv9dDr8oE+yYjzjmyI6uSdx8236ibO
Yx7R9ig=
-----END CERTIFICATE-----