Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/4ad64ee5742105597115d2d91f7eaf2bf5483555.roa
File:                     4ad64ee5742105597115d2d91f7eaf2bf5483555.roa (raw, json)
Hash identifier:          vPsDHVBEVQ72DChhxjkLxqsaamdzTikBDmpIvHjwQ/0=
Subject key identifier:   0D:CD:37:85:10:F5:8F:17:81:F2:0A:2E:02:FF:F9:AE:F3:01:A6:29
Certificate issuer:       /CN=dc37554a8675388bc7f6946f7ce2c2de7afa9466
Certificate serial:       03BB9E
Authority key identifier: ED:CD:F0:EE:07:6E:52:AB:E8:6C:68:79:30:3E:BF:DE:49:C5:E4:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc37554a8675388bc7f6946f7ce2c2de7afa9466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/4ad64ee5742105597115d2d91f7eaf2bf5483555.roa
Signing time:             Wed 27 Dec 2023 20:33:49 +0000
ROA not before:           Wed 27 Dec 2023 20:33:49 +0000
ROA not after:            Sat 27 Dec 2025 20:33:49 +0000
asID:                     273040
IP address blocks:        2803:6b90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244638 (0x3bb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc37554a8675388bc7f6946f7ce2c2de7afa9466
        Validity
            Not Before: Dec 27 20:33:49 2023 GMT
            Not After : Dec 27 20:33:49 2025 GMT
        Subject: CN=4ad64ee5742105597115d2d91f7eaf2bf5483555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:86:95:55:a5:a6:51:c1:47:98:7c:aa:85:
                    16:10:3e:2e:90:b8:18:68:e3:b4:eb:1a:34:a8:e7:
                    b5:f8:3e:7e:a0:84:83:cc:5a:a0:3e:ea:07:b4:b7:
                    4f:1c:de:dc:37:10:0a:5e:d0:42:95:46:b9:f0:64:
                    36:09:d7:02:b1:4c:5b:2b:ec:e4:34:ad:cf:04:60:
                    f4:85:ce:e8:69:d3:2b:a3:a4:cd:9f:90:4f:c5:60:
                    9e:18:ac:bb:79:d5:d0:2e:0f:1a:29:4a:31:e1:52:
                    a9:f7:47:78:d0:af:10:4a:ee:99:12:54:24:3f:28:
                    16:83:e6:86:a1:19:ba:77:8e:90:92:74:02:8a:53:
                    b4:2e:28:d8:90:c9:41:c5:52:4c:3e:2a:36:c6:69:
                    16:26:02:cc:5c:13:94:a1:fb:ee:17:6a:4e:05:c2:
                    94:d5:2e:81:64:3d:78:a3:71:d1:51:7e:f5:7a:5a:
                    c2:af:2e:1c:60:74:f6:92:47:40:05:df:fb:af:fa:
                    f9:a7:3a:4f:c4:a5:3e:99:d0:ce:f1:87:16:23:a5:
                    d9:af:30:33:e8:9e:00:ad:03:03:f4:ab:97:c3:29:
                    9b:22:d0:62:89:8c:7b:5b:62:24:71:01:1a:68:42:
                    7e:3b:59:3d:b7:26:4c:e1:d6:02:74:13:d0:05:90:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:37:85:10:F5:8F:17:81:F2:0A:2E:02:FF:F9:AE:F3:01:A6:29
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:EE:07:6E:52:AB:E8:6C:68:79:30:3E:BF:DE:49:C5:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc37554a8675388bc7f6946f7ce2c2de7afa9466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/4ad64ee5742105597115d2d91f7eaf2bf5483555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/dc37554a8675388bc7f6946f7ce2c2de7afa9466.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:c7:0b:7a:5e:9b:00:9b:8b:f6:70:dd:50:cc:b4:4f:01:
         22:86:2a:b5:6c:7c:5a:8a:21:f3:f5:4b:74:23:97:f4:ba:28:
         c1:c2:74:d9:b7:0d:13:95:07:ef:21:ff:17:b9:7a:9f:7b:ac:
         62:6e:e1:00:57:57:19:23:7b:f9:65:24:93:b7:ba:67:91:54:
         7c:a6:10:70:1c:52:e5:90:ca:93:67:3d:49:b7:33:80:12:d1:
         c6:d6:65:34:d4:03:39:ee:2d:4d:9d:40:79:44:a1:33:ba:0f:
         82:51:5c:c9:3a:e6:70:34:1c:76:62:14:44:54:67:05:14:b6:
         fd:c3:31:5b:62:15:b2:3a:5e:4e:cd:b9:48:cc:5f:3e:ef:df:
         9a:37:67:c9:f2:48:ff:2e:09:17:da:47:65:bf:64:3b:e9:41:
         40:86:33:8f:88:de:fa:b2:c6:29:5c:00:48:59:33:d9:ab:c7:
         56:c4:80:89:b4:f3:5d:4b:52:94:10:86:15:88:6d:e9:2f:f6:
         24:9a:88:ec:84:0e:f0:ee:e4:64:60:42:c9:9f:a8:3a:74:c4:
         be:d8:f6:ba:a6:2d:1d:9e:b5:17:6f:ea:5a:26:fd:39:be:1f:
         01:ab:88:f5:f1:04:cf:c5:40:a9:63:4a:72:c8:5c:17:5c:d9:
         cb:1a:6e:cd
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDA7ueMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
Mzc1NTRhODY3NTM4OGJjN2Y2OTQ2ZjdjZTJjMmRlN2FmYTk0NjYwHhcNMjMxMjI3
MjAzMzQ5WhcNMjUxMjI3MjAzMzQ5WjAzMTEwLwYDVQQDEyg0YWQ2NGVlNTc0MjEw
NTU5NzExNWQyZDkxZjdlYWYyYmY1NDgzNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnZGGlVWlplHBR5h8qoUWED4ukLgYaOO06xo0qOe1+D5+oISD
zFqgPuoHtLdPHN7cNxAKXtBClUa58GQ2CdcCsUxbK+zkNK3PBGD0hc7oadMro6TN
n5BPxWCeGKy7edXQLg8aKUox4VKp90d40K8QSu6ZElQkPygWg+aGoRm6d46QknQC
ilO0LijYkMlBxVJMPio2xmkWJgLMXBOUofvuF2pOBcKU1S6BZD14o3HRUX71elrC
ry4cYHT2kkdABd/7r/r5pzpPxKU+mdDO8YcWI6XZrzAz6J4ArQMD9KuXwymbItBi
iYx7W2IkcQEaaEJ+O1k9tyZM4dYCdBPQBZB/zwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFA3NN4UQ9Y8XgfIKLgL/+a7zAaYpMB8GA1UdIwQYMBaAFO3N8O4HblKr6Gxo
eTA+v95JxeQLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGMzNzU1
NGE4Njc1Mzg4YmM3ZjY5NDZmN2NlMmMyZGU3YWZhOTQ2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmMyYmFkNWQtODdmMi00YjYzLWJjYTgtZmY3MDg5
YjBiZDlhLzRhZDY0ZWU1NzQyMTA1NTk3MTE1ZDJkOTFmN2VhZjJiZjU0ODM1NTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzJiYWQ1ZC04N2YyLTRiNjMtYmNhOC1mZjcw
ODliMGJkOWEvZGMzNzU1NGE4Njc1Mzg4YmM3ZjY5NDZmN2NlMmMyZGU3YWZhOTQ2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDa5AwDQYJKoZIhvcNAQELBQADggEBAHB6xwt6XpsAm4v2
cN1QzLRPASKGKrVsfFqKIfP1S3Qjl/S6KMHCdNm3DROVB+8h/xe5ep97rGJu4QBX
Vxkje/llJJO3umeRVHymEHAcUuWQypNnPUm3M4AS0cbWZTTUAznuLU2dQHlEoTO6
D4JRXMk65nA0HHZiFERUZwUUtv3DMVtiFbI6Xk7NuUjMXz7v35o3Z8nySP8uCRfa
R2W/ZDvpQUCGM4+I3vqyxilcAEhZM9mrx1bEgIm0811LUpQQhhWIbekv9iSaiOyE
DvDu5GRgQsmfqDp0xL7Y9rqmLR2etRdv6lom/Tm+HwGriPXxBM/FQKljSnLIXBdc
2csabs0=
-----END CERTIFICATE-----