Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/04eeb07be5669ce70211f05bb0a75bc265e01dbf.roa
File:                     04eeb07be5669ce70211f05bb0a75bc265e01dbf.roa (raw, json)
Hash identifier:          3fg2AGBp5XMP3sXJgIThW434sae4E6RYFTpZYklbLkk=
Subject key identifier:   83:D2:27:94:EA:DB:90:5C:85:E2:DD:AA:D5:BB:AB:E6:88:82:EB:0A
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       22738E
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/04eeb07be5669ce70211f05bb0a75bc265e01dbf.roa
Signing time:             Fri 11 Aug 2023 02:41:03 +0000
ROA not before:           Thu 10 Aug 2023 02:41:03 +0000
ROA not after:            Mon 11 Aug 2025 02:41:03 +0000
asID:                     272004
IP address blocks:        2803:f080:c000::/35 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257806 (0x22738e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Aug 10 02:41:03 2023 GMT
            Not After : Aug 11 02:41:03 2025 GMT
        Subject: CN=04eeb07be5669ce70211f05bb0a75bc265e01dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b6:94:ee:c5:82:08:0f:76:69:a0:d0:bf:ed:
                    db:26:c9:4f:c3:5c:ad:1c:5e:a2:71:b7:db:27:02:
                    96:ac:18:ae:26:49:f7:f7:1e:84:6a:06:cf:2e:17:
                    4a:b8:e7:fc:53:e1:db:1a:4c:00:b5:d8:ed:ce:df:
                    ea:78:15:ad:bb:4e:8c:de:34:2c:bb:48:4c:fd:60:
                    d6:5c:cf:7d:f6:1e:b8:6c:d4:b1:f2:0c:36:70:c8:
                    0d:01:f8:24:c2:4d:bc:b0:27:d4:8d:49:54:88:11:
                    8a:3d:ea:ac:aa:a6:b7:77:3b:ea:73:c5:5b:36:bc:
                    18:22:a1:c8:43:74:28:93:4b:7e:cf:08:cb:51:41:
                    44:3c:5b:64:53:14:d3:a4:c5:04:72:9c:a6:db:f2:
                    9b:02:c5:e8:0b:53:7b:ce:09:2a:91:30:64:35:03:
                    76:57:e3:1e:bd:cf:fb:c6:52:7e:0a:3c:ad:c9:3e:
                    db:a6:bf:3c:01:af:3f:42:c9:44:75:35:69:72:c4:
                    28:20:aa:86:8d:e4:48:76:1e:6a:79:e6:a9:d5:1b:
                    c0:31:91:77:69:58:10:b1:a5:e5:d6:d3:ec:fb:c8:
                    d8:1c:29:10:f7:48:b3:49:23:da:9e:b7:7e:25:19:
                    56:8c:1d:bc:8a:8b:de:09:cc:3e:1c:53:1c:95:52:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D2:27:94:EA:DB:90:5C:85:E2:DD:AA:D5:BB:AB:E6:88:82:EB:0A
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/04eeb07be5669ce70211f05bb0a75bc265e01dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:52:ff:5f:63:5a:eb:bc:aa:19:8f:99:ff:a7:6c:ac:f4:
         e9:b7:84:72:c1:39:2c:4b:4c:d3:50:e4:23:34:b1:c6:10:72:
         90:9a:05:4e:71:70:21:d9:4d:19:2a:3e:37:00:fb:4d:81:dd:
         b3:1c:1a:01:f6:3a:31:f9:52:49:5b:f7:64:4f:c1:80:bd:fc:
         20:83:63:c8:38:b1:84:38:18:09:6f:c7:41:1d:11:a3:26:47:
         8c:09:18:11:ec:66:fa:33:cb:6b:00:89:0c:77:34:69:d2:b0:
         23:ae:71:01:82:c6:ab:5e:56:34:ab:45:4a:cb:a2:5c:ec:7d:
         5e:0f:df:d7:c4:64:f1:59:50:6a:a4:6b:b9:e6:ce:40:e1:12:
         3d:69:c8:76:45:ab:f7:b8:21:9c:f3:61:0b:f1:f6:c4:47:c2:
         b8:04:92:ba:4e:ff:fa:54:73:5f:8e:f4:9c:cb:51:a4:2a:b3:
         95:2a:8f:70:33:54:56:1b:97:fc:f0:2a:df:f7:28:6b:b2:dc:
         ad:79:63:62:bb:c7:d1:72:d7:7e:d3:d5:bf:c5:10:ee:0f:f4:
         6c:a7:a6:bc:fa:21:73:5a:14:50:47:1c:6b:4e:8a:f2:9f:6e:
         f1:98:84:0c:d4:21:e9:a4:f0:9c:89:88:67:d8:4d:38:51:dd:
         ab:1c:af:3c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDInOOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk
ZWZiNDk0NDk0ZDI1YmMxOWZiMTY1MzVlYTc0MmFkYzdhNzkyYjgwHhcNMjMwODEw
MDI0MTAzWhcNMjUwODExMDI0MTAzWjAzMTEwLwYDVQQDEygwNGVlYjA3YmU1NjY5
Y2U3MDIxMWYwNWJiMGE3NWJjMjY1ZTAxZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAibaU7sWCCA92aaDQv+3bJslPw1ytHF6icbfbJwKWrBiuJkn3
9x6EagbPLhdKuOf8U+HbGkwAtdjtzt/qeBWtu06M3jQsu0hM/WDWXM999h64bNSx
8gw2cMgNAfgkwk28sCfUjUlUiBGKPeqsqqa3dzvqc8VbNrwYIqHIQ3Qok0t+zwjL
UUFEPFtkUxTTpMUEcpym2/KbAsXoC1N7zgkqkTBkNQN2V+Mevc/7xlJ+CjytyT7b
pr88Aa8/QslEdTVpcsQoIKqGjeRIdh5qeeap1RvAMZF3aVgQsaXl1tPs+8jYHCkQ
90izSSPanrd+JRlWjB28ioveCcw+HFMclVL1BQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFIPSJ5Tq25BcheLdqtW7q+aIgusKMB8GA1UdIwQYMBaAFFR09pEaOi4wvYXK
O6DZ3v5LnbptMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2RlZmI0
OTQ0OTRkMjViYzE5ZmIxNjUzNWVhNzQyYWRjN2E3OTJiOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmNlOTAxNjctYWIwOS00ZGQyLWIzZTUtZDY4YmU1
MDdhN2E0LzA0ZWViMDdiZTU2NjljZTcwMjExZjA1YmIwYTc1YmMyNjVlMDFkYmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Y2U5MDE2Ny1hYjA5LTRkZDItYjNlNS1kNjhi
ZTUwN2E3YTQvY2RlZmI0OTQ0OTRkMjViYzE5ZmIxNjUzNWVhNzQyYWRjN2E3OTJi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBSgD8IDAMA0GCSqGSIb3DQEBCwUAA4IBAQB/TlL/X2Na67yq
GY+Z/6dsrPTpt4RywTksS0zTUOQjNLHGEHKQmgVOcXAh2U0ZKj43APtNgd2zHBoB
9jox+VJJW/dkT8GAvfwgg2PIOLGEOBgJb8dBHRGjJkeMCRgR7Gb6M8trAIkMdzRp
0rAjrnEBgsarXlY0q0VKy6Jc7H1eD9/XxGTxWVBqpGu55s5A4RI9ach2Rav3uCGc
82EL8fbER8K4BJK6Tv/6VHNfjvScy1GkKrOVKo9wM1RWG5f88Crf9yhrstyteWNi
u8fRctd+09W/xRDuD/Rsp6a8+iFzWhRQRxxrToryn27xmIQM1CHppPCciYhn2E04
Ud2rHK88
-----END CERTIFICATE-----