Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa
File:                     db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa (raw, json)
Hash identifier:          /fQLrBLtFeQOLQYMG3ru48q7aH8lcyPU7hrXk0xWsRo=
Subject key identifier:   8D:48:D7:75:F7:CE:12:FD:06:09:7F:44:3B:D1:44:E0:FD:CD:B8:BE
Certificate issuer:       /CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785
Certificate serial:       035BDD
Authority key identifier: 5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa
Signing time:             Sat 29 Oct 2022 22:37:25 +0000
ROA not before:           Fri 28 Oct 2022 22:36:44 +0000
ROA not after:            Tue 29 Oct 2024 22:36:44 +0000
asID:                     272146
IP address blocks:        2803:d090:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220125 (0x35bdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785
        Validity
            Not Before: Oct 28 22:36:44 2022 GMT
            Not After : Oct 29 22:36:44 2024 GMT
        Subject: CN=db584dddc2551c5c0ef22f2567dc648e2e7a69fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:0f:ca:e1:1c:a6:36:c2:b9:95:0a:f4:3d:
                    cd:d6:2e:3b:3c:72:e1:24:ea:cf:d5:95:8a:e2:4e:
                    20:ab:e7:59:e5:34:15:e6:94:87:4f:5c:3f:1d:1a:
                    76:bd:ce:e1:3d:bb:bf:34:f5:62:69:3a:87:5a:90:
                    e0:51:62:20:0f:42:76:7d:05:b3:70:0e:39:8b:ef:
                    b6:99:36:f8:1e:74:fb:85:62:d6:8b:04:3c:a6:c2:
                    07:9c:80:07:50:b5:ff:1b:70:a0:49:b1:f5:1a:58:
                    e4:77:ae:7d:f3:f9:32:52:5a:1e:cc:b7:e5:f9:40:
                    89:48:46:65:9a:92:5c:7c:b3:a7:be:91:f0:07:57:
                    bd:f1:90:88:aa:a6:00:10:2e:d0:27:db:72:95:5a:
                    dd:59:7f:e5:83:96:fa:27:5d:1e:29:02:84:37:51:
                    be:67:bf:7f:ef:34:7e:cf:c4:cd:69:94:4a:a5:8b:
                    25:b5:55:fd:85:12:54:d7:e5:62:06:8d:9f:38:22:
                    96:ea:d2:93:dc:83:38:c7:b0:99:18:67:b9:79:3b:
                    f0:a3:4d:de:0f:92:79:6a:49:1d:45:84:c4:fd:cf:
                    b0:dc:38:81:1a:47:18:5d:ed:15:b6:7b:ac:dd:3b:
                    7c:82:d7:a2:25:cc:de:fb:26:b1:d8:48:9a:fc:b3:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:D7:75:F7:CE:12:FD:06:09:7F:44:3B:D1:44:E0:FD:CD:B8:BE
            X509v3 Authority Key Identifier:
                keyid:5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/db584dddc2551c5c0ef22f2567dc648e2e7a69fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d090:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:2f:77:76:6e:03:07:c2:b2:7b:c4:ad:fc:1b:01:85:ae:
         e3:6b:c3:4d:b2:42:b8:2f:dc:88:31:29:47:8f:40:cd:7a:1d:
         f9:e1:6f:56:7b:ba:fb:af:05:f5:04:5a:5b:d8:47:c8:6a:eb:
         6b:f6:bc:1f:75:3b:b2:be:b2:12:de:ff:3d:5d:da:a8:eb:28:
         e2:94:66:9f:1a:4c:2d:f1:18:93:66:68:83:c0:fe:37:51:6b:
         fc:60:00:b5:ae:4c:ae:4a:d6:10:78:bd:32:58:07:ac:ed:bb:
         a9:b0:ef:25:31:89:b1:e3:63:06:23:4b:b9:63:d9:6b:c1:27:
         10:7e:37:54:dc:7c:e0:af:e3:14:42:22:87:87:5b:b9:d1:4d:
         c1:fd:8a:90:b7:f3:17:b9:f1:3a:d3:cc:73:b6:68:52:5d:29:
         53:79:dd:de:06:3e:48:ee:c8:45:78:62:f2:6e:e0:a3:f4:2c:
         e1:6f:02:81:3b:ed:6c:9e:74:45:9d:27:d1:da:91:a4:b8:ad:
         75:46:43:a3:c8:01:d0:53:a6:6a:db:26:dd:ba:44:58:9a:55:
         f2:7c:09:00:aa:de:c0:eb:d0:cf:0c:b2:f6:39:cb:28:58:4a:
         36:e8:fb:cb:b7:8c:ed:74:b9:2b:ec:41:86:96:37:fb:e6:75:
         c0:60:cd:5b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDA1vdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA4
YTMzZWE5NWZmNDU0YmYzY2EwZTQxZjc5ZjlhMjIyOTRkNzQ3ODUwHhcNMjIxMDI4
MjIzNjQ0WhcNMjQxMDI5MjIzNjQ0WjAzMTEwLwYDVQQDEyhkYjU4NGRkZGMyNTUx
YzVjMGVmMjJmMjU2N2RjNjQ4ZTJlN2E2OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1aYPyuEcpjbCuZUK9D3N1i47PHLhJOrP1ZWK4k4gq+dZ5TQV
5pSHT1w/HRp2vc7hPbu/NPViaTqHWpDgUWIgD0J2fQWzcA45i++2mTb4HnT7hWLW
iwQ8psIHnIAHULX/G3CgSbH1Gljkd6598/kyUloezLfl+UCJSEZlmpJcfLOnvpHw
B1e98ZCIqqYAEC7QJ9tylVrdWX/lg5b6J10eKQKEN1G+Z79/7zR+z8TNaZRKpYsl
tVX9hRJU1+ViBo2fOCKW6tKT3IM4x7CZGGe5eTvwo03eD5J5akkdRYTE/c+w3DiB
GkcYXe0Vtnus3Tt8gteiJcze+yax2Eia/LOMqQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFI1I13X3zhL9Bgl/RDvRROD9zbi+MB8GA1UdIwQYMBaAFFs/pzt1MFaY4b/w
1nEDCyUiqTS8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDhhMzNl
YTk1ZmY0NTRiZjNjYTBlNDFmNzlmOWEyMjI5NGQ3NDc4NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmNlOTUyYTgtNGZjMi00NWE1LWI4YmYtMzliODM3
ZTFkZDljL2RiNTg0ZGRkYzI1NTFjNWMwZWYyMmYyNTY3ZGM2NDhlMmU3YTY5ZmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Y2U5NTJhOC00ZmMyLTQ1YTUtYjhiZi0zOWI4
MzdlMWRkOWMvMDhhMzNlYTk1ZmY0NTRiZjNjYTBlNDFmNzlmOWEyMjI5NGQ3NDc4
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBCgD0JBgMA0GCSqGSIb3DQEBCwUAA4IBAQCaYy93dm4DB8Ky
e8St/BsBha7ja8NNskK4L9yIMSlHj0DNeh354W9We7r7rwX1BFpb2EfIautr9rwf
dTuyvrIS3v89Xdqo6yjilGafGkwt8RiTZmiDwP43UWv8YAC1rkyuStYQeL0yWAes
7bupsO8lMYmx42MGI0u5Y9lrwScQfjdU3Hzgr+MUQiKHh1u50U3B/YqQt/MXufE6
08xztmhSXSlTed3eBj5I7shFeGLybuCj9CzhbwKBO+1snnRFnSfR2pGkuK11RkOj
yAHQU6Zq2ybdukRYmlXyfAkAqt7A69DPDLL2OcsoWEo26PvLt4ztdLkr7EGGljf7
5nXAYM1b
-----END CERTIFICATE-----