Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/7909c48803b3d8eb3ae3b54c0f4c92368743d0ee.roa
File:                     7909c48803b3d8eb3ae3b54c0f4c92368743d0ee.roa (raw, json)
Hash identifier:          01YMUZS4ax/vwRCb6hxECmRZbm1OoCuXT9U/hYW9aDQ=
Subject key identifier:   CD:B0:BB:29:81:3E:76:40:FB:37:8A:43:DA:FA:34:EE:FF:A9:E0:BC
Certificate issuer:       /CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
Certificate serial:       1D709B
Authority key identifier: 03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/7909c48803b3d8eb3ae3b54c0f4c92368743d0ee.roa
Signing time:             Tue 01 Aug 2023 02:18:56 +0000
ROA not before:           Mon 31 Jul 2023 02:18:55 +0000
ROA not after:            Fri 01 Aug 2025 02:18:55 +0000
asID:                     269989
IP address blocks:        2803:bee0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929371 (0x1d709b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3089555a2ff274cc3f3d658901d3ac99e4a448d
        Validity
            Not Before: Jul 31 02:18:55 2023 GMT
            Not After : Aug  1 02:18:55 2025 GMT
        Subject: CN=7909c48803b3d8eb3ae3b54c0f4c92368743d0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:fc:aa:4e:14:d8:2a:f8:98:67:59:b7:9a:
                    2b:93:dd:e1:e5:57:0c:4c:df:a9:5d:34:64:80:75:
                    0c:a8:3a:a0:19:b3:86:d6:94:53:26:4a:4a:c8:0d:
                    86:c6:1f:d4:b7:d6:31:de:dc:03:0b:64:c6:ec:89:
                    d5:b3:a3:bc:0d:1c:c2:c1:5a:f4:1b:1d:ea:69:d5:
                    40:c7:0f:af:76:75:39:e1:b3:6f:54:90:c3:6c:03:
                    97:1a:ea:9b:a6:7a:86:cb:be:6b:0f:0e:32:85:1f:
                    ca:f1:78:db:fe:47:7a:8f:73:dd:06:d7:55:04:3e:
                    92:bf:ec:87:65:ff:81:60:8d:dd:ff:7d:3f:07:d9:
                    68:2d:cc:f3:1b:15:83:66:cc:12:82:5b:e4:da:59:
                    ca:47:26:d2:21:6c:a9:b2:6d:4a:1f:89:91:b4:4c:
                    b3:96:98:38:40:cb:3c:43:17:09:3a:20:61:64:76:
                    63:80:1a:52:45:ec:63:9a:f9:89:04:d8:de:6f:8e:
                    21:1e:ca:ba:8b:16:32:1a:c5:4c:4c:0d:65:9e:2a:
                    12:a9:b9:cf:10:df:8b:46:46:d2:4c:d3:9a:e5:b4:
                    69:f8:8c:bc:25:90:bf:7f:a1:ab:79:3a:92:d2:55:
                    ee:87:10:d4:ce:08:2e:dc:41:99:51:f7:d8:5d:14:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B0:BB:29:81:3E:76:40:FB:37:8A:43:DA:FA:34:EE:FF:A9:E0:BC
            X509v3 Authority Key Identifier:
                keyid:03:5B:49:76:39:53:8C:71:71:AC:A4:D7:F4:6C:03:80:19:6E:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3089555a2ff274cc3f3d658901d3ac99e4a448d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/7909c48803b3d8eb3ae3b54c0f4c92368743d0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d26b71a-ea69-4ab9-b972-634f6cb6bdec/b3089555a2ff274cc3f3d658901d3ac99e4a448d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:1e:e7:14:92:7a:54:fa:1f:48:84:d2:38:74:8c:cf:18:
         9a:8e:1a:71:aa:31:6e:f8:e7:5b:3d:e4:0a:9b:72:84:26:5c:
         bf:bd:1b:2e:24:53:62:7c:0b:90:fb:4d:db:62:4a:27:4b:2f:
         9d:24:a1:83:ff:77:8b:c3:b4:c6:c5:a2:1e:4d:50:2c:c3:4f:
         1f:7e:db:de:e0:dd:92:93:81:e9:0b:ae:04:8b:ae:2a:25:f1:
         30:07:64:1f:f8:d4:cf:d3:08:c4:a6:39:90:9a:3d:1a:51:66:
         46:27:a1:d0:ec:9f:46:b9:bf:5c:f3:c3:2f:79:16:50:04:5d:
         65:06:66:4b:46:74:73:72:f8:f8:92:ca:b0:3a:de:ff:35:a0:
         55:cc:a1:ac:da:71:65:2a:fe:36:4b:1b:2b:35:f0:8a:e5:b5:
         de:6e:45:d9:42:98:47:1f:12:83:62:c6:47:6c:00:35:2c:39:
         b4:48:36:d7:ba:e3:7c:e0:70:06:8c:b0:0c:41:fd:da:96:8a:
         80:77:16:09:00:9f:83:18:c7:99:0a:43:e3:87:67:5b:01:77:
         be:8b:fe:c4:d0:6e:23:e3:85:51:b2:7c:ae:1e:d0:93:ab:f8:
         44:c5:c8:03:72:99:7d:2f:13:74:98:89:c9:3d:f5:c4:7e:d2:
         8f:6c:56:e9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHXCbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
MDg5NTU1YTJmZjI3NGNjM2YzZDY1ODkwMWQzYWM5OWU0YTQ0OGQwHhcNMjMwNzMx
MDIxODU1WhcNMjUwODAxMDIxODU1WjAzMTEwLwYDVQQDEyg3OTA5YzQ4ODAzYjNk
OGViM2FlM2I1NGMwZjRjOTIzNjg3NDNkMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoiP8qk4U2Cr4mGdZt5ork93h5VcMTN+pXTRkgHUMqDqgGbOG
1pRTJkpKyA2Gxh/Ut9Yx3twDC2TG7InVs6O8DRzCwVr0Gx3qadVAxw+vdnU54bNv
VJDDbAOXGuqbpnqGy75rDw4yhR/K8Xjb/kd6j3PdBtdVBD6Sv+yHZf+BYI3d/30/
B9loLczzGxWDZswSglvk2lnKRybSIWypsm1KH4mRtEyzlpg4QMs8QxcJOiBhZHZj
gBpSRexjmvmJBNjeb44hHsq6ixYyGsVMTA1lnioSqbnPEN+LRkbSTNOa5bRp+Iy8
JZC/f6GreTqS0lXuhxDUzggu3EGZUffYXRQTfQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFM2wuymBPnZA+zeKQ9r6NO7/qeC8MB8GA1UdIwQYMBaAFANbSXY5U4xxcayk
1/RsA4AZbt9lMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjMwODk1
NTVhMmZmMjc0Y2MzZjNkNjU4OTAxZDNhYzk5ZTRhNDQ4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmQyNmI3MWEtZWE2OS00YWI5LWI5NzItNjM0ZjZj
YjZiZGVjLzc5MDljNDg4MDNiM2Q4ZWIzYWUzYjU0YzBmNGM5MjM2ODc0M2QwZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZDI2YjcxYS1lYTY5LTRhYjktYjk3Mi02MzRm
NmNiNmJkZWMvYjMwODk1NTVhMmZmMjc0Y2MzZjNkNjU4OTAxZDNhYzk5ZTRhNDQ4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDvuAwDQYJKoZIhvcNAQELBQADggEBADC0HucUknpU+h9I
hNI4dIzPGJqOGnGqMW7451s95AqbcoQmXL+9Gy4kU2J8C5D7TdtiSidLL50koYP/
d4vDtMbFoh5NUCzDTx9+297g3ZKTgekLrgSLriol8TAHZB/41M/TCMSmOZCaPRpR
ZkYnodDsn0a5v1zzwy95FlAEXWUGZktGdHNy+PiSyrA63v81oFXMoazacWUq/jZL
Gys18Irltd5uRdlCmEcfEoNixkdsADUsObRINte643zgcAaMsAxB/dqWioB3FgkA
n4MYx5kKQ+OHZ1sBd76L/sTQbiPjhVGyfK4e0JOr+ETFyANymX0vE3SYick99cR+
0o9sVuk=
-----END CERTIFICATE-----