Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/fe1f89b32f8494fcb7143ecd6c77bda9b3d1d329.roa
File:                     fe1f89b32f8494fcb7143ecd6c77bda9b3d1d329.roa (raw, json)
Hash identifier:          VUN4R5Yldc5QKYYwY8JyQHrWHNCLR0/CcIdgOVzcVbM=
Subject key identifier:   4E:0E:1A:F8:23:26:8F:09:4C:86:EA:A8:78:F0:D4:B1:10:C0:6C:1D
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       17BDB7
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/fe1f89b32f8494fcb7143ecd6c77bda9b3d1d329.roa
Signing time:             Fri 05 Apr 2024 00:53:18 +0000
ROA not before:           Fri 05 Apr 2024 00:53:18 +0000
ROA not after:            Sun 05 Apr 2026 00:53:18 +0000
asID:                     271956
IP address blocks:        2803:7610::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555895 (0x17bdb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Apr  5 00:53:18 2024 GMT
            Not After : Apr  5 00:53:18 2026 GMT
        Subject: CN=fe1f89b32f8494fcb7143ecd6c77bda9b3d1d329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:31:91:6e:15:db:c7:97:a9:01:59:17:8a:
                    2a:e8:a6:a0:7b:1b:eb:fb:5a:03:ba:f5:4d:01:cb:
                    68:87:2a:0e:e7:55:e9:cf:23:d1:fc:e6:66:75:29:
                    4a:66:b3:a0:bd:af:9a:e0:87:1c:a5:db:62:b5:1d:
                    21:f9:43:4e:fe:fd:0f:2d:96:28:53:4a:24:8e:2c:
                    52:80:12:93:23:57:87:c9:8b:b5:18:84:50:49:f5:
                    6b:2e:9c:ab:41:5a:78:35:1f:02:d1:fe:d5:89:8f:
                    57:55:e9:61:f2:02:2f:5a:17:ba:90:29:9d:7d:16:
                    d5:40:7a:9e:d5:22:c4:4b:9c:c0:53:68:10:09:fa:
                    fb:48:23:17:8f:cc:f6:b5:af:6b:46:58:22:65:e5:
                    a9:b0:f1:fb:52:77:51:34:24:8b:32:80:bb:5c:66:
                    0a:c5:99:18:bb:0b:9d:9b:37:78:71:77:52:a3:1a:
                    01:a6:8c:00:39:ea:30:c5:98:33:19:67:1c:f2:0d:
                    5e:42:f9:71:1d:73:a7:a6:6f:c1:c7:68:ec:59:3e:
                    08:16:f3:ba:18:7d:eb:35:7e:1d:5f:4b:f4:51:e9:
                    4e:18:dc:19:11:ff:91:55:cd:1d:6d:cd:6e:f1:38:
                    d6:ec:7c:db:5c:f2:42:1c:44:94:fc:28:2c:b4:ad:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:1A:F8:23:26:8F:09:4C:86:EA:A8:78:F0:D4:B1:10:C0:6C:1D
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/fe1f89b32f8494fcb7143ecd6c77bda9b3d1d329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:eb:d1:63:13:45:27:dc:c4:f4:9c:8d:b3:63:b0:33:72:
         9b:84:79:16:60:c2:20:1f:e6:63:79:33:4f:db:7d:81:2d:2f:
         54:e3:be:46:6e:7a:9d:b4:4d:de:d9:4f:b8:f3:d9:f6:67:ae:
         79:f9:66:65:3c:49:c9:63:16:91:99:3d:b2:63:bc:e1:54:69:
         6e:9e:67:66:61:96:fe:41:7b:b9:68:0f:02:88:df:65:d1:66:
         fe:6d:f5:26:5c:22:15:8f:9d:5d:5e:c1:8e:53:54:37:d0:e1:
         d2:ff:32:f8:32:ae:84:ea:14:60:6d:cd:cd:30:0b:76:b1:bd:
         79:85:47:92:1b:8f:ea:ab:c5:3a:a1:7e:d0:d9:6d:59:ec:4c:
         b6:41:df:f5:c1:99:2e:5f:9a:d4:94:25:8e:d5:05:1d:cc:48:
         55:19:bf:0e:22:9d:a6:5a:98:bb:40:5b:a5:52:37:85:85:aa:
         9c:62:1e:27:ab:9f:50:4c:c0:d8:25:bf:c7:c6:f7:92:0d:29:
         be:62:44:0e:50:b4:92:15:f1:79:32:10:92:c1:81:62:f2:16:
         28:55:2b:3f:bc:81:60:97:8f:c8:37:fc:0b:3f:2d:f3:1d:a9:
         e6:de:87:c7:1d:4b:61:ae:c9:54:3a:de:fd:c3:04:5f:aa:d2:
         0e:94:1d:92
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDF723MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
N2E4YjVhMGMxNTgyNGQ2ZTNjZDBhMTUyODIyMWEwYTdhNDdjZTAwHhcNMjQwNDA1
MDA1MzE4WhcNMjYwNDA1MDA1MzE4WjAzMTEwLwYDVQQDEyhmZTFmODliMzJmODQ5
NGZjYjcxNDNlY2Q2Yzc3YmRhOWIzZDFkMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkscxkW4V28eXqQFZF4oq6Kagexvr+1oDuvVNActohyoO51Xp
zyPR/OZmdSlKZrOgva+a4IccpdtitR0h+UNO/v0PLZYoU0okjixSgBKTI1eHyYu1
GIRQSfVrLpyrQVp4NR8C0f7ViY9XVelh8gIvWhe6kCmdfRbVQHqe1SLES5zAU2gQ
Cfr7SCMXj8z2ta9rRlgiZeWpsPH7UndRNCSLMoC7XGYKxZkYuwudmzd4cXdSoxoB
powAOeowxZgzGWcc8g1eQvlxHXOnpm/Bx2jsWT4IFvO6GH3rNX4dX0v0UelOGNwZ
Ef+RVc0dbc1u8TjW7HzbXPJCHESU/CgstK0SewIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFE4OGvgjJo8JTIbqqHjw1LEQwGwdMB8GA1UdIwQYMBaAFNovRy7d3oArABJo
64PhvtMbJSMjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U3YThi
NWEwYzE1ODI0ZDZlM2NkMGExNTI4MjIxYTBhN2E0N2NlMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmVlMzExNGMtNGU5MS00YzNmLWI3YzItYzIxZWU2
YTA2MzE2L2ZlMWY4OWIzMmY4NDk0ZmNiNzE0M2VjZDZjNzdiZGE5YjNkMWQzMjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZWUzMTE0Yy00ZTkxLTRjM2YtYjdjMi1jMjFl
ZTZhMDYzMTYvY2U3YThiNWEwYzE1ODI0ZDZlM2NkMGExNTI4MjIxYTBhN2E0N2Nl
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDdhAwDQYJKoZIhvcNAQELBQADggEBAGTw69FjE0Un3MT0
nI2zY7AzcpuEeRZgwiAf5mN5M0/bfYEtL1TjvkZuep20Td7ZT7jz2fZnrnn5ZmU8
ScljFpGZPbJjvOFUaW6eZ2Zhlv5Be7loDwKI32XRZv5t9SZcIhWPnV1ewY5TVDfQ
4dL/MvgyroTqFGBtzc0wC3axvXmFR5Ibj+qrxTqhftDZbVnsTLZB3/XBmS5fmtSU
JY7VBR3MSFUZvw4inaZamLtAW6VSN4WFqpxiHiern1BMwNglv8fG95INKb5iRA5Q
tJIV8XkyEJLBgWLyFihVKz+8gWCXj8g3/As/LfMdqebeh8cdS2GuyVQ63v3DBF+q
0g6UHZI=
-----END CERTIFICATE-----