Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/c5ba1a1c362e63167bff95f2c31c23aac38a46c7.roa
File:                     c5ba1a1c362e63167bff95f2c31c23aac38a46c7.roa (raw, json)
Hash identifier:          rjZE5dt96UXGmu+0f2DYkgTBHd8l04MhsPEOu+nAvKQ=
Subject key identifier:   D0:54:49:02:60:1A:FA:9C:83:A1:9D:B8:5F:6B:92:2B:1F:D1:BF:97
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       243FDC
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/c5ba1a1c362e63167bff95f2c31c23aac38a46c7.roa
Signing time:             Tue 26 Sep 2023 02:27:22 +0000
ROA not before:           Mon 25 Sep 2023 02:27:22 +0000
ROA not after:            Fri 26 Sep 2025 02:27:22 +0000
asID:                     52423
IP address blocks:        2803:6900:1517::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375644 (0x243fdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Sep 25 02:27:22 2023 GMT
            Not After : Sep 26 02:27:22 2025 GMT
        Subject: CN=c5ba1a1c362e63167bff95f2c31c23aac38a46c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:79:28:5d:9c:c8:e6:95:2e:9a:ee:99:c3:
                    4d:57:65:df:8e:e2:64:b3:ac:f6:2e:47:f2:d6:3f:
                    5d:2d:0f:d0:ed:8b:ce:e9:cf:98:f5:ff:0f:c5:f6:
                    05:be:f4:fd:b3:b4:d0:0d:75:a1:8a:d9:8e:cc:e8:
                    76:c9:5e:05:e2:f0:55:12:84:ef:09:37:22:52:ff:
                    ba:b4:1e:5b:d4:46:95:9c:ea:31:13:6f:cd:a9:7b:
                    f6:c6:56:e9:be:59:bc:64:83:6b:ff:f4:87:c2:08:
                    a8:a6:d3:0e:53:b2:6a:4c:ad:e8:e1:2f:f4:d2:45:
                    3d:32:e7:be:12:67:2b:d7:93:16:6f:7c:2e:ea:0a:
                    59:6e:fc:ce:9c:85:14:50:fe:d6:cd:57:bd:ba:41:
                    ee:ac:b9:6b:71:e6:d9:b8:10:d6:86:39:d7:5c:6f:
                    39:8b:4b:29:69:15:7f:22:1d:d6:a5:a2:d4:08:14:
                    85:de:2c:4a:4e:f1:0a:b0:e9:3a:41:7a:1b:b1:fd:
                    c8:6c:14:d7:52:9b:e1:49:74:21:d3:ca:00:ff:f2:
                    58:5a:26:8f:4e:f2:03:e9:d7:50:b6:ca:7d:a8:50:
                    e9:d1:a8:44:97:e8:c7:dd:08:e5:8c:7e:aa:2c:89:
                    12:2f:07:9c:db:c0:9e:8e:46:57:75:93:dd:df:2f:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:49:02:60:1A:FA:9C:83:A1:9D:B8:5F:6B:92:2B:1F:D1:BF:97
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/c5ba1a1c362e63167bff95f2c31c23aac38a46c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:be:5a:dc:b4:86:40:ce:3d:39:6d:f3:3b:30:35:b7:4b:
         be:43:d8:af:71:22:17:13:d3:24:d7:1d:c9:61:95:70:c9:84:
         ae:c4:ac:60:b0:57:23:e9:f2:66:d5:50:d7:43:2e:cd:90:3b:
         ee:3d:05:58:19:43:ec:65:b5:f7:35:16:ac:31:de:09:7d:6e:
         52:6b:79:df:fb:9b:7c:a4:0a:70:96:de:2e:bd:44:0a:8c:4d:
         68:45:c5:40:72:08:55:cd:bb:8d:2d:25:30:eb:fd:21:44:83:
         d1:6a:dd:4a:aa:61:ec:29:0f:29:b0:44:c4:07:1b:e6:ba:fb:
         a8:c6:cc:b8:87:33:da:f4:a1:f6:cd:f8:4a:80:dc:f1:7c:d8:
         d2:69:13:9a:70:39:4e:5f:2c:80:57:7a:6f:35:57:81:16:b8:
         f3:03:34:49:78:c2:92:fe:4b:d8:fd:8f:db:3e:eb:be:58:c5:
         84:1a:ff:83:cd:da:af:cd:2f:ee:8a:e6:a2:61:c3:68:c2:f1:
         27:87:60:46:db:80:83:68:fa:97:7f:98:3b:14:1b:9e:cb:33:
         98:43:bb:14:ca:07:71:bb:c2:b3:62:81:25:88:ac:d3:6a:39:
         07:b0:03:bf:91:df:66:96:e6:d6:4a:05:1b:a4:ce:fe:41:3a:
         25:d4:ad:94
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJD/cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjMwOTI1
MDIyNzIyWhcNMjUwOTI2MDIyNzIyWjAzMTEwLwYDVQQDEyhjNWJhMWExYzM2MmU2
MzE2N2JmZjk1ZjJjMzFjMjNhYWMzOGE0NmM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnld5KF2cyOaVLprumcNNV2XfjuJks6z2Lkfy1j9dLQ/Q7YvO
6c+Y9f8PxfYFvvT9s7TQDXWhitmOzOh2yV4F4vBVEoTvCTciUv+6tB5b1EaVnOox
E2/NqXv2xlbpvlm8ZINr//SHwgioptMOU7JqTK3o4S/00kU9Mue+Emcr15MWb3wu
6gpZbvzOnIUUUP7WzVe9ukHurLlrcebZuBDWhjnXXG85i0spaRV/Ih3WpaLUCBSF
3ixKTvEKsOk6QXobsf3IbBTXUpvhSXQh08oA//JYWiaPTvID6ddQtsp9qFDp0ahE
l+jH3QjljH6qLIkSLwec28CejkZXdZPd3y+BrQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNBUSQJgGvqcg6GduF9rkisf0b+XMB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlL2M1YmExYTFjMzYyZTYzMTY3YmZmOTVmMmMzMWMyM2FhYzM4YTQ2Yzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDaQAVFzANBgkqhkiG9w0BAQsFAAOCAQEAYNy+Wty0hkDO
PTlt8zswNbdLvkPYr3EiFxPTJNcdyWGVcMmErsSsYLBXI+nyZtVQ10MuzZA77j0F
WBlD7GW19zUWrDHeCX1uUmt53/ubfKQKcJbeLr1ECoxNaEXFQHIIVc27jS0lMOv9
IUSD0WrdSqph7CkPKbBExAcb5rr7qMbMuIcz2vSh9s34SoDc8XzY0mkTmnA5Tl8s
gFd6bzVXgRa48wM0SXjCkv5L2P2P2z7rvljFhBr/g83ar80v7ormomHDaMLxJ4dg
RtuAg2j6l3+YOxQbnsszmEO7FMoHcbvCs2KBJYis02o5B7ADv5HfZpbm1koFG6TO
/kE6JdStlA==
-----END CERTIFICATE-----