Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/98bffa311a43009e21a34de478e60590db7d1882.roa
File:                     98bffa311a43009e21a34de478e60590db7d1882.roa (raw, json)
Hash identifier:          5uA2p1/gsJkgj5OGF9azqKgJgEB56/qlQH+Y2/17YSk=
Subject key identifier:   26:C0:18:57:24:63:43:BF:8F:ED:93:2F:06:07:72:13:1D:58:66:BD
Certificate issuer:       /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial:       174047
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/98bffa311a43009e21a34de478e60590db7d1882.roa
Signing time:             Fri 27 Oct 2023 16:25:41 +0000
ROA not before:           Fri 27 Oct 2023 16:25:41 +0000
ROA not after:            Mon 27 Oct 2025 16:25:41 +0000
asID:                     262186
IP address blocks:        2803:6a60:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523783 (0x174047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
        Validity
            Not Before: Oct 27 16:25:41 2023 GMT
            Not After : Oct 27 16:25:41 2025 GMT
        Subject: CN=98bffa311a43009e21a34de478e60590db7d1882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:76:59:c8:1b:97:fc:fa:3a:32:9f:c9:60:
                    f0:f0:80:3a:14:18:9a:18:4b:44:a1:36:f4:a4:e8:
                    69:49:c3:7d:e1:6d:5d:d1:a8:92:33:4f:98:67:b6:
                    f0:46:a1:ef:f8:00:fc:40:41:0f:92:8d:1a:05:75:
                    70:5d:05:26:ff:16:29:39:a8:93:e8:ec:da:e0:1c:
                    b5:8f:cc:ae:1f:80:b8:50:aa:12:c3:02:1e:fe:4b:
                    dd:cb:1f:95:6f:72:9a:74:2c:40:f9:53:7e:e6:e3:
                    79:66:28:5f:3a:33:db:ac:43:ac:83:f7:f3:21:97:
                    e8:0f:89:5e:c1:74:b4:40:07:ee:60:83:62:2f:0f:
                    10:79:81:86:cb:4a:92:62:7a:98:36:c0:9b:66:1c:
                    44:85:8d:f0:3b:b1:93:d4:f3:6a:50:38:92:01:c9:
                    cd:fd:0c:c1:74:6b:e1:c5:1a:bd:f4:e4:f2:b8:e7:
                    20:cd:84:25:3a:ad:5b:20:e3:20:a2:80:67:2c:4d:
                    9c:2b:ed:ce:89:7a:93:d8:1d:90:84:a7:21:17:f4:
                    34:19:f5:4f:52:fb:12:98:5e:f5:f3:99:5f:c3:03:
                    d1:85:4f:20:f0:92:f3:0e:73:d0:9c:92:48:90:9d:
                    2b:c9:78:5b:6b:af:bf:e1:4b:94:18:fa:ef:65:13:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:18:57:24:63:43:BF:8F:ED:93:2F:06:07:72:13:1D:58:66:BD
            X509v3 Authority Key Identifier:
                keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/98bffa311a43009e21a34de478e60590db7d1882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a60:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:07:c9:25:96:ef:d7:46:77:4f:30:82:86:8f:12:ea:cf:ee:
         fd:57:fc:3c:23:1b:e7:8a:c5:0e:be:a2:c7:64:21:f9:7c:1d:
         13:ac:1c:7e:cf:08:98:c1:3d:93:95:4f:47:58:81:ff:66:ab:
         99:0e:01:61:89:94:84:cc:dd:66:af:71:01:c3:20:85:83:19:
         89:04:a3:dd:f7:f2:e1:d3:9d:fa:96:20:99:ab:51:e7:30:ef:
         53:66:86:6e:c6:0d:a5:a8:55:17:44:61:73:11:a0:47:47:b1:
         98:b1:a9:74:0e:dd:97:a3:44:63:32:1c:74:23:3c:d0:0d:69:
         20:30:75:e4:12:b7:f6:b0:c6:5f:cf:a5:e5:92:51:07:c9:a0:
         0f:c3:00:36:64:c1:93:9c:fd:bc:fc:20:67:c7:8b:e8:61:3b:
         36:5b:a9:ed:2d:a0:2c:e0:92:ec:6a:41:a4:cd:1d:fc:aa:ba:
         be:4e:ee:30:d7:f2:98:50:c8:66:73:a5:a8:76:c8:b9:ab:5c:
         a2:dc:54:f4:02:e3:67:f6:1d:91:1f:4f:85:59:75:18:81:64:
         b0:93:46:57:70:49:fa:5f:50:ba:18:e8:ed:2b:12:e3:6e:37:
         86:a2:10:de:8f:ef:03:fc:25:48:b0:dc:c5:38:68:3c:2c:f7:
         1d:96:de:44
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDF0BHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
ZWJlMzM1MzAzNzNkMmMyYmZmYWFlZDFlNTNmMDVkYjhlMmE0MzYwHhcNMjMxMDI3
MTYyNTQxWhcNMjUxMDI3MTYyNTQxWjAzMTEwLwYDVQQDEyg5OGJmZmEzMTFhNDMw
MDllMjFhMzRkZTQ3OGU2MDU5MGRiN2QxODgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3wl2Wcgbl/z6OjKfyWDw8IA6FBiaGEtEoTb0pOhpScN94W1d
0aiSM0+YZ7bwRqHv+AD8QEEPko0aBXVwXQUm/xYpOaiT6Oza4By1j8yuH4C4UKoS
wwIe/kvdyx+Vb3KadCxA+VN+5uN5ZihfOjPbrEOsg/fzIZfoD4lewXS0QAfuYINi
Lw8QeYGGy0qSYnqYNsCbZhxEhY3wO7GT1PNqUDiSAcnN/QzBdGvhxRq99OTyuOcg
zYQlOq1bIOMgooBnLE2cK+3OiXqT2B2QhKchF/Q0GfVPUvsSmF7185lfwwPRhU8g
8JLzDnPQnJJIkJ0ryXhba6+/4UuUGPrvZRPPHQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCbAGFckY0O/j+2TLwYHchMdWGa9MB8GA1UdIwQYMBaAFAUrRUmufk4nzVdl
yOgsd2GM7CdRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTZlYmUz
MzUzMDM3M2QyYzJiZmZhYWVkMWU1M2YwNWRiOGUyYTQzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFiMmQ4MDMtMGE5My00ZTk1LTk5ZjAtMTNjNzUz
ZWQxMzZjLzk4YmZmYTMxMWE0MzAwOWUyMWEzNGRlNDc4ZTYwNTkwZGI3ZDE4ODIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWIyZDgwMy0wYTkzLTRlOTUtOTlmMC0xM2M3
NTNlZDEzNmMvYTZlYmUzMzUzMDM3M2QyYzJiZmZhYWVkMWU1M2YwNWRiOGUyYTQz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDamAAAzANBgkqhkiG9w0BAQsFAAOCAQEAuAfJJZbv10Z3
TzCCho8S6s/u/Vf8PCMb54rFDr6ix2Qh+XwdE6wcfs8ImME9k5VPR1iB/2armQ4B
YYmUhMzdZq9xAcMghYMZiQSj3ffy4dOd+pYgmatR5zDvU2aGbsYNpahVF0RhcxGg
R0exmLGpdA7dl6NEYzIcdCM80A1pIDB15BK39rDGX8+l5ZJRB8mgD8MANmTBk5z9
vPwgZ8eL6GE7Nlup7S2gLOCS7GpBpM0d/Kq6vk7uMNfymFDIZnOlqHbIuatcotxU
9ALjZ/YdkR9PhVl1GIFksJNGV3BJ+l9Quhjo7SsS4243hqIQ3o/vA/wlSLDcxTho
PCz3HZbeRA==
-----END CERTIFICATE-----