Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/bfaffdd7b604b10024ce7f1d25407225d87c5d68.roa
File:                     bfaffdd7b604b10024ce7f1d25407225d87c5d68.roa (raw, json)
Hash identifier:          8+GZp7l+UgxHrUlWv8AMygxmhpnXA2efEzFTMjjJv/s=
Subject key identifier:   CB:D1:EC:C2:E3:A6:07:32:BB:72:46:BD:C4:FD:39:2B:8C:B5:7A:10
Certificate issuer:       /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial:       175B3C
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/bfaffdd7b604b10024ce7f1d25407225d87c5d68.roa
Signing time:             Tue 31 Oct 2023 00:20:55 +0000
ROA not before:           Tue 31 Oct 2023 00:20:55 +0000
ROA not after:            Fri 31 Oct 2025 00:20:55 +0000
asID:                     262186
IP address blocks:        2803:6a60:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530684 (0x175b3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
        Validity
            Not Before: Oct 31 00:20:55 2023 GMT
            Not After : Oct 31 00:20:55 2025 GMT
        Subject: CN=bfaffdd7b604b10024ce7f1d25407225d87c5d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:10:4d:aa:f7:90:01:a6:3a:cb:35:af:a2:
                    83:04:de:6e:27:d8:9e:02:c8:a5:a8:7b:40:51:12:
                    3d:39:92:42:70:55:1d:65:b7:c7:e8:18:30:c2:e1:
                    ba:2f:07:b2:fe:09:14:d5:14:6d:31:f2:b5:dc:d3:
                    cc:58:3c:2c:c6:9c:76:b6:e6:47:46:3a:30:6e:9b:
                    b5:6f:fe:e5:50:bf:09:64:52:96:bc:f9:de:dd:c1:
                    33:4a:76:60:70:c1:ba:d5:d7:e0:e8:5b:b6:aa:05:
                    26:57:db:ec:7f:58:e8:eb:61:3b:f8:95:6b:9f:c2:
                    64:1a:42:77:f0:14:d0:3b:6c:d9:6a:58:81:db:01:
                    d9:ae:a3:7c:b4:31:dd:fd:e1:95:e7:ed:25:0a:37:
                    9f:d6:42:a1:de:41:c2:33:f5:1f:53:83:9f:19:76:
                    59:21:34:da:3a:4d:9a:b2:16:a4:d0:36:3f:ab:31:
                    30:f2:e0:2e:6a:04:d3:09:1f:7d:9f:96:f1:f3:fb:
                    d6:9e:59:d7:d2:8b:8e:c3:78:14:ab:56:c0:64:02:
                    1f:91:9a:4b:a5:e1:67:ad:2b:7b:ad:de:c1:dd:1c:
                    46:f6:61:ab:ca:1a:08:b1:dd:59:b2:7d:e5:69:57:
                    5a:28:44:a8:9c:40:1f:bb:2f:d3:f3:8f:ff:5c:40:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:EC:C2:E3:A6:07:32:BB:72:46:BD:C4:FD:39:2B:8C:B5:7A:10
            X509v3 Authority Key Identifier:
                keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/bfaffdd7b604b10024ce7f1d25407225d87c5d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a60:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:c9:67:9c:17:b7:9c:ae:e3:e6:7c:c1:52:2f:56:c2:2e:
         58:cd:de:e5:4e:38:a4:96:c9:00:bd:25:8e:9a:1b:6f:5f:d9:
         55:6d:39:08:0f:8c:74:97:d1:66:02:24:7d:cc:47:90:54:89:
         45:e7:f5:cc:4a:c7:2d:10:82:94:d7:d7:e3:e9:41:f6:29:a3:
         10:02:96:c0:74:93:38:94:22:06:bc:17:8b:20:b0:8a:83:a8:
         9c:b2:d9:02:85:ca:07:5e:b8:7b:03:48:d1:93:df:44:d8:78:
         a3:e6:15:d7:e2:8d:1b:77:65:b1:3b:26:38:17:5f:80:ff:44:
         d3:b1:82:70:00:d2:20:b9:97:78:51:b9:21:4e:9a:f5:e6:17:
         11:8d:38:47:1c:0d:80:74:5f:61:5b:ea:fc:f7:d6:a9:83:d1:
         ad:d6:e8:f8:5d:de:c7:4a:c3:d9:71:e5:1b:44:ef:40:f0:1e:
         70:61:a7:f8:22:f3:da:c8:7d:46:a9:6b:91:d8:9c:62:6a:07:
         d3:b4:ba:fe:22:cb:ff:cc:77:48:9c:39:04:59:05:23:03:1f:
         9d:f3:04:42:0a:08:19:65:87:9b:a1:9c:47:9e:ad:1a:20:5e:
         fa:22:45:d2:3b:97:3c:cd:a6:88:11:f1:06:8d:62:d4:13:4b:
         88:f6:c5:0a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDF1s8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
ZWJlMzM1MzAzNzNkMmMyYmZmYWFlZDFlNTNmMDVkYjhlMmE0MzYwHhcNMjMxMDMx
MDAyMDU1WhcNMjUxMDMxMDAyMDU1WjAzMTEwLwYDVQQDEyhiZmFmZmRkN2I2MDRi
MTAwMjRjZTdmMWQyNTQwNzIyNWQ4N2M1ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzCgQTar3kAGmOss1r6KDBN5uJ9ieAsilqHtAURI9OZJCcFUd
ZbfH6BgwwuG6Lwey/gkU1RRtMfK13NPMWDwsxpx2tuZHRjowbpu1b/7lUL8JZFKW
vPne3cEzSnZgcMG61dfg6Fu2qgUmV9vsf1jo62E7+JVrn8JkGkJ38BTQO2zZaliB
2wHZrqN8tDHd/eGV5+0lCjef1kKh3kHCM/UfU4OfGXZZITTaOk2ashak0DY/qzEw
8uAuagTTCR99n5bx8/vWnlnX0ouOw3gUq1bAZAIfkZpLpeFnrSt7rd7B3RxG9mGr
yhoIsd1Zsn3laVdaKESonEAfuy/T84//XEDlOQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMvR7MLjpgcyu3JGvcT9OSuMtXoQMB8GA1UdIwQYMBaAFAUrRUmufk4nzVdl
yOgsd2GM7CdRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTZlYmUz
MzUzMDM3M2QyYzJiZmZhYWVkMWU1M2YwNWRiOGUyYTQzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFiMmQ4MDMtMGE5My00ZTk1LTk5ZjAtMTNjNzUz
ZWQxMzZjL2JmYWZmZGQ3YjYwNGIxMDAyNGNlN2YxZDI1NDA3MjI1ZDg3YzVkNjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWIyZDgwMy0wYTkzLTRlOTUtOTlmMC0xM2M3
NTNlZDEzNmMvYTZlYmUzMzUzMDM3M2QyYzJiZmZhYWVkMWU1M2YwNWRiOGUyYTQz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDamAAAzANBgkqhkiG9w0BAQsFAAOCAQEALVnJZ5wXt5yu
4+Z8wVIvVsIuWM3e5U44pJbJAL0ljpobb1/ZVW05CA+MdJfRZgIkfcxHkFSJRef1
zErHLRCClNfX4+lB9imjEAKWwHSTOJQiBrwXiyCwioOonLLZAoXKB164ewNI0ZPf
RNh4o+YV1+KNG3dlsTsmOBdfgP9E07GCcADSILmXeFG5IU6a9eYXEY04RxwNgHRf
YVvq/PfWqYPRrdbo+F3ex0rD2XHlG0TvQPAecGGn+CLz2sh9RqlrkdicYmoH07S6
/iLL/8x3SJw5BFkFIwMfnfMEQgoIGWWHm6GcR56tGiBe+iJF0juXPM2miBHxBo1i
1BNLiPbFCg==
-----END CERTIFICATE-----