Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/338e4f97237ae19b3e036dc19670672cb2cc3aa3.roa
File:                     338e4f97237ae19b3e036dc19670672cb2cc3aa3.roa (raw, json)
Hash identifier:          USuhlqrDiXSyVotQzkXHfDWfMBaE7vzrmrWIqJC21Hk=
Subject key identifier:   41:D4:A8:82:5E:BC:7B:AB:71:32:36:83:2E:A6:C4:FB:B9:F2:17:E4
Certificate issuer:       /CN=f00801f94fdeddd1b23dc04ebf80c4c73327e19a
Certificate serial:       090756
Authority key identifier: CB:FF:54:EA:F9:24:D9:F2:50:5A:80:C6:E0:9A:FA:66:54:2D:69:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f00801f94fdeddd1b23dc04ebf80c4c73327e19a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/338e4f97237ae19b3e036dc19670672cb2cc3aa3.roa
Signing time:             Wed 30 Aug 2023 02:15:10 +0000
ROA not before:           Tue 29 Aug 2023 02:15:10 +0000
ROA not after:            Sat 30 Aug 2025 02:15:10 +0000
asID:                     272129
IP address blocks:        2803:7f10::/32 maxlen: 35
                          2803:7f10::/33 maxlen: 35
                          2803:7f10:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591702 (0x90756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00801f94fdeddd1b23dc04ebf80c4c73327e19a
        Validity
            Not Before: Aug 29 02:15:10 2023 GMT
            Not After : Aug 30 02:15:10 2025 GMT
        Subject: CN=338e4f97237ae19b3e036dc19670672cb2cc3aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:10:ac:a9:b3:c6:82:cb:83:97:ed:f6:f2:
                    54:e8:a3:fe:11:71:b0:85:4a:09:49:5b:e6:f6:f9:
                    08:cd:d6:11:8d:20:49:87:2b:86:d9:50:a3:c1:ff:
                    0d:e0:2d:ab:c9:15:8a:a6:5c:f4:e6:3d:e7:36:7a:
                    b0:d8:a0:e4:35:55:0b:dc:31:c3:8d:bd:31:88:11:
                    96:fa:7f:51:dd:31:25:13:37:ae:c2:7f:a3:da:0c:
                    c3:4a:aa:71:65:47:79:b1:36:8d:05:de:06:10:fd:
                    86:8b:ee:6f:2e:62:74:8d:fc:05:cf:1f:6f:db:9a:
                    c3:c7:4f:6a:23:1e:d4:a4:34:c4:6a:3b:20:da:86:
                    8e:44:8c:33:8d:58:eb:05:a5:7e:60:3b:0f:04:79:
                    23:fc:1f:ca:30:d6:25:92:50:13:a8:ef:b3:fb:22:
                    81:fe:24:ac:d2:67:30:a8:b9:4e:bc:73:e2:a5:2a:
                    9d:4b:ae:ee:ae:f6:db:fb:28:97:76:f7:72:be:14:
                    25:47:8b:25:8f:0b:83:34:30:40:ad:e4:06:30:93:
                    1f:4c:c5:8a:2b:8d:8c:7b:37:3e:c6:e3:d5:76:7a:
                    cc:0d:3c:ff:58:16:eb:ac:58:92:25:5a:9f:43:bc:
                    55:20:af:47:e5:d4:b3:9c:96:2c:4f:98:ca:ab:56:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D4:A8:82:5E:BC:7B:AB:71:32:36:83:2E:A6:C4:FB:B9:F2:17:E4
            X509v3 Authority Key Identifier:
                keyid:CB:FF:54:EA:F9:24:D9:F2:50:5A:80:C6:E0:9A:FA:66:54:2D:69:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f00801f94fdeddd1b23dc04ebf80c4c73327e19a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/338e4f97237ae19b3e036dc19670672cb2cc3aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/720b9315-b0e3-4784-ba1a-3e05cb203f43/f00801f94fdeddd1b23dc04ebf80c4c73327e19a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:07:a4:38:77:b4:24:31:69:2f:13:65:8e:b4:0f:aa:7f:b8:
         05:e2:6c:8e:63:52:bc:3a:01:4c:19:37:fe:91:39:5a:5b:48:
         c4:19:04:dd:de:64:a1:ae:aa:3e:da:31:0f:b7:6a:b3:62:d8:
         64:da:d3:76:9d:fa:99:ad:45:db:4e:90:58:c1:a1:32:56:09:
         29:f6:f7:97:95:f8:5b:02:e3:de:1f:34:51:57:51:16:52:27:
         cc:1f:95:52:e0:d2:72:52:c5:e2:d7:61:1a:5d:6e:4a:37:b6:
         c5:30:48:f5:f5:f4:d9:99:4c:66:f3:b9:6b:f7:d5:f8:15:4c:
         ff:21:99:02:99:60:e8:a0:04:50:81:1f:9b:b0:f6:6a:db:f8:
         23:21:3a:91:f6:f1:06:36:b8:f1:6f:bf:5c:b2:d7:5a:3b:02:
         cc:ac:4c:34:16:f0:1d:58:f5:bc:d3:ea:80:80:50:06:d9:c8:
         48:5f:9d:4d:94:cd:22:0b:25:24:72:f9:77:2d:37:0f:fb:93:
         32:20:ff:e5:4f:78:9b:1d:8e:54:a6:8c:ee:34:2c:3e:51:8c:
         27:bb:5c:e3:9b:03:7b:0c:cb:04:a5:e0:2f:f8:8a:1d:8d:ad:
         d7:bb:d8:17:3b:d1:74:1d:52:e6:7a:98:ca:3b:7c:9e:ae:d6:
         58:10:2a:97
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCQdWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
MDgwMWY5NGZkZWRkZDFiMjNkYzA0ZWJmODBjNGM3MzMyN2UxOWEwHhcNMjMwODI5
MDIxNTEwWhcNMjUwODMwMDIxNTEwWjAzMTEwLwYDVQQDEygzMzhlNGY5NzIzN2Fl
MTliM2UwMzZkYzE5NjcwNjcyY2IyY2MzYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoEMQrKmzxoLLg5ft9vJU6KP+EXGwhUoJSVvm9vkIzdYRjSBJ
hyuG2VCjwf8N4C2ryRWKplz05j3nNnqw2KDkNVUL3DHDjb0xiBGW+n9R3TElEzeu
wn+j2gzDSqpxZUd5sTaNBd4GEP2Gi+5vLmJ0jfwFzx9v25rDx09qIx7UpDTEajsg
2oaORIwzjVjrBaV+YDsPBHkj/B/KMNYlklATqO+z+yKB/iSs0mcwqLlOvHPipSqd
S67urvbb+yiXdvdyvhQlR4sljwuDNDBAreQGMJMfTMWKK42Mezc+xuPVdnrMDTz/
WBbrrFiSJVqfQ7xVIK9H5dSznJYsT5jKq1amgQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEHUqIJevHurcTI2gy6mxPu58hfkMB8GA1UdIwQYMBaAFMv/VOr5JNnyUFqA
xuCa+mZULWmKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjAwODAx
Zjk0ZmRlZGRkMWIyM2RjMDRlYmY4MGM0YzczMzI3ZTE5YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzIwYjkzMTUtYjBlMy00Nzg0LWJhMWEtM2UwNWNi
MjAzZjQzLzMzOGU0Zjk3MjM3YWUxOWIzZTAzNmRjMTk2NzA2NzJjYjJjYzNhYTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MjBiOTMxNS1iMGUzLTQ3ODQtYmExYS0zZTA1
Y2IyMDNmNDMvZjAwODAxZjk0ZmRlZGRkMWIyM2RjMDRlYmY4MGM0YzczMzI3ZTE5
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDfxAwDQYJKoZIhvcNAQELBQADggEBAKEHpDh3tCQxaS8T
ZY60D6p/uAXibI5jUrw6AUwZN/6ROVpbSMQZBN3eZKGuqj7aMQ+3arNi2GTa03ad
+pmtRdtOkFjBoTJWCSn295eV+FsC494fNFFXURZSJ8wflVLg0nJSxeLXYRpdbko3
tsUwSPX19NmZTGbzuWv31fgVTP8hmQKZYOigBFCBH5uw9mrb+CMhOpH28QY2uPFv
v1yy11o7AsysTDQW8B1Y9bzT6oCAUAbZyEhfnU2UzSILJSRy+XctNw/7kzIg/+VP
eJsdjlSmjO40LD5RjCe7XOObA3sMywSl4C/4ih2Nrde72Bc70XQdUuZ6mMo7fJ6u
1lgQKpc=
-----END CERTIFICATE-----