Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/2c06bb6872a2b2e71b42e35f5cdcbd9eb1f8480e.roa
File:                     2c06bb6872a2b2e71b42e35f5cdcbd9eb1f8480e.roa (raw, json)
Hash identifier:          Lpr/56rxLx9bb+alP9fWXUOkzYRnNSCrZPbhvZiq8VA=
Subject key identifier:   01:B2:B5:91:EE:4B:85:E0:C1:9E:7A:F6:0B:58:DC:D8:5E:81:F4:7B
Certificate issuer:       /CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Certificate serial:       25C352
Authority key identifier: 46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/2c06bb6872a2b2e71b42e35f5cdcbd9eb1f8480e.roa
Signing time:             Wed 22 Nov 2023 17:55:28 +0000
ROA not before:           Wed 22 Nov 2023 17:55:28 +0000
ROA not after:            Sat 22 Nov 2025 17:55:28 +0000
asID:                     52419
IP address blocks:        2803:3480::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474834 (0x25c352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665130a1c940d46872c6be287d312bbd14fb8bd7
        Validity
            Not Before: Nov 22 17:55:28 2023 GMT
            Not After : Nov 22 17:55:28 2025 GMT
        Subject: CN=2c06bb6872a2b2e71b42e35f5cdcbd9eb1f8480e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:11:e5:50:ae:3c:c9:4e:3d:2b:0b:2b:ce:
                    a2:eb:1e:67:d3:ae:ef:80:28:d6:91:52:02:a1:08:
                    bc:f8:c5:33:18:d9:41:02:98:79:f7:7f:a5:33:3f:
                    75:c1:b2:45:0d:32:12:29:f1:3d:89:99:8c:80:89:
                    67:e8:71:35:23:94:dc:1c:5f:ec:ce:92:79:97:51:
                    d9:37:a8:d9:5b:62:a1:3c:5e:94:81:ab:16:33:c8:
                    7b:80:78:c6:24:67:85:0d:db:a5:a0:2a:6c:8e:dd:
                    83:a3:d3:70:a7:78:e1:44:0d:5b:fa:0a:1f:bd:d2:
                    42:e7:54:dd:5c:a4:f2:c9:9b:77:27:26:3c:d6:ee:
                    28:35:03:b7:f3:03:db:f2:d6:f2:0c:f1:3b:e9:ce:
                    29:3b:61:c0:a0:2f:5c:39:61:68:10:a9:53:6c:10:
                    50:cf:28:2c:bf:74:6e:72:77:98:c0:54:89:96:8e:
                    f3:01:35:bd:82:28:7a:f0:a4:27:0b:08:66:80:92:
                    9a:57:a6:8d:14:21:83:b6:a3:23:cf:96:88:c5:14:
                    49:52:67:ba:67:4d:3c:10:3d:3c:f1:12:c0:e6:3d:
                    38:92:2d:d1:67:4a:eb:d3:ef:0b:4d:10:5b:f1:4c:
                    eb:03:9d:ff:c7:bd:fd:0a:95:2d:33:b0:09:21:2a:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:B5:91:EE:4B:85:E0:C1:9E:7A:F6:0B:58:DC:D8:5E:81:F4:7B
            X509v3 Authority Key Identifier:
                keyid:46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/2c06bb6872a2b2e71b42e35f5cdcbd9eb1f8480e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/665130a1c940d46872c6be287d312bbd14fb8bd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480::/38

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:91:d5:37:73:f8:68:bd:2f:eb:4f:19:cb:5e:58:0b:3c:
         2e:32:4a:25:12:0e:81:15:ef:9a:58:3c:f6:b0:0d:8e:75:76:
         29:98:9f:db:16:b2:96:b5:3a:86:93:64:d0:5a:39:da:a4:ff:
         db:48:7c:27:3c:6b:f9:c2:03:f7:33:e3:9d:db:25:6a:c7:7d:
         30:7f:80:b9:58:05:be:91:c3:2d:5b:1e:ac:7d:e8:18:8a:31:
         83:f1:2d:47:27:6b:3c:f7:50:ef:21:22:a9:ab:9e:79:f2:93:
         b9:81:78:d8:b4:54:ea:e5:2d:4d:d6:b9:c8:f0:42:7c:df:c7:
         e8:7d:d4:3a:8e:d5:3a:24:25:71:6b:7b:a5:cb:75:d2:8d:b7:
         3c:48:d0:54:78:d0:c9:5d:92:75:24:af:e8:9f:78:bc:5d:7a:
         8a:50:6b:07:a8:68:5c:39:2f:33:ee:c4:04:5d:8b:4d:7f:dd:
         fb:40:fa:1d:2f:90:a6:79:15:e4:39:2e:f6:cc:8e:77:f3:7c:
         f7:9d:c3:0a:2d:0a:28:d1:1c:1c:df:f5:4e:95:67:8a:8d:fe:
         83:c0:8c:b2:69:8f:dd:af:2b:e5:9d:e7:38:52:48:e9:08:76:
         74:3f:db:35:7b:9a:dd:df:61:12:c1:89:98:74:54:74:af:ff:
         8c:4a:e1:a6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDJcNSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY2
NTEzMGExYzk0MGQ0Njg3MmM2YmUyODdkMzEyYmJkMTRmYjhiZDcwHhcNMjMxMTIy
MTc1NTI4WhcNMjUxMTIyMTc1NTI4WjAzMTEwLwYDVQQDEygyYzA2YmI2ODcyYTJi
MmU3MWI0MmUzNWY1Y2RjYmQ5ZWIxZjg0ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhYsR5VCuPMlOPSsLK86i6x5n067vgCjWkVICoQi8+MUzGNlB
Aph593+lMz91wbJFDTISKfE9iZmMgIln6HE1I5TcHF/szpJ5l1HZN6jZW2KhPF6U
gasWM8h7gHjGJGeFDduloCpsjt2Do9Nwp3jhRA1b+gofvdJC51TdXKTyyZt3JyY8
1u4oNQO38wPb8tbyDPE76c4pO2HAoC9cOWFoEKlTbBBQzygsv3RucneYwFSJlo7z
ATW9gih68KQnCwhmgJKaV6aNFCGDtqMjz5aIxRRJUme6Z008ED088RLA5j04ki3R
Z0rr0+8LTRBb8UzrA53/x739CpUtM7AJISo1WwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFAGytZHuS4XgwZ569gtY3NhegfR7MB8GA1UdIwQYMBaAFEYONGcx+AskmGze
AdRgEzqwLWBlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjY1MTMw
YTFjOTQwZDQ2ODcyYzZiZTI4N2QzMTJiYmQxNGZiOGJkNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzQyODY3MjAtYzEyNy00MjUwLWJmZWQtYjlkNzcw
ZTA2NWMzLzJjMDZiYjY4NzJhMmIyZTcxYjQyZTM1ZjVjZGNiZDllYjFmODQ4MGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NDI4NjcyMC1jMTI3LTQyNTAtYmZlZC1iOWQ3
NzBlMDY1YzMvNjY1MTMwYTFjOTQwZDQ2ODcyYzZiZTI4N2QzMTJiYmQxNGZiOGJk
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGAigDNIAAMA0GCSqGSIb3DQEBCwUAA4IBAQB+GZHVN3P4aL0v
608Zy15YCzwuMkolEg6BFe+aWDz2sA2OdXYpmJ/bFrKWtTqGk2TQWjnapP/bSHwn
PGv5wgP3M+Od2yVqx30wf4C5WAW+kcMtWx6sfegYijGD8S1HJ2s891DvISKpq555
8pO5gXjYtFTq5S1N1rnI8EJ838fofdQ6jtU6JCVxa3uly3XSjbc8SNBUeNDJXZJ1
JK/on3i8XXqKUGsHqGhcOS8z7sQEXYtNf937QPodL5CmeRXkOS72zI5383z3ncMK
LQoo0Rwc3/VOlWeKjf6DwIyyaY/dryvlnec4UkjpCHZ0P9s1e5rd32ESwYmYdFR0
r/+MSuGm
-----END CERTIFICATE-----