Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76b0b702-0e1b-472b-802e-11a25236b842/09001216f1134ab468da2eae96eabd1f23464734.roa
File:                     09001216f1134ab468da2eae96eabd1f23464734.roa (raw, json)
Hash identifier:          wAT6ptw+jf9M6z2CJS0EbS4R0cNgmUrnktYp4WWYH8k=
Subject key identifier:   A8:08:6F:B8:2D:90:2E:F1:65:8D:DB:7C:96:2D:AC:E4:52:66:C5:23
Certificate issuer:       /CN=6c7a32217d3dd526e229c2d431b7eb447ce33851
Certificate serial:       05E7
Authority key identifier: 67:0B:4C:A9:4A:38:0A:4C:84:CC:B3:F5:70:52:05:12:EB:BE:1C:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c7a32217d3dd526e229c2d431b7eb447ce33851.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76b0b702-0e1b-472b-802e-11a25236b842/09001216f1134ab468da2eae96eabd1f23464734.roa
Signing time:             Wed 13 Jul 2022 16:14:24 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     272131
IP address blocks:        2803:90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a32217d3dd526e229c2d431b7eb447ce33851
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=09001216f1134ab468da2eae96eabd1f23464734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:1d:68:1d:b7:f7:63:33:83:22:00:c1:f2:
                    ac:6e:7e:44:ee:d2:06:d6:1b:fc:42:62:13:6a:e1:
                    03:85:a3:d2:eb:f8:6a:7c:f6:7d:95:8a:27:6d:60:
                    c7:05:a4:cd:38:92:dd:be:5b:84:21:09:67:5a:fe:
                    b1:38:15:28:5d:d7:7c:55:a7:94:19:45:73:b4:9f:
                    73:1c:6a:f5:5e:e5:44:8e:5e:c3:87:ad:97:97:72:
                    a4:15:b2:f4:3e:a6:b0:7c:ad:51:93:47:3d:2e:55:
                    d7:8c:64:d6:d6:b9:e9:34:9a:80:37:1f:71:8b:54:
                    8e:57:8f:d0:00:96:2b:95:e2:b4:b8:a2:fd:34:30:
                    d6:70:28:c0:e3:65:2e:87:5d:d3:3d:e0:d8:98:11:
                    80:f2:06:e0:31:54:e4:fd:5a:ed:0e:72:86:b7:77:
                    15:da:83:88:ab:93:88:38:93:d7:15:8f:cc:dd:fb:
                    10:f6:61:6e:96:31:2a:8c:1b:35:2a:b4:bd:76:9d:
                    09:c4:af:cb:3e:f9:ff:91:03:86:c5:86:f1:32:bb:
                    5b:f9:06:46:93:02:ee:a3:d8:0f:f3:71:f4:6c:f8:
                    cf:0c:75:a2:d2:70:8f:9d:39:26:31:9e:ed:96:ff:
                    b9:0f:82:99:1c:4b:1e:e7:12:9a:51:5b:d4:07:2a:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:08:6F:B8:2D:90:2E:F1:65:8D:DB:7C:96:2D:AC:E4:52:66:C5:23
            X509v3 Authority Key Identifier:
                keyid:67:0B:4C:A9:4A:38:0A:4C:84:CC:B3:F5:70:52:05:12:EB:BE:1C:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c7a32217d3dd526e229c2d431b7eb447ce33851.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76b0b702-0e1b-472b-802e-11a25236b842/09001216f1134ab468da2eae96eabd1f23464734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76b0b702-0e1b-472b-802e-11a25236b842/6c7a32217d3dd526e229c2d431b7eb447ce33851.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:90::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:a9:a1:60:f8:09:e6:7c:ac:a7:a0:4e:15:dc:0b:ef:40:
         3f:a6:52:e0:3f:a2:ef:45:0b:07:a4:bb:80:5a:d4:36:42:39:
         7d:be:7b:66:52:b4:0e:28:5d:6b:e4:23:1b:57:1c:bc:2f:52:
         69:3c:92:c7:6d:5c:8c:3f:1c:07:ed:9a:da:e2:59:13:aa:65:
         d6:71:31:b6:c5:aa:c3:9c:03:bf:41:f8:04:e5:9f:1b:5f:53:
         11:e4:2a:b8:c9:10:d6:fc:e2:6d:5b:78:ac:f8:f2:5c:60:5a:
         d5:66:06:61:e6:01:03:9c:4e:c7:89:60:04:c1:97:de:9a:b4:
         03:8e:f9:30:bc:68:43:74:45:51:3e:98:e2:7a:04:32:95:e7:
         42:8f:38:7f:27:3a:ee:78:f1:fe:49:ec:4e:c2:f7:a9:bc:64:
         32:aa:74:30:e7:21:f3:00:e0:49:6c:7c:bc:d8:82:58:45:2d:
         c2:4b:09:af:fd:a2:b4:07:ae:20:20:b0:28:35:bf:1a:56:73:
         32:71:20:51:08:5a:16:15:97:ca:3d:ae:b1:fd:e6:e4:ef:b8:
         7c:3f:17:f6:f9:2f:22:57:b5:d8:c5:3d:17:9b:94:ab:66:d3:
         eb:b8:99:f3:36:ff:86:26:1c:20:41:ae:38:f3:b2:1e:7e:67:
         6e:74:9a:69
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNmM3
YTMyMjE3ZDNkZDUyNmUyMjljMmQ0MzFiN2ViNDQ3Y2UzMzg1MTAeFw0yMjA3MTMw
MzAwMDBaFw0yNDA3MTMwMzAwMDBaMDMxMTAvBgNVBAMTKDA5MDAxMjE2ZjExMzRh
YjQ2OGRhMmVhZTk2ZWFiZDFmMjM0NjQ3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCN6B1oHbf3YzODIgDB8qxufkTu0gbWG/xCYhNq4QOFo9Lr+Gp8
9n2ViidtYMcFpM04kt2+W4QhCWda/rE4FShd13xVp5QZRXO0n3McavVe5USOXsOH
rZeXcqQVsvQ+prB8rVGTRz0uVdeMZNbWuek0moA3H3GLVI5Xj9AAliuV4rS4ov00
MNZwKMDjZS6HXdM94NiYEYDyBuAxVOT9Wu0Ocoa3dxXag4irk4g4k9cVj8zd+xD2
YW6WMSqMGzUqtL12nQnEr8s++f+RA4bFhvEyu1v5BkaTAu6j2A/zcfRs+M8MdaLS
cI+dOSYxnu2W/7kPgpkcSx7nEppRW9QHKoj7AgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUqAhvuC2QLvFljdt8li2s5FJmxSMwHwYDVR0jBBgwFoAUZwtMqUo4CkyEzLP1
cFIFEuu+HDowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82YzdhMzIy
MTdkM2RkNTI2ZTIyOWMyZDQzMWI3ZWI0NDdjZTMzODUxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy83NmIwYjcwMi0wZTFiLTQ3MmItODAyZS0xMWEyNTIz
NmI4NDIvMDkwMDEyMTZmMTEzNGFiNDY4ZGEyZWFlOTZlYWJkMWYyMzQ2NDczNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzc2YjBiNzAyLTBlMWItNDcyYi04MDJlLTExYTI1
MjM2Yjg0Mi82YzdhMzIyMTdkM2RkNTI2ZTIyOWMyZDQzMWI3ZWI0NDdjZTMzODUx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAMAkDANBgkqhkiG9w0BAQsFAAOCAQEAAfKpoWD4CeZ8rKeg
ThXcC+9AP6ZS4D+i70ULB6S7gFrUNkI5fb57ZlK0Dihda+QjG1ccvC9SaTySx21c
jD8cB+2a2uJZE6pl1nExtsWqw5wDv0H4BOWfG19TEeQquMkQ1vzibVt4rPjyXGBa
1WYGYeYBA5xOx4lgBMGX3pq0A475MLxoQ3RFUT6Y4noEMpXnQo84fyc67njx/kns
TsL3qbxkMqp0MOch8wDgSWx8vNiCWEUtwksJr/2itAeuICCwKDW/GlZzMnEgUQha
FhWXyj2usf3m5O+4fD8X9vkvIle12MU9F5uUq2bT67iZ8zb/hiYcIEGuOPOyHn5n
bnSaaQ==
-----END CERTIFICATE-----