Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/69f4902e302d69f1619567223f0ae5aa1d5dd218.roa
File:                     69f4902e302d69f1619567223f0ae5aa1d5dd218.roa (raw, json)
Hash identifier:          raIsIkPvNu8ZRozWFL20YZa4YhX++TDJkqTYczYFJOE=
Subject key identifier:   FF:7F:64:BC:1D:83:4A:FB:4C:CE:42:89:54:99:D7:43:0E:C6:AC:A4
Certificate issuer:       /CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b
Certificate serial:       05D9DB
Authority key identifier: F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/69f4902e302d69f1619567223f0ae5aa1d5dd218.roa
Signing time:             Mon 02 May 2022 21:08:18 +0000
ROA not before:           Mon 02 May 2022 03:00:00 +0000
ROA not after:            Thu 02 May 2024 03:00:00 +0000
asID:                     263821
IP address blocks:        2803:e680::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383451 (0x5d9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b
        Validity
            Not Before: May  2 03:00:00 2022 GMT
            Not After : May  2 03:00:00 2024 GMT
        Subject: CN=69f4902e302d69f1619567223f0ae5aa1d5dd218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:18:bc:41:45:db:40:0d:b0:fb:95:40:6d:
                    5f:38:e2:e2:e5:27:15:81:fc:e2:b7:ba:9d:81:e5:
                    1e:9f:50:f0:9c:84:c4:ef:3c:0f:af:d7:02:9d:09:
                    34:7c:d6:fd:8d:51:e0:76:81:c4:99:0c:eb:ce:9a:
                    70:2a:b8:06:20:a3:b9:b0:dc:a1:c0:48:ad:b6:65:
                    80:95:c9:bd:07:a4:9a:76:c1:26:2a:14:31:67:ff:
                    86:76:08:78:7b:a2:e9:d2:4e:99:a7:ba:8d:4f:32:
                    d0:e3:29:dd:3c:e0:9c:94:cc:26:a4:31:f9:85:d8:
                    66:9e:51:ef:c1:28:f3:fa:76:38:4c:25:db:88:d3:
                    22:4b:03:90:89:5e:bf:31:25:fa:00:18:5e:33:d9:
                    5c:ab:a3:1d:7b:52:75:91:ed:96:9e:e0:36:ff:80:
                    10:39:14:93:2f:fb:a7:f9:16:81:20:11:1e:39:25:
                    3c:9b:1b:c8:0d:ba:34:ca:cd:33:c8:12:a1:b9:d7:
                    74:2f:93:68:d8:25:a3:08:1b:b6:34:e2:c5:0b:7a:
                    7f:21:74:67:8b:a5:68:ad:39:24:fe:6d:06:d7:f0:
                    8c:e6:ef:ee:4c:c8:0c:a6:06:c1:5b:b4:4c:fb:dc:
                    c3:f5:e5:74:3e:ea:e7:8e:c3:46:3c:c4:20:8b:81:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7F:64:BC:1D:83:4A:FB:4C:CE:42:89:54:99:D7:43:0E:C6:AC:A4
            X509v3 Authority Key Identifier:
                keyid:F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/69f4902e302d69f1619567223f0ae5aa1d5dd218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e680::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:3a:d7:ce:18:8e:37:85:a9:62:13:dc:83:d9:01:15:07:
         9a:87:b7:e0:b4:89:c2:8f:b7:d4:fe:5f:7e:2f:ee:39:c7:4a:
         97:af:d4:b8:8a:82:08:21:17:67:b0:b8:13:30:aa:1a:ce:20:
         80:14:7f:df:77:07:d2:d3:52:db:6d:95:1c:a7:80:1c:0a:0f:
         ef:86:7e:bc:90:84:7c:54:b8:bf:aa:24:a0:49:a4:5c:a5:14:
         f8:bc:cf:cd:e6:18:d4:bf:65:d6:9f:53:05:37:1a:4a:c7:ad:
         d4:d2:1d:eb:f0:0b:34:c8:43:cf:fa:fd:fa:7e:1b:09:5c:e2:
         f7:0c:2c:9b:a8:d2:c2:7a:bd:51:d8:82:ba:48:b6:b9:87:ad:
         b9:41:24:cf:0c:75:32:bc:4e:32:99:6e:0a:1a:64:13:f0:07:
         31:d7:a7:1c:15:ca:d1:7d:31:2e:ec:59:fa:a4:1b:de:77:a3:
         1a:4d:b2:fb:20:67:75:5d:54:72:00:43:90:2d:f8:4b:5a:5e:
         36:42:6a:90:0b:7a:61:96:50:1e:9f:ad:0c:80:dd:94:2a:99:
         95:1b:c6:6f:9e:05:65:23:2a:b7:67:8b:71:ab:38:54:8f:7e:
         61:01:f0:3a:fa:ff:b9:bb:58:d2:35:d2:c1:8b:80:03:ad:c0:
         3f:d0:09:53
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBdnbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
ODIzMGQyYzBjNjgwM2RjNDliNGIyYzZkZWNlMWMwZDYyNzk0MWIwHhcNMjIwNTAy
MDMwMDAwWhcNMjQwNTAyMDMwMDAwWjAzMTEwLwYDVQQDEyg2OWY0OTAyZTMwMmQ2
OWYxNjE5NTY3MjIzZjBhZTVhYTFkNWRkMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnqoYvEFF20ANsPuVQG1fOOLi5ScVgfzit7qdgeUen1DwnITE
7zwPr9cCnQk0fNb9jVHgdoHEmQzrzppwKrgGIKO5sNyhwEittmWAlcm9B6SadsEm
KhQxZ/+Gdgh4e6Lp0k6Zp7qNTzLQ4yndPOCclMwmpDH5hdhmnlHvwSjz+nY4TCXb
iNMiSwOQiV6/MSX6ABheM9lcq6Mde1J1ke2WnuA2/4AQORSTL/un+RaBIBEeOSU8
mxvIDbo0ys0zyBKhudd0L5No2CWjCBu2NOLFC3p/IXRni6VorTkk/m0G1/CM5u/u
TMgMpgbBW7RM+9zD9eV0PurnjsNGPMQgi4HzzQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFP9/ZLwdg0r7TM5CiVSZ10MOxqykMB8GA1UdIwQYMBaAFPPNCUz36y+X/TD7
kjcM1pN6tItuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA4MjMw
ZDJjMGM2ODAzZGM0OWI0YjJjNmRlY2UxYzBkNjI3OTQxYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2ZmN2E2YzctZjg4OS00NGU3LThjNTktMTFkYmUw
YTI0NDBmLzY5ZjQ5MDJlMzAyZDY5ZjE2MTk1NjcyMjNmMGFlNWFhMWQ1ZGQyMTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZmY3YTZjNy1mODg5LTQ0ZTctOGM1OS0xMWRi
ZTBhMjQ0MGYvMTA4MjMwZDJjMGM2ODAzZGM0OWI0YjJjNmRlY2UxYzBkNjI3OTQx
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD5oAwDQYJKoZIhvcNAQELBQADggEBAHTDOtfOGI43hali
E9yD2QEVB5qHt+C0icKPt9T+X34v7jnHSpev1LiKggghF2ewuBMwqhrOIIAUf993
B9LTUtttlRyngBwKD++GfryQhHxUuL+qJKBJpFylFPi8z83mGNS/ZdafUwU3GkrH
rdTSHevwCzTIQ8/6/fp+Gwlc4vcMLJuo0sJ6vVHYgrpItrmHrblBJM8MdTK8TjKZ
bgoaZBPwBzHXpxwVytF9MS7sWfqkG953oxpNsvsgZ3VdVHIAQ5At+EtaXjZCapAL
emGWUB6frQyA3ZQqmZUbxm+eBWUjKrdni3GrOFSPfmEB8Dr6/7m7WNI10sGLgAOt
wD/QCVM=
-----END CERTIFICATE-----