Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/84c50369bbf108afc6be93fe5644d8d224e9ba87.roa
File:                     84c50369bbf108afc6be93fe5644d8d224e9ba87.roa (raw, json)
Hash identifier:          1fHBfi7BvnktNKj42Ey30ThYR2G++c04PNrhTIaDGjI=
Subject key identifier:   FA:DC:86:6F:E2:57:90:B4:AE:B4:DA:D6:33:7A:1B:C5:86:EA:B0:E8
Certificate issuer:       /CN=b7ee88f1dc88f72c7e067599d485469a6956793b
Certificate serial:       065E
Authority key identifier: 7B:8F:76:E5:65:23:BB:74:82:F8:B9:83:A2:31:3B:17:01:78:E4:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7ee88f1dc88f72c7e067599d485469a6956793b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/84c50369bbf108afc6be93fe5644d8d224e9ba87.roa
Signing time:             Mon 31 Oct 2022 17:24:44 +0000
ROA not before:           Sun 30 Oct 2022 17:23:42 +0000
ROA not after:            Thu 31 Oct 2024 17:23:42 +0000
asID:                     270162
IP address blocks:        2806:3e8::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ee88f1dc88f72c7e067599d485469a6956793b
        Validity
            Not Before: Oct 30 17:23:42 2022 GMT
            Not After : Oct 31 17:23:42 2024 GMT
        Subject: CN=84c50369bbf108afc6be93fe5644d8d224e9ba87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:15:15:16:d0:cb:b6:70:01:77:b0:d3:99:
                    db:d7:97:26:50:4a:8f:11:f9:62:fb:74:8b:8b:b5:
                    01:6d:e5:22:71:b9:2c:ec:02:22:bf:f4:c8:e3:91:
                    35:13:60:e2:c2:79:b9:cb:f6:88:ce:78:89:4f:bd:
                    09:d5:ba:e1:4f:c9:eb:04:02:5b:fa:72:01:42:28:
                    b7:b1:12:c4:64:1a:3e:ef:98:18:85:7f:0f:a5:e8:
                    54:e3:0c:4f:50:72:47:5c:88:66:42:f1:d9:e6:a3:
                    f2:3c:5a:9b:35:3b:71:f1:07:b7:53:bc:6f:06:68:
                    32:46:9c:58:cf:20:63:00:49:a0:24:2c:ce:98:9f:
                    57:78:8c:53:1f:79:96:40:2e:3a:23:e6:10:a3:6e:
                    69:77:bb:05:c8:88:33:1b:da:29:02:05:bb:60:f8:
                    9b:65:fc:74:6f:34:96:5b:5f:c9:eb:1d:6a:8f:fc:
                    d0:9c:c4:24:06:e6:5d:ed:3d:f0:84:fe:68:d3:63:
                    c9:52:fd:28:4a:45:4d:da:64:67:38:ed:04:14:3b:
                    2b:b2:e8:e5:a2:2d:4b:80:21:7c:db:ca:e0:1d:e3:
                    80:3c:1f:d6:fc:93:d4:83:68:b6:f3:e6:3b:8d:e9:
                    6c:bf:5b:2d:a1:d5:98:4c:05:73:1c:4c:2d:9d:82:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:86:6F:E2:57:90:B4:AE:B4:DA:D6:33:7A:1B:C5:86:EA:B0:E8
            X509v3 Authority Key Identifier:
                keyid:7B:8F:76:E5:65:23:BB:74:82:F8:B9:83:A2:31:3B:17:01:78:E4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7ee88f1dc88f72c7e067599d485469a6956793b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/84c50369bbf108afc6be93fe5644d8d224e9ba87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/b7ee88f1dc88f72c7e067599d485469a6956793b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e8::/35

    Signature Algorithm: sha256WithRSAEncryption
         da:4d:4a:09:cc:8f:ef:61:43:13:f1:ba:40:a0:e3:ef:1e:c8:
         80:ec:ae:32:b4:0e:f0:dc:eb:80:a4:89:02:a2:66:21:be:04:
         ea:eb:63:35:d1:f2:a9:53:99:00:14:11:b0:e1:d5:90:1d:21:
         27:1f:4f:71:bc:82:1f:c7:ca:8e:65:76:40:a8:13:f6:4d:a6:
         54:22:db:24:7c:80:e7:a0:a0:c5:37:52:d7:dc:46:c1:ec:62:
         ca:13:77:54:cc:21:21:49:d1:6e:6d:35:fe:69:8e:65:f1:15:
         98:be:e0:68:fc:60:99:24:78:d0:09:b2:d9:c4:5d:f6:08:ed:
         0c:72:b6:13:47:23:ef:24:26:2c:e2:38:cb:d3:bf:b4:d3:33:
         34:cf:40:92:2b:c4:c0:a3:ae:d5:4e:9a:d8:50:24:41:56:cb:
         be:2c:97:a5:15:81:0a:3e:95:85:e9:72:a3:53:1e:df:28:e9:
         42:b8:5b:06:39:d0:02:f0:58:e0:a7:da:59:45:de:92:59:39:
         a6:e4:93:55:e9:dc:a2:20:03:38:d7:2d:15:52:6a:a2:48:a6:
         61:cc:1a:47:69:3a:5b:d7:83:8e:bc:28:bb:30:bd:f4:32:b5:
         4d:ed:3d:7b:19:b7:fd:95:ec:e6:0d:45:66:60:d0:93:1e:64:
         33:5e:ae:97
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYjdl
ZTg4ZjFkYzg4ZjcyYzdlMDY3NTk5ZDQ4NTQ2OWE2OTU2NzkzYjAeFw0yMjEwMzAx
NzIzNDJaFw0yNDEwMzExNzIzNDJaMDMxMTAvBgNVBAMTKDg0YzUwMzY5YmJmMTA4
YWZjNmJlOTNmZTU2NDRkOGQyMjRlOWJhODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQComRUVFtDLtnABd7DTmdvXlyZQSo8R+WL7dIuLtQFt5SJxuSzs
AiK/9MjjkTUTYOLCebnL9ojOeIlPvQnVuuFPyesEAlv6cgFCKLexEsRkGj7vmBiF
fw+l6FTjDE9QckdciGZC8dnmo/I8Wps1O3HxB7dTvG8GaDJGnFjPIGMASaAkLM6Y
n1d4jFMfeZZALjoj5hCjbml3uwXIiDMb2ikCBbtg+Jtl/HRvNJZbX8nrHWqP/NCc
xCQG5l3tPfCE/mjTY8lS/ShKRU3aZGc47QQUOyuy6OWiLUuAIXzbyuAd44A8H9b8
k9SDaLbz5juN6Wy/Wy2h1ZhMBXMcTC2dgq8/AgMBAAGjggJdMIICWTAdBgNVHQ4E
FgQU+tyGb+JXkLSutNrWM3obxYbqsOgwHwYDVR0jBBgwFoAUe4925WUju3SC+LmD
ojE7FwF45FUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iN2VlODhm
MWRjODhmNzJjN2UwNjc1OTlkNDg1NDY5YTY5NTY3OTNiLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84M2M0NWIzMS00YWE4LTQxZmMtODk1MS0zN2VhOWNh
ZDFiOGIvODRjNTAzNjliYmYxMDhhZmM2YmU5M2ZlNTY0NGQ4ZDIyNGU5YmE4Ny5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzgzYzQ1YjMxLTRhYTgtNDFmYy04OTUxLTM3ZWE5
Y2FkMWI4Yi9iN2VlODhmMWRjODhmNzJjN2UwNjc1OTlkNDg1NDY5YTY5NTY3OTNi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAOBAIAAjAIAwYFKAYD6AAwDQYJKoZIhvcNAQELBQADggEBANpNSgnMj+9hQxPx
ukCg4+8eyIDsrjK0DvDc64CkiQKiZiG+BOrrYzXR8qlTmQAUEbDh1ZAdIScfT3G8
gh/Hyo5ldkCoE/ZNplQi2yR8gOegoMU3UtfcRsHsYsoTd1TMISFJ0W5tNf5pjmXx
FZi+4Gj8YJkkeNAJstnEXfYI7QxythNHI+8kJiziOMvTv7TTMzTPQJIrxMCjrtVO
mthQJEFWy74sl6UVgQo+lYXpcqNTHt8o6UK4WwY50ALwWOCn2llF3pJZOabkk1Xp
3KIgAzjXLRVSaqJIpmHMGkdpOlvXg468KLswvfQytU3tPXsZt/2V7OYNRWZg0JMe
ZDNerpc=
-----END CERTIFICATE-----