Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/f8ee9f92da8496ec5a1c91be901811e51aad09f8.roa
File:                     f8ee9f92da8496ec5a1c91be901811e51aad09f8.roa (raw, json)
Hash identifier:          ovUl2r683yWxU8c3B/1SjE0poitfyhyiViOdIUcorvQ=
Subject key identifier:   3B:13:E1:80:2E:15:88:13:9A:E4:5C:29:53:E2:E5:BD:4E:C7:CA:C8
Certificate issuer:       /CN=b7ee88f1dc88f72c7e067599d485469a6956793b
Certificate serial:       046E
Authority key identifier: 7B:8F:76:E5:65:23:BB:74:82:F8:B9:83:A2:31:3B:17:01:78:E4:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7ee88f1dc88f72c7e067599d485469a6956793b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/f8ee9f92da8496ec5a1c91be901811e51aad09f8.roa
Signing time:             Mon 31 Oct 2022 17:23:30 +0000
ROA not before:           Sun 30 Oct 2022 17:21:38 +0000
ROA not after:            Thu 31 Oct 2024 17:21:38 +0000
asID:                     270162
IP address blocks:        2806:3e8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134 (0x46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ee88f1dc88f72c7e067599d485469a6956793b
        Validity
            Not Before: Oct 30 17:21:38 2022 GMT
            Not After : Oct 31 17:21:38 2024 GMT
        Subject: CN=f8ee9f92da8496ec5a1c91be901811e51aad09f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:44:46:d8:3a:79:26:a7:a3:e5:ca:47:01:
                    93:ab:0a:ea:05:d1:e4:07:6a:7c:f2:93:bc:42:e8:
                    48:de:61:03:8c:c2:94:5f:0b:ce:9c:21:9d:f3:14:
                    e6:ab:20:9e:d0:ad:71:c5:02:c4:8e:9f:96:3d:41:
                    6a:33:0c:f9:de:22:d7:67:bc:8f:fc:76:36:79:5d:
                    5a:0f:f5:76:60:6d:2b:fb:39:88:a8:ec:df:e2:c5:
                    cb:84:7e:8f:81:9f:bb:e1:33:d7:b2:9a:19:b9:df:
                    11:18:d1:2f:49:eb:ae:79:ff:c6:3f:e8:20:40:2f:
                    36:d4:a6:1b:09:31:66:b8:7a:78:99:2d:b7:95:35:
                    4a:80:1a:a0:88:d1:c6:f7:03:4f:78:41:29:7f:f2:
                    da:ef:3c:06:e8:8d:c7:93:c7:b6:e3:d1:52:24:48:
                    59:2d:14:bc:de:e4:41:e4:a1:d0:a9:c1:4f:0a:82:
                    03:25:df:03:7e:1a:34:73:e1:c1:24:5b:65:dc:4f:
                    7c:73:ad:c7:40:90:e6:ca:6a:09:ef:26:2a:8c:b4:
                    1f:d3:83:24:81:8a:ff:8b:a8:d1:89:33:b1:4d:4c:
                    63:c3:e8:f2:a7:0f:9c:61:d9:80:d5:3b:34:69:9e:
                    92:75:dc:2f:83:f2:a6:b0:0e:3a:39:06:f3:01:2e:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:E1:80:2E:15:88:13:9A:E4:5C:29:53:E2:E5:BD:4E:C7:CA:C8
            X509v3 Authority Key Identifier:
                keyid:7B:8F:76:E5:65:23:BB:74:82:F8:B9:83:A2:31:3B:17:01:78:E4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7ee88f1dc88f72c7e067599d485469a6956793b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/f8ee9f92da8496ec5a1c91be901811e51aad09f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83c45b31-4aa8-41fc-8951-37ea9cad1b8b/b7ee88f1dc88f72c7e067599d485469a6956793b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:a2:fc:88:1e:5d:67:a0:8a:04:ec:0a:58:68:c8:4d:1b:6e:
         24:36:dd:6b:a5:70:8d:51:82:52:de:02:5e:f1:f3:a8:fb:e5:
         47:6f:0d:2a:5c:20:94:b0:8d:3a:d5:ee:8e:51:3a:ae:bf:ee:
         ab:9f:8e:77:1e:37:d6:f2:1a:6b:ed:03:2d:27:ca:ce:03:2b:
         1f:62:55:6a:be:6d:15:8d:42:db:7e:1c:d1:73:6f:ab:b4:cb:
         86:e2:2b:2b:20:5a:e8:99:50:d6:ad:46:d5:47:04:c5:ce:84:
         98:74:9b:73:80:66:a1:2d:74:d0:85:47:1d:7c:44:69:f1:95:
         c2:36:60:27:7e:5c:64:0a:a3:4e:a0:2e:be:4b:fd:6e:bb:0f:
         4a:ad:71:67:14:64:48:19:79:0a:ed:2c:73:28:e9:d1:b2:3b:
         dd:ef:ac:49:ab:e1:e6:f8:41:7f:d8:2d:a1:3f:18:04:d8:94:
         5b:32:5f:ed:d0:3e:10:1d:61:11:d4:24:b5:f5:b7:ee:04:9b:
         30:6a:a1:d9:8c:7e:26:12:1b:e5:ed:3f:58:70:68:87:0f:a1:
         23:6f:36:77:b6:ed:29:d0:d8:19:17:02:d3:c7:db:ea:91:cd:
         9e:3d:11:57:79:79:6b:2a:64:67:e7:89:b7:6f:19:2d:97:d5:
         07:f5:82:10
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYjdl
ZTg4ZjFkYzg4ZjcyYzdlMDY3NTk5ZDQ4NTQ2OWE2OTU2NzkzYjAeFw0yMjEwMzAx
NzIxMzhaFw0yNDEwMzExNzIxMzhaMDMxMTAvBgNVBAMTKGY4ZWU5ZjkyZGE4NDk2
ZWM1YTFjOTFiZTkwMTgxMWU1MWFhZDA5ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeWkRG2Dp5Jqej5cpHAZOrCuoF0eQHanzyk7xC6EjeYQOMwpRf
C86cIZ3zFOarIJ7QrXHFAsSOn5Y9QWozDPneItdnvI/8djZ5XVoP9XZgbSv7OYio
7N/ixcuEfo+Bn7vhM9eymhm53xEY0S9J6655/8Y/6CBALzbUphsJMWa4eniZLbeV
NUqAGqCI0cb3A094QSl/8trvPAbojceTx7bj0VIkSFktFLze5EHkodCpwU8KggMl
3wN+GjRz4cEkW2XcT3xzrcdAkObKagnvJiqMtB/TgySBiv+LqNGJM7FNTGPD6PKn
D5xh2YDVOzRpnpJ13C+D8qawDjo5BvMBLpl/AgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUOxPhgC4ViBOa5FwpU+LlvU7HysgwHwYDVR0jBBgwFoAUe4925WUju3SC+LmD
ojE7FwF45FUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iN2VlODhm
MWRjODhmNzJjN2UwNjc1OTlkNDg1NDY5YTY5NTY3OTNiLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84M2M0NWIzMS00YWE4LTQxZmMtODk1MS0zN2VhOWNh
ZDFiOGIvZjhlZTlmOTJkYTg0OTZlYzVhMWM5MWJlOTAxODExZTUxYWFkMDlmOC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzgzYzQ1YjMxLTRhYTgtNDFmYy04OTUxLTM3ZWE5
Y2FkMWI4Yi9iN2VlODhmMWRjODhmNzJjN2UwNjc1OTlkNDg1NDY5YTY5NTY3OTNi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAYD6DANBgkqhkiG9w0BAQsFAAOCAQEAV6L8iB5dZ6CKBOwK
WGjITRtuJDbda6VwjVGCUt4CXvHzqPvlR28NKlwglLCNOtXujlE6rr/uq5+Odx43
1vIaa+0DLSfKzgMrH2JVar5tFY1C234c0XNvq7TLhuIrKyBa6JlQ1q1G1UcExc6E
mHSbc4BmoS100IVHHXxEafGVwjZgJ35cZAqjTqAuvkv9brsPSq1xZxRkSBl5Cu0s
cyjp0bI73e+sSavh5vhBf9gtoT8YBNiUWzJf7dA+EB1hEdQktfW37gSbMGqh2Yx+
JhIb5e0/WHBohw+hI282d7btKdDYGRcC08fb6pHNnj0RV3l5aypkZ+eJt28ZLZfV
B/WCEA==
-----END CERTIFICATE-----