Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/88b2e9083ac216f4bd3869e04e382fc5c4c1ba84.roa
File:                     88b2e9083ac216f4bd3869e04e382fc5c4c1ba84.roa (raw, json)
Hash identifier:          Ezg0aTTOn4OAjdSZqulIIplYBhXe3IfsYzfggPblLOs=
Subject key identifier:   0F:5E:E1:F5:7E:FB:49:CC:3A:AB:F6:DD:57:87:E4:4C:A7:0C:C2:B9
Certificate issuer:       /CN=45c39d9d136d50b95ff0545ebeb34be8bcb8e562
Certificate serial:       26A71D
Authority key identifier: A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/88b2e9083ac216f4bd3869e04e382fc5c4c1ba84.roa
Signing time:             Fri 29 Dec 2023 18:30:47 +0000
ROA not before:           Fri 29 Dec 2023 18:30:46 +0000
ROA not after:            Fri 29 Dec 2028 18:30:46 +0000
asID:                     265775
IP address blocks:        2803:cb20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533149 (0x26a71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c39d9d136d50b95ff0545ebeb34be8bcb8e562
        Validity
            Not Before: Dec 29 18:30:46 2023 GMT
            Not After : Dec 29 18:30:46 2028 GMT
        Subject: CN=88b2e9083ac216f4bd3869e04e382fc5c4c1ba84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:82:6c:9e:b1:2a:0f:de:77:ef:38:59:a7:
                    47:85:3f:2a:71:8f:88:ee:b2:2b:b3:e2:93:87:60:
                    6a:37:7e:b8:0a:f8:2c:a2:92:54:13:53:98:a0:74:
                    e1:94:0b:70:d9:9e:2d:cf:c3:a7:a3:c1:a2:d4:9c:
                    26:dd:63:5e:4c:ea:72:10:83:ec:5c:9a:2e:bb:d2:
                    b7:34:60:41:51:9a:ca:2f:11:e2:b8:13:64:e4:6e:
                    af:d9:2a:d0:2b:a6:45:09:62:04:d6:a4:f0:6a:60:
                    d3:30:f6:e5:39:b8:1a:ef:4e:db:55:f0:d7:aa:5e:
                    a5:02:4e:bb:fb:5d:c2:60:1e:89:33:1c:ec:99:5d:
                    e8:8c:51:32:d6:86:ad:76:2b:5c:7a:c7:37:44:74:
                    f8:c7:97:56:01:46:8a:f1:a2:c5:59:24:3a:03:45:
                    0c:8e:e7:f8:63:d7:71:3a:19:b6:3c:91:20:4e:4d:
                    e3:2b:f4:f5:c4:5d:8d:59:5c:2d:e6:e5:54:f5:4a:
                    0a:61:ac:c9:fc:40:1f:1e:eb:ad:59:a8:54:f9:27:
                    c8:09:14:e7:d8:d7:18:52:3c:8b:46:d0:b9:9c:64:
                    2e:3f:1e:c6:71:86:8c:d4:38:b7:6c:68:2f:5a:0e:
                    8c:d9:52:19:77:19:e7:4d:63:36:16:d2:8f:d7:72:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:E1:F5:7E:FB:49:CC:3A:AB:F6:DD:57:87:E4:4C:A7:0C:C2:B9
            X509v3 Authority Key Identifier:
                keyid:A6:90:F2:E6:A7:6B:5D:6E:22:5C:DD:CE:62:4A:03:22:5B:60:6E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/88b2e9083ac216f4bd3869e04e382fc5c4c1ba84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/45c39d9d136d50b95ff0545ebeb34be8bcb8e562.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:80:29:15:31:eb:da:58:a8:cc:a2:8f:01:c8:21:e5:57:eb:
         0b:02:63:88:27:be:fd:6a:e5:ea:e2:b0:61:c2:e1:1b:d9:c8:
         fb:17:c2:7f:0c:02:b9:98:68:2b:34:83:8b:f0:4e:2f:8f:6f:
         06:cb:38:e6:36:f2:27:f2:c1:57:4d:1a:4e:4c:9f:4f:af:e3:
         a5:95:49:77:1e:24:6b:f0:58:f3:f1:1a:cd:21:c7:8a:b0:d7:
         5d:af:90:a0:bb:98:1d:fe:7c:d1:6a:f5:b5:67:29:f1:b5:b2:
         26:e9:8d:30:7e:bc:4d:bf:c0:8a:06:20:42:34:7d:7f:71:9b:
         fd:1c:70:dd:46:67:a0:58:1c:ef:2e:75:a2:c6:65:73:22:f1:
         be:5d:72:33:00:9c:de:f6:2e:04:3d:11:45:e0:f5:f8:39:77:
         63:7b:ca:84:79:ba:82:fa:55:44:26:79:9b:5c:eb:63:a8:18:
         9e:34:e1:69:72:25:89:d3:43:ad:88:7e:85:61:38:fa:b7:35:
         fe:67:73:ba:72:7f:2c:e1:bb:b2:5a:73:26:52:69:93:48:c8:
         ff:e6:3d:55:55:5d:84:78:e4:88:cd:f1:5b:c2:37:f0:25:b4:
         86:34:52:2a:fc:6b:df:46:89:fd:96:f6:af:7a:06:d4:d4:76:
         5f:7f:a3:7b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJqcdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ1
YzM5ZDlkMTM2ZDUwYjk1ZmYwNTQ1ZWJlYjM0YmU4YmNiOGU1NjIwHhcNMjMxMjI5
MTgzMDQ2WhcNMjgxMjI5MTgzMDQ2WjAzMTEwLwYDVQQDEyg4OGIyZTkwODNhYzIx
NmY0YmQzODY5ZTA0ZTM4MmZjNWM0YzFiYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAssmCbJ6xKg/ed+84WadHhT8qcY+I7rIrs+KTh2BqN364Cvgs
opJUE1OYoHThlAtw2Z4tz8Ono8Gi1Jwm3WNeTOpyEIPsXJouu9K3NGBBUZrKLxHi
uBNk5G6v2SrQK6ZFCWIE1qTwamDTMPblObga707bVfDXql6lAk67+13CYB6JMxzs
mV3ojFEy1oatditcesc3RHT4x5dWAUaK8aLFWSQ6A0UMjuf4Y9dxOhm2PJEgTk3j
K/T1xF2NWVwt5uVU9UoKYazJ/EAfHuutWahU+SfICRTn2NcYUjyLRtC5nGQuPx7G
cYaM1Di3bGgvWg6M2VIZdxnnTWM2FtKP13IsTQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFA9e4fV++0nMOqv23VeH5EynDMK5MB8GA1UdIwQYMBaAFKaQ8uana11uIlzd
zmJKAyJbYG4vMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDVjMzlk
OWQxMzZkNTBiOTVmZjA1NDVlYmViMzRiZThiY2I4ZTU2Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGEwZWEyZWEtMzVhMy00MzRjLTlkNTctNGIwZTQ0
NjVjOTQzLzg4YjJlOTA4M2FjMjE2ZjRiZDM4NjllMDRlMzgyZmM1YzRjMWJhODQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YTBlYTJlYS0zNWEzLTQzNGMtOWQ1Ny00YjBl
NDQ2NWM5NDMvNDVjMzlkOWQxMzZkNTBiOTVmZjA1NDVlYmViMzRiZThiY2I4ZTU2
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDyyAwDQYJKoZIhvcNAQELBQADggEBAAGAKRUx69pYqMyi
jwHIIeVX6wsCY4gnvv1q5erisGHC4RvZyPsXwn8MArmYaCs0g4vwTi+PbwbLOOY2
8ifywVdNGk5Mn0+v46WVSXceJGvwWPPxGs0hx4qw112vkKC7mB3+fNFq9bVnKfG1
sibpjTB+vE2/wIoGIEI0fX9xm/0ccN1GZ6BYHO8udaLGZXMi8b5dcjMAnN72LgQ9
EUXg9fg5d2N7yoR5uoL6VUQmeZtc62OoGJ404WlyJYnTQ62IfoVhOPq3Nf5nc7py
fyzhu7JacyZSaZNIyP/mPVVVXYR45IjN8VvCN/AltIY0Uir8a99Gif2W9q96BtTU
dl9/o3s=
-----END CERTIFICATE-----