Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/e6d0f5318364b39f661639ef7cec9f936be1a7dc.roa
File:                     e6d0f5318364b39f661639ef7cec9f936be1a7dc.roa (raw, json)
Hash identifier:          O1l4Jo5BM2wjhFxovOSB6nvoC9zVBi3+Yb5/K1cmPuI=
Subject key identifier:   60:EA:2A:69:E8:07:20:98:17:F2:AA:AC:EE:48:B8:C1:48:B6:C8:5E
Certificate issuer:       /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial:       1B1E81
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/e6d0f5318364b39f661639ef7cec9f936be1a7dc.roa
Signing time:             Fri 25 Aug 2023 15:37:22 +0000
ROA not before:           Thu 24 Aug 2023 15:37:22 +0000
ROA not after:            Mon 25 Aug 2025 15:37:22 +0000
asID:                     52398
IP address blocks:        2803:6e00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777281 (0x1b1e81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
        Validity
            Not Before: Aug 24 15:37:22 2023 GMT
            Not After : Aug 25 15:37:22 2025 GMT
        Subject: CN=e6d0f5318364b39f661639ef7cec9f936be1a7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:25:44:54:63:16:e4:b3:02:0a:a2:dc:25:
                    0f:6c:35:84:6c:dd:00:ae:cf:42:34:6a:ba:52:90:
                    b4:05:6b:ab:08:c0:aa:a5:bd:32:36:c7:2c:af:08:
                    a6:18:92:49:49:f0:e0:dd:56:8d:9d:d8:11:2c:fd:
                    69:d2:9a:8f:a4:d0:87:a6:93:83:0e:a9:b4:81:58:
                    c0:ca:c3:f2:2c:8d:c1:f5:8c:8f:31:39:70:d6:fc:
                    f1:79:f8:52:9e:20:7e:fa:cd:88:9e:94:8b:fd:f9:
                    fb:a0:55:f3:42:05:28:a2:4c:ec:d6:3c:2d:b7:25:
                    21:fa:ca:d4:93:80:5e:ee:cd:c1:82:a0:b0:1b:2a:
                    87:55:c6:9b:96:a7:3e:0c:46:25:97:1a:c6:60:4b:
                    93:91:ab:bf:48:71:c3:c8:b7:4d:e1:a3:0c:ed:4e:
                    ef:4c:2a:70:39:71:d1:88:ed:60:f1:ea:bc:ad:0c:
                    9e:41:0a:78:fd:c4:9c:d3:ed:33:99:a3:27:c8:1a:
                    cf:d5:82:34:c3:8f:43:49:6b:be:6f:38:dd:e9:f1:
                    19:ac:a6:0a:d3:93:58:d0:a5:dc:bc:a8:3a:1c:bf:
                    e1:c9:5c:8a:34:31:08:a6:d0:4d:ef:3a:f0:e4:fe:
                    50:03:e2:e2:8c:3a:62:19:18:19:7c:28:5f:94:86:
                    5c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EA:2A:69:E8:07:20:98:17:F2:AA:AC:EE:48:B8:C1:48:B6:C8:5E
            X509v3 Authority Key Identifier:
                keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/e6d0f5318364b39f661639ef7cec9f936be1a7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:aa:67:d7:65:0d:06:37:b8:69:91:68:1d:92:24:64:ea:
         29:1a:10:13:20:d5:8d:a9:f1:c7:77:4a:c5:24:8d:f7:36:c6:
         f0:44:39:3d:3c:44:15:dd:f0:88:fc:b1:42:81:67:37:ce:14:
         39:be:e7:3a:7d:29:b2:74:09:a3:cc:df:54:50:81:93:f4:e0:
         98:54:69:44:fd:61:ca:8c:38:66:16:d0:e4:62:b1:c8:94:42:
         78:9c:02:a8:b4:3d:97:af:50:fd:c4:d6:40:f8:e9:4e:06:a4:
         65:95:2d:9a:47:41:7d:de:ac:4d:d4:00:a7:bc:96:b2:83:ea:
         1a:e3:06:6b:0a:79:a0:fa:d0:40:35:2d:b0:83:a6:22:4c:b6:
         53:81:d3:aa:0a:41:a5:80:12:22:9a:8c:80:57:2d:12:88:91:
         28:c6:4d:d0:fe:0f:d7:dc:90:c8:5c:2b:72:76:33:16:c4:9c:
         20:09:87:4e:16:18:df:52:48:a2:0c:4b:af:b5:31:07:17:f7:
         10:b5:a5:62:0d:60:b7:21:e8:c7:4d:a5:e4:eb:47:7c:f3:ee:
         fb:50:44:4c:3a:f8:5a:ed:c2:40:1b:5c:b8:89:f3:78:06:e6:
         d2:f7:bd:ff:c5:21:b0:8a:51:ba:85:20:f7:a2:60:c0:af:1f:
         be:22:80:e3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGx6BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
M2E0YWNlYTY0YjE3NDA4MWNkYWJiYjAwN2Q2Y2QwM2QyYTczNTcwHhcNMjMwODI0
MTUzNzIyWhcNMjUwODI1MTUzNzIyWjAzMTEwLwYDVQQDEyhlNmQwZjUzMTgzNjRi
MzlmNjYxNjM5ZWY3Y2VjOWY5MzZiZTFhN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiQclRFRjFuSzAgqi3CUPbDWEbN0Ars9CNGq6UpC0BWurCMCq
pb0yNscsrwimGJJJSfDg3VaNndgRLP1p0pqPpNCHppODDqm0gVjAysPyLI3B9YyP
MTlw1vzxefhSniB++s2InpSL/fn7oFXzQgUookzs1jwttyUh+srUk4Be7s3BgqCw
GyqHVcablqc+DEYllxrGYEuTkau/SHHDyLdN4aMM7U7vTCpwOXHRiO1g8eq8rQye
QQp4/cSc0+0zmaMnyBrP1YI0w49DSWu+bzjd6fEZrKYK05NY0KXcvKg6HL/hyVyK
NDEIptBN7zrw5P5QA+LijDpiGRgZfChflIZcIQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGDqKmnoByCYF/KqrO5IuMFItsheMB8GA1UdIwQYMBaAFOga64KwcVANZv00
mroTr8D/AYQUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzYTRh
Y2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGRmM2U5NGYtYjNjYy00ZTY0LThlNTktN2U4NTMy
MjI5MWQyL2U2ZDBmNTMxODM2NGIzOWY2NjE2MzllZjdjZWM5ZjkzNmJlMWE3ZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZGYzZTk0Zi1iM2NjLTRlNjQtOGU1OS03ZTg1
MzIyMjkxZDIvYWIzYTRhY2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDbgAwDQYJKoZIhvcNAQELBQADggEBAEGbqmfXZQ0GN7hp
kWgdkiRk6ikaEBMg1Y2p8cd3SsUkjfc2xvBEOT08RBXd8Ij8sUKBZzfOFDm+5zp9
KbJ0CaPM31RQgZP04JhUaUT9YcqMOGYW0ORisciUQnicAqi0PZevUP3E1kD46U4G
pGWVLZpHQX3erE3UAKe8lrKD6hrjBmsKeaD60EA1LbCDpiJMtlOB06oKQaWAEiKa
jIBXLRKIkSjGTdD+D9fckMhcK3J2MxbEnCAJh04WGN9SSKIMS6+1MQcX9xC1pWIN
YLch6MdNpeTrR3zz7vtQREw6+FrtwkAbXLiJ83gG5tL3vf/FIbCKUbqFIPeiYMCv
H74igOM=
-----END CERTIFICATE-----