Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/dece88bd515c7837fb90de0a48368fa91e311b42.roa
File:                     dece88bd515c7837fb90de0a48368fa91e311b42.roa (raw, json)
Hash identifier:          Q/0BWJV4sXBTaZMgE+CXA28SDN8VfP3YRP/GE4kqb0Q=
Subject key identifier:   6B:34:EC:3A:39:F1:9A:89:60:D4:83:51:F3:F3:D3:EA:D7:7D:7C:15
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       02B0
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/dece88bd515c7837fb90de0a48368fa91e311b42.roa
Signing time:             Fri 28 Oct 2022 12:50:51 +0000
ROA not before:           Thu 27 Oct 2022 12:48:54 +0000
ROA not after:            Mon 28 Oct 2024 12:48:54 +0000
asID:                     272859
IP address blocks:        2803:6290::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Oct 27 12:48:54 2022 GMT
            Not After : Oct 28 12:48:54 2024 GMT
        Subject: CN=dece88bd515c7837fb90de0a48368fa91e311b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:90:35:76:ad:e8:10:9d:ba:f1:00:12:2f:
                    5e:c5:45:f6:76:0c:9c:87:7d:6c:48:52:d5:ef:19:
                    a4:56:7d:08:06:60:91:8e:da:cc:b9:1f:66:0e:5c:
                    fc:59:c2:81:bc:23:8d:75:90:41:8d:2c:e1:41:9a:
                    61:3d:a8:95:f3:52:2d:ff:71:a7:df:69:4c:0e:11:
                    5d:55:98:35:98:a2:98:74:25:b4:27:07:f2:3f:ff:
                    b8:03:7f:93:20:31:a4:bb:09:bf:e6:86:b5:28:e2:
                    78:c5:29:cf:96:fc:21:87:80:f9:11:44:bc:4c:3f:
                    5f:e2:b8:9a:7a:8a:7c:73:aa:1b:7d:d4:d6:df:cf:
                    1f:22:50:e5:c1:14:60:94:ec:58:61:63:9a:53:cb:
                    a1:63:67:ba:70:de:c3:02:cd:7b:b5:67:34:ba:8f:
                    9d:be:6c:12:ab:54:2d:7a:9c:40:ae:0c:57:88:be:
                    22:a5:c0:44:ad:0c:21:9a:76:19:2e:3f:7d:e7:5c:
                    5b:31:e1:12:ff:42:2b:6d:47:7b:30:0d:5a:9b:7b:
                    57:b0:de:f0:7b:8e:79:9c:3a:56:9c:f8:09:7b:e1:
                    cf:be:f3:73:d7:8f:fa:a8:fe:0e:c9:67:bf:fd:53:
                    fe:32:bc:b1:0b:fc:fd:1f:05:ee:c2:9d:54:38:35:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:34:EC:3A:39:F1:9A:89:60:D4:83:51:F3:F3:D3:EA:D7:7D:7C:15
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/dece88bd515c7837fb90de0a48368fa91e311b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:87:fe:51:fb:5f:cc:f4:fc:21:d5:c1:bd:47:5c:cd:5b:86:
         33:93:34:b6:04:11:cf:f9:6f:b4:3b:4f:f8:5b:1b:87:01:e0:
         a7:bf:5a:1e:15:70:ba:76:85:db:9a:92:0e:57:e5:87:fa:3b:
         13:a8:92:91:8b:7b:65:3c:0d:66:3d:c9:3f:38:dc:df:94:33:
         1b:c5:cb:6f:85:64:b8:4d:22:57:47:b0:c7:58:09:1d:91:44:
         90:24:4a:96:70:b0:6d:46:e4:1c:29:39:a5:3f:5e:c5:8f:e8:
         09:89:ba:a1:44:89:a1:cc:18:9a:3e:82:b7:3b:d1:22:06:6c:
         49:1e:0b:06:16:ff:9b:07:92:0b:83:4e:59:ca:ce:49:51:50:
         13:26:f1:bf:2f:77:15:f2:08:a0:34:44:bc:eb:d2:80:9f:ff:
         c1:e9:b9:9a:1a:f2:5e:40:bf:9b:b5:7a:4a:e3:43:96:5b:a8:
         ba:94:75:bf:6c:86:fd:88:7c:28:c5:80:4c:ea:62:3e:02:d0:
         58:99:c6:6e:9d:c7:23:4b:d2:f5:4f:3c:9f:e5:b1:1d:33:ba:
         7c:85:bd:d3:4a:74:ae:92:22:dd:83:43:de:38:b1:be:ef:31:
         e1:3f:44:d7:37:16:45:af:9d:b2:10:58:6a:aa:9e:81:81:a7:
         63:6a:58:36
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICArAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGI5
YTExYWVhZWJhNDgyZGIzMDBlNWMxNTA4OGRiM2M0MTYxNTE4MTAeFw0yMjEwMjcx
MjQ4NTRaFw0yNDEwMjgxMjQ4NTRaMDMxMTAvBgNVBAMTKGRlY2U4OGJkNTE1Yzc4
MzdmYjkwZGUwYTQ4MzY4ZmE5MWUzMTFiNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCI85A1dq3oEJ268QASL17FRfZ2DJyHfWxIUtXvGaRWfQgGYJGO
2sy5H2YOXPxZwoG8I411kEGNLOFBmmE9qJXzUi3/caffaUwOEV1VmDWYoph0JbQn
B/I//7gDf5MgMaS7Cb/mhrUo4njFKc+W/CGHgPkRRLxMP1/iuJp6inxzqht91Nbf
zx8iUOXBFGCU7FhhY5pTy6FjZ7pw3sMCzXu1ZzS6j52+bBKrVC16nECuDFeIviKl
wEStDCGadhkuP33nXFsx4RL/QittR3swDVqbe1ew3vB7jnmcOlac+Al74c++83PX
j/qo/g7JZ7/9U/4yvLEL/P0fBe7CnVQ4Nal1AgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUazTsOjnxmolg1INR8/PT6td9fBUwHwYDVR0jBBgwFoAU0C0iVTUfFdwSe3mL
TdFjff0gXYMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84YjlhMTFh
ZWFlYmE0ODJkYjMwMGU1YzE1MDg4ZGIzYzQxNjE1MTgxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85M2I1OTgwMi02ZmUyLTQ3MjQtOGU3My1kOTY3M2Zi
NjFiYzAvZGVjZTg4YmQ1MTVjNzgzN2ZiOTBkZTBhNDgzNjhmYTkxZTMxMWI0Mi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzkzYjU5ODAyLTZmZTItNDcyNC04ZTczLWQ5Njcz
ZmI2MWJjMC84YjlhMTFhZWFlYmE0ODJkYjMwMGU1YzE1MDg4ZGIzYzQxNjE1MTgx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKANikDANBgkqhkiG9w0BAQsFAAOCAQEAGIf+UftfzPT8IdXB
vUdczVuGM5M0tgQRz/lvtDtP+FsbhwHgp79aHhVwunaF25qSDlflh/o7E6iSkYt7
ZTwNZj3JPzjc35QzG8XLb4VkuE0iV0ewx1gJHZFEkCRKlnCwbUbkHCk5pT9exY/o
CYm6oUSJocwYmj6CtzvRIgZsSR4LBhb/mweSC4NOWcrOSVFQEybxvy93FfIIoDRE
vOvSgJ//wem5mhryXkC/m7V6SuNDlluoupR1v2yG/Yh8KMWATOpiPgLQWJnGbp3H
I0vS9U88n+WxHTO6fIW900p0rpIi3YND3jixvu8x4T9E1zcWRa+dshBYaqqegYGn
Y2pYNg==
-----END CERTIFICATE-----