Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/93139eea0b429884d0ee1dadae9d19a1ee9c1cbe.roa
File:                     93139eea0b429884d0ee1dadae9d19a1ee9c1cbe.roa (raw, json)
Hash identifier:          2ymOR1VUbS/CcUFSNb9wU6kALOvlJ65Z2qm7N/RidLU=
Subject key identifier:   EE:B8:58:B9:4D:A8:B7:B9:A1:E5:86:88:17:CA:20:2A:4D:31:0B:CC
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       0524C3
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/93139eea0b429884d0ee1dadae9d19a1ee9c1cbe.roa
Signing time:             Fri 20 Oct 2023 12:28:01 +0000
ROA not before:           Fri 20 Oct 2023 12:28:01 +0000
ROA not after:            Mon 20 Oct 2025 12:28:01 +0000
asID:                     16629
IP address blocks:        2800:4e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337091 (0x524c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 20 12:28:01 2023 GMT
            Not After : Oct 20 12:28:01 2025 GMT
        Subject: CN=93139eea0b429884d0ee1dadae9d19a1ee9c1cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:2a:03:d6:05:6c:ae:0a:0c:6e:84:e9:7e:
                    b8:3e:16:7d:50:1e:88:b5:7e:ff:c9:c7:82:ee:18:
                    a1:57:16:00:cc:38:ef:02:ce:f0:5f:39:79:cc:b4:
                    18:05:fc:d0:35:0f:c2:69:6d:d3:70:f1:47:8c:02:
                    75:3e:d2:56:92:18:32:eb:c3:d8:26:76:d2:58:d6:
                    85:9b:2c:94:99:5a:72:85:d7:d4:7f:7d:8c:08:be:
                    d4:16:ff:44:15:7c:2a:4b:71:cd:3e:83:ce:97:90:
                    02:1b:c2:ae:93:83:cd:cc:c5:58:2a:5e:c4:10:2f:
                    6b:8e:90:c8:bd:e1:86:1f:9f:6b:b0:d7:63:69:0b:
                    a2:d2:3b:a9:10:55:5e:29:0f:72:42:51:75:dc:a6:
                    30:d0:ee:8e:a8:f0:82:76:fe:9e:0a:ef:dc:4a:5f:
                    2a:da:79:10:be:4f:cd:36:2d:84:a6:9f:4a:15:72:
                    0c:42:3c:b7:1c:a6:d5:0f:ba:54:fb:16:2b:16:f6:
                    aa:e7:f6:ea:0a:ab:69:fb:89:d8:3a:b5:6d:1a:e0:
                    92:95:60:28:97:5e:61:64:66:15:93:09:d1:9e:05:
                    31:46:0f:ae:ed:84:d6:d9:b1:30:b8:fc:e7:8a:cd:
                    5b:ae:6a:d6:b8:6e:b2:ff:2a:ca:22:79:90:b4:85:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B8:58:B9:4D:A8:B7:B9:A1:E5:86:88:17:CA:20:2A:4D:31:0B:CC
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/93139eea0b429884d0ee1dadae9d19a1ee9c1cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:d8:28:d7:be:ed:57:c4:0f:08:df:84:e9:d5:11:18:c9:
         47:b0:51:66:1a:d2:0a:a2:50:12:76:04:f3:1c:fd:d0:79:da:
         88:1b:63:f3:b9:cf:4f:a5:92:9b:96:f7:1f:02:3c:fe:97:9f:
         b1:ea:cd:36:ba:77:f7:d0:6d:98:d4:6f:d3:d0:17:b5:91:42:
         eb:80:0b:30:d4:c3:48:87:5e:81:51:63:26:b6:06:5b:9a:a5:
         70:ed:2c:1a:87:8c:f1:ea:4a:e7:4a:23:9f:e4:c5:f6:fc:ad:
         f4:b3:95:6c:0a:ee:0f:a1:fe:1b:d2:82:9e:07:3a:c0:c5:4d:
         c7:4b:e3:ca:c3:60:e0:46:44:53:cb:14:e5:47:89:43:89:a1:
         1c:fd:a5:89:5a:8b:63:4d:75:68:a6:0a:07:10:cc:e9:6e:2f:
         dc:97:d4:8e:79:2b:8a:ec:d4:c5:84:e7:69:87:b7:94:67:0b:
         fd:46:5f:76:32:96:1f:c5:fd:43:2f:af:ae:a0:5d:b0:87:07:
         a8:83:b2:3a:b4:2e:a0:3c:ab:a4:af:cf:43:92:71:7f:67:22:
         19:4c:da:0b:56:be:53:1c:76:9a:98:b9:da:85:22:35:8b:c2:
         b4:ba:78:1d:bd:bf:19:a3:00:1d:81:a4:99:1b:db:a1:9c:b2:
         83:b6:bb:07
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBSTDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
MDc4N2U0NDkyN2E4NzZjYmNlNGE4MjFjMTRiMjJjNTIwOTY2MjAwHhcNMjMxMDIw
MTIyODAxWhcNMjUxMDIwMTIyODAxWjAzMTEwLwYDVQQDEyg5MzEzOWVlYTBiNDI5
ODg0ZDBlZTFkYWRhZTlkMTlhMWVlOWMxY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhScqA9YFbK4KDG6E6X64PhZ9UB6ItX7/yceC7hihVxYAzDjv
As7wXzl5zLQYBfzQNQ/CaW3TcPFHjAJ1PtJWkhgy68PYJnbSWNaFmyyUmVpyhdfU
f32MCL7UFv9EFXwqS3HNPoPOl5ACG8Kuk4PNzMVYKl7EEC9rjpDIveGGH59rsNdj
aQui0jupEFVeKQ9yQlF13KYw0O6OqPCCdv6eCu/cSl8q2nkQvk/NNi2Epp9KFXIM
Qjy3HKbVD7pU+xYrFvaq5/bqCqtp+4nYOrVtGuCSlWAol15hZGYVkwnRngUxRg+u
7YTW2bEwuPznis1brmrWuG6y/yrKInmQtIU2JwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFO64WLlNqLe5oeWGiBfKICpNMQvMMB8GA1UdIwQYMBaAFEF6lnl3u3kWpfZ9
G8/5OK0vpAm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjAwNzg3
ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYyMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTdiZjFlMzktZGMxNS00YzJlLTk4MWQtYWNjOWE3
ZmY0NmZhLzkzMTM5ZWVhMGI0Mjk4ODRkMGVlMWRhZGFlOWQxOWExZWU5YzFjYmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85N2JmMWUzOS1kYzE1LTRjMmUtOTgxZC1hY2M5
YTdmZjQ2ZmEvYjAwNzg3ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYy
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgABOAwDQYJKoZIhvcNAQELBQADggEBADKg2CjXvu1XxA8I
34Tp1REYyUewUWYa0gqiUBJ2BPMc/dB52ogbY/O5z0+lkpuW9x8CPP6Xn7HqzTa6
d/fQbZjUb9PQF7WRQuuACzDUw0iHXoFRYya2BluapXDtLBqHjPHqSudKI5/kxfb8
rfSzlWwK7g+h/hvSgp4HOsDFTcdL48rDYOBGRFPLFOVHiUOJoRz9pYlai2NNdWim
CgcQzOluL9yX1I55K4rs1MWE52mHt5RnC/1GX3Yylh/F/UMvr66gXbCHB6iDsjq0
LqA8q6Svz0OScX9nIhlM2gtWvlMcdpqYudqFIjWLwrS6eB29vxmjAB2BpJkb26Gc
soO2uwc=
-----END CERTIFICATE-----