Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/0afa27ddc27bf2225fa47bba8391d3d97f0aa40a.roa
File:                     0afa27ddc27bf2225fa47bba8391d3d97f0aa40a.roa (raw, json)
Hash identifier:          o52PqMQSCGRzqrmCu0kFgjCQF/yzPxt7yPuZJCCenpU=
Subject key identifier:   88:E6:78:F6:8F:0F:A7:05:50:13:D3:39:23:C3:C0:83:A7:23:AC:0F
Certificate issuer:       /CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Certificate serial:       2153E3
Authority key identifier: 8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/0afa27ddc27bf2225fa47bba8391d3d97f0aa40a.roa
Signing time:             Wed 05 Jul 2023 02:05:32 +0000
ROA not before:           Tue 04 Jul 2023 02:05:31 +0000
ROA not after:            Sat 05 Jul 2025 02:05:31 +0000
asID:                     52468
IP address blocks:        2803:59c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184163 (0x2153e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
        Validity
            Not Before: Jul  4 02:05:31 2023 GMT
            Not After : Jul  5 02:05:31 2025 GMT
        Subject: CN=0afa27ddc27bf2225fa47bba8391d3d97f0aa40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:c8:25:2d:c6:56:df:37:b2:bc:3c:dc:76:
                    60:ff:11:64:96:04:71:45:09:ba:d9:a5:97:e7:a1:
                    9a:b7:72:76:4e:e3:3d:64:f8:e1:5a:68:d7:7d:e7:
                    75:10:d8:86:00:ed:40:62:d1:be:64:1d:7c:43:7a:
                    2f:0a:fb:40:eb:c2:24:43:bd:ce:c8:8d:cb:a4:04:
                    8b:fe:55:6d:df:ad:de:46:f3:9c:c2:a4:04:b0:7a:
                    cb:e1:c3:85:1a:80:3b:cd:80:7f:71:d2:71:88:9b:
                    7f:4f:1f:d0:3a:a8:b9:15:c9:53:eb:5d:28:00:d4:
                    e4:28:9a:77:af:dc:42:a2:ff:ce:52:e7:77:fe:16:
                    51:17:da:4c:ce:cb:e4:74:ae:cd:6f:1e:72:bf:db:
                    37:e2:bc:00:2c:ef:68:9c:8e:7d:de:63:5a:67:7d:
                    13:12:5b:b8:9c:c8:d1:3a:77:1c:d1:99:b0:54:3c:
                    f7:ec:a0:d0:70:8f:18:e2:fa:d9:c5:c5:83:61:7a:
                    b9:d8:ef:95:9d:10:9f:16:ff:2f:ec:76:88:25:0c:
                    36:7e:35:14:66:68:95:0d:af:d1:1e:ef:dd:7a:3d:
                    cf:23:02:88:fa:bc:e5:f9:96:aa:7d:8f:1d:d4:7d:
                    53:6f:8c:19:5b:ea:0d:23:5b:e4:f4:5b:83:38:4a:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E6:78:F6:8F:0F:A7:05:50:13:D3:39:23:C3:C0:83:A7:23:AC:0F
            X509v3 Authority Key Identifier:
                keyid:8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/0afa27ddc27bf2225fa47bba8391d3d97f0aa40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:a1:2a:5a:69:64:f9:28:2e:db:e1:96:92:78:1f:f1:cd:
         52:07:0e:37:eb:ae:ef:40:d8:b4:38:80:cc:16:04:5d:96:c3:
         fb:13:32:ac:3c:c3:62:14:f6:ba:82:6b:e6:92:36:ee:3e:ee:
         63:b2:11:bf:83:63:05:7c:9b:8a:ac:85:69:09:b6:da:84:b1:
         e6:1a:2f:0c:44:f5:bc:44:b7:6c:49:67:22:e6:5d:85:81:9f:
         50:52:4c:3f:9a:a8:7e:65:5c:2c:b0:3b:0b:23:bb:a3:b9:ee:
         c2:6d:e0:9f:92:32:cc:9e:48:ba:0e:9b:e8:6b:02:ee:b0:7e:
         94:42:84:b3:a4:1c:30:45:0a:a8:87:30:f0:87:11:3c:16:3e:
         d2:1e:a3:30:83:eb:a8:b9:37:b3:bd:c8:85:24:b1:de:08:67:
         89:1e:73:45:cf:5d:66:9d:12:3d:4e:21:3f:34:5d:72:1f:4e:
         31:c4:93:8e:89:d3:57:c6:1d:a2:b3:17:80:d3:f6:52:9b:be:
         07:14:fa:d5:30:76:2e:cb:e3:1e:c2:f6:6b:82:86:a3:9f:db:
         75:6c:6a:b7:b7:81:3d:c5:14:12:d6:6e:d1:08:45:77:c4:4c:
         5e:5c:6a:ab:44:84:b1:56:44:19:92:db:9b:ea:59:58:c1:23:
         15:70:9b:6a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIVPjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
ZDYzNDgyZjZmN2NkYTNmZDBjNGIyNDI3Y2NjNmNkNzAyNTRhZGIwHhcNMjMwNzA0
MDIwNTMxWhcNMjUwNzA1MDIwNTMxWjAzMTEwLwYDVQQDEygwYWZhMjdkZGMyN2Jm
MjIyNWZhNDdiYmE4MzkxZDNkOTdmMGFhNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyP3IJS3GVt83srw83HZg/xFklgRxRQm62aWX56Gat3J2TuM9
ZPjhWmjXfed1ENiGAO1AYtG+ZB18Q3ovCvtA68IkQ73OyI3LpASL/lVt363eRvOc
wqQEsHrL4cOFGoA7zYB/cdJxiJt/Tx/QOqi5FclT610oANTkKJp3r9xCov/OUud3
/hZRF9pMzsvkdK7Nbx5yv9s34rwALO9onI593mNaZ30TElu4nMjROncc0ZmwVDz3
7KDQcI8Y4vrZxcWDYXq52O+VnRCfFv8v7HaIJQw2fjUUZmiVDa/RHu/dej3PIwKI
+rzl+ZaqfY8d1H1Tb4wZW+oNI1vk9FuDOEp9wQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIjmePaPD6cFUBPTOSPDwIOnI6wPMB8GA1UdIwQYMBaAFIw/L8VgqwGD2C+O
+ZQiueCFZ0XdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NkNjM0
ODJmNmY3Y2RhM2ZkMGM0YjI0MjdjY2M2Y2Q3MDI1NGFkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIxZGQ4NzQtZjI5ZC00YjA2LWEyMzItZGM5ZTVi
NmJlNGI3LzBhZmEyN2RkYzI3YmYyMjI1ZmE0N2JiYTgzOTFkM2Q5N2YwYWE0MGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjFkZDg3NC1mMjlkLTRiMDYtYTIzMi1kYzll
NWI2YmU0YjcvN2NkNjM0ODJmNmY3Y2RhM2ZkMGM0YjI0MjdjY2M2Y2Q3MDI1NGFk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDWcAwDQYJKoZIhvcNAQELBQADggEBAAPwoSpaaWT5KC7b
4ZaSeB/xzVIHDjfrru9A2LQ4gMwWBF2Ww/sTMqw8w2IU9rqCa+aSNu4+7mOyEb+D
YwV8m4qshWkJttqEseYaLwxE9bxEt2xJZyLmXYWBn1BSTD+aqH5lXCywOwsju6O5
7sJt4J+SMsyeSLoOm+hrAu6wfpRChLOkHDBFCqiHMPCHETwWPtIeozCD66i5N7O9
yIUksd4IZ4kec0XPXWadEj1OIT80XXIfTjHEk46J01fGHaKzF4DT9lKbvgcU+tUw
di7L4x7C9muChqOf23Vsare3gT3FFBLWbtEIRXfETF5caqtEhLFWRBmS25vqWVjB
IxVwm2o=
-----END CERTIFICATE-----