Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/3fdd48c8e3549352b9657206f387b73f70a5115d.roa
File:                     3fdd48c8e3549352b9657206f387b73f70a5115d.roa (raw, json)
Hash identifier:          qzbyt34GsMLGAcXMkmY6mmThimmfOtEzQ2gqV2LvkbQ=
Subject key identifier:   7C:6E:BA:9B:B6:62:E9:A9:04:69:82:09:B8:1E:32:3E:9F:2D:AE:6D
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       216EEA
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/3fdd48c8e3549352b9657206f387b73f70a5115d.roa
Signing time:             Thu 13 Jul 2023 11:45:28 +0000
ROA not before:           Wed 12 Jul 2023 11:45:28 +0000
ROA not after:            Sun 13 Jul 2025 11:45:28 +0000
asID:                     8065
IP address blocks:        181.204.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191082 (0x216eea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Jul 12 11:45:28 2023 GMT
            Not After : Jul 13 11:45:28 2025 GMT
        Subject: CN=3fdd48c8e3549352b9657206f387b73f70a5115d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:08:7b:51:28:3a:e5:4d:5d:4b:9a:1f:48:
                    4c:c0:b3:b6:06:68:9c:b2:95:80:58:f3:23:08:e4:
                    ea:be:bc:95:18:77:d3:6c:07:ce:aa:a4:8f:5c:eb:
                    f2:67:5d:dd:53:19:01:ad:7a:36:49:f8:a7:b5:e6:
                    6d:4b:f7:9c:bb:4a:bf:c8:3f:34:ad:b6:fd:c2:f3:
                    84:db:36:2e:cf:a7:a2:d3:26:28:dd:e8:d6:d0:30:
                    cd:42:d0:74:f3:8a:cc:78:80:3b:c9:f4:f4:54:4b:
                    9f:86:0f:af:9a:3c:36:9b:48:6d:fc:ec:fe:55:de:
                    d5:3c:ec:5b:cc:22:05:7c:90:c7:cb:d4:75:20:25:
                    de:ce:8e:9a:c3:07:a8:81:b1:78:b2:e7:f9:17:e3:
                    e1:09:c3:38:7e:8e:a5:f9:fc:be:71:8c:8b:51:7d:
                    43:fd:01:79:44:ed:c2:ba:35:70:c1:39:2d:21:c8:
                    c6:37:5b:ed:c3:2c:44:17:e9:98:35:e0:75:06:28:
                    21:88:12:3b:b2:05:35:37:8e:42:c8:ce:bc:07:7a:
                    32:59:3b:5b:f1:5e:52:2e:cb:63:c3:be:4c:2b:15:
                    9e:81:57:87:1b:6b:ea:e9:c5:16:63:8d:a2:a8:3d:
                    3f:31:c6:45:eb:a3:8c:ae:35:37:b0:6d:13:77:ea:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6E:BA:9B:B6:62:E9:A9:04:69:82:09:B8:1E:32:3E:9F:2D:AE:6D
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/3fdd48c8e3549352b9657206f387b73f70a5115d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:b1:4b:1c:61:76:cd:63:03:2f:fa:45:77:15:80:21:9e:
         26:f8:0d:6e:e5:2f:90:fb:a0:d7:18:dc:ca:51:e8:33:c2:6e:
         e9:d0:aa:3f:94:4f:c2:0a:37:a7:b1:d5:bf:ad:6c:92:83:34:
         dc:2a:d6:b7:21:27:9e:6b:b9:99:1f:fc:27:65:7b:15:97:8e:
         2e:e6:ac:db:3e:2b:74:bd:bc:95:ae:0c:eb:5f:27:4a:7e:e6:
         86:bc:65:3a:f0:f9:f6:d9:d3:5e:59:2c:e1:60:ed:6e:bc:81:
         49:42:05:a6:c2:41:3a:0b:3c:b3:36:45:4b:2b:6f:76:dd:d3:
         80:81:59:6c:dc:9b:03:69:8e:f7:9d:97:c9:76:c5:5d:f0:27:
         71:23:41:b9:be:35:52:87:80:6c:14:ab:46:0f:78:17:42:b8:
         7d:46:02:94:c3:f1:eb:7b:f2:d6:a1:27:3c:a7:fc:68:d6:01:
         8f:ec:12:ce:a0:0e:ce:f5:ef:cc:cb:f2:22:fb:6c:d5:f3:55:
         3f:76:f8:e3:41:e0:38:7b:1d:7c:a9:7c:57:3f:66:1a:ac:04:
         fb:34:59:1b:85:e6:a0:14:6b:33:e2:ed:a6:fb:6f:e6:7f:67:
         0e:c5:69:93:d0:6d:ea:22:7a:d5:a8:27:fb:d9:1e:0c:6a:d1:
         32:6d:04:fe
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDIW7qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
MGEwNTI0OGE5MDdkZWY3NjQxMDAyNzg4MmIyZjRhODA4NWMwN2EwHhcNMjMwNzEy
MTE0NTI4WhcNMjUwNzEzMTE0NTI4WjAzMTEwLwYDVQQDEygzZmRkNDhjOGUzNTQ5
MzUyYjk2NTcyMDZmMzg3YjczZjcwYTUxMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiqgIe1EoOuVNXUuaH0hMwLO2BmicspWAWPMjCOTqvryVGHfT
bAfOqqSPXOvyZ13dUxkBrXo2SfinteZtS/ecu0q/yD80rbb9wvOE2zYuz6ei0yYo
3ejW0DDNQtB084rMeIA7yfT0VEufhg+vmjw2m0ht/Oz+Vd7VPOxbzCIFfJDHy9R1
ICXezo6awweogbF4suf5F+PhCcM4fo6l+fy+cYyLUX1D/QF5RO3CujVwwTktIcjG
N1vtwyxEF+mYNeB1BighiBI7sgU1N45CyM68B3oyWTtb8V5SLstjw75MKxWegVeH
G2vq6cUWY42iqD0/McZF66OMrjU3sG0Td+qUVwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFHxuupu2YumpBGmCCbgeMj6fLa5tMB8GA1UdIwQYMBaAFLw7/0tdqAv1RCeu
JaVAuwwRfNLKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjAwYTA1
MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWJlYTZjYWQtMjlkNi00Mzg1LWE0ZjktY2JlNGJh
M2QxMjFmLzNmZGQ0OGM4ZTM1NDkzNTJiOTY1NzIwNmYzODdiNzNmNzBhNTExNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YmVhNmNhZC0yOWQ2LTQzODUtYTRmOS1jYmU0
YmEzZDEyMWYvNjAwYTA1MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDALXMMA0GCSqGSIb3DQEBCwUAA4IBAQCBybFLHGF2zWMDL/pF
dxWAIZ4m+A1u5S+Q+6DXGNzKUegzwm7p0Ko/lE/CCjensdW/rWySgzTcKta3ISee
a7mZH/wnZXsVl44u5qzbPit0vbyVrgzrXydKfuaGvGU68Pn22dNeWSzhYO1uvIFJ
QgWmwkE6CzyzNkVLK2923dOAgVls3JsDaY73nZfJdsVd8CdxI0G5vjVSh4BsFKtG
D3gXQrh9RgKUw/Hre/LWoSc8p/xo1gGP7BLOoA7O9e/My/Ii+2zV81U/dvjjQeA4
ex18qXxXP2YarAT7NFkbheagFGsz4u2m+2/mf2cOxWmT0G3qInrVqCf72R4MatEy
bQT+
-----END CERTIFICATE-----