Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/024276bc8cc5492e1bf7ce8b10bb3fde6053abd6.roa
File:                     024276bc8cc5492e1bf7ce8b10bb3fde6053abd6.roa (raw, json)
Hash identifier:          47N6DpkNSKMrdemw9G7jRum1qXHhKHp0boofJ+KMsRg=
Subject key identifier:   3C:39:44:8C:F6:51:C6:C1:23:B0:BC:8E:AD:7F:96:F6:E8:78:5F:16
Certificate issuer:       /CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Certificate serial:       2639BD
Authority key identifier: A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/024276bc8cc5492e1bf7ce8b10bb3fde6053abd6.roa
Signing time:             Tue 05 Dec 2023 19:15:18 +0000
ROA not before:           Tue 05 Dec 2023 19:15:18 +0000
ROA not after:            Fri 05 Dec 2025 19:15:18 +0000
asID:                     52468
IP address blocks:        2803:4580::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505149 (0x2639bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
        Validity
            Not Before: Dec  5 19:15:18 2023 GMT
            Not After : Dec  5 19:15:18 2025 GMT
        Subject: CN=024276bc8cc5492e1bf7ce8b10bb3fde6053abd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:b0:20:8a:30:e2:7b:9c:1e:9f:81:d9:7a:
                    51:03:dd:de:71:1a:9d:f9:c6:be:e4:81:1f:38:63:
                    0f:9a:a2:2c:fe:a6:84:a9:ec:63:40:88:fc:91:6f:
                    90:c0:9b:2f:d9:01:79:63:f6:bb:28:bc:99:66:46:
                    a9:b3:6c:c3:be:2c:7c:8e:04:ae:d2:50:ba:e3:4b:
                    89:fe:aa:49:e2:e8:fa:08:81:82:64:f9:eb:92:a0:
                    d5:7e:07:9a:78:7a:c4:82:ac:49:bd:bf:ca:6e:0f:
                    c8:7b:f1:0b:41:8e:09:89:7e:15:1b:c7:1a:03:e9:
                    32:5e:e3:1e:04:9a:47:d3:62:68:c5:e7:e5:ca:02:
                    f4:4a:fd:ca:19:36:a9:8d:c8:27:64:de:d3:11:b8:
                    47:9d:00:a2:50:94:fd:d8:e7:97:39:bd:fd:22:f3:
                    39:a1:8b:47:a0:87:4f:b0:f1:26:72:19:87:25:a8:
                    52:7c:fc:a9:1d:d2:ed:1d:cc:fc:e1:f6:c9:a2:80:
                    d9:b1:1e:09:e2:b6:ee:64:e2:55:4d:1c:9f:d7:83:
                    6b:93:c4:4c:d1:43:a1:f9:8b:7c:f1:8d:1f:09:72:
                    3a:9f:92:6f:e4:be:57:be:3a:22:d3:fa:20:a7:f4:
                    39:8f:9f:ea:c8:97:ce:bd:29:c6:0b:f7:b0:c8:68:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:39:44:8C:F6:51:C6:C1:23:B0:BC:8E:AD:7F:96:F6:E8:78:5F:16
            X509v3 Authority Key Identifier:
                keyid:A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/024276bc8cc5492e1bf7ce8b10bb3fde6053abd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:90:d3:8c:72:29:df:72:82:4b:1e:98:b6:7b:38:2a:47:
         ed:b4:d4:12:3e:04:c9:80:b9:bc:27:9f:1c:27:dc:7d:30:fb:
         d2:f2:fd:3d:61:96:03:cc:0b:c5:ff:b0:76:a6:a0:65:10:92:
         04:39:f7:ed:73:b3:98:30:09:bd:87:47:ac:4f:01:88:7a:d7:
         da:b4:2f:e4:3e:76:d9:dc:15:2a:55:c8:91:06:e7:4a:4f:bd:
         43:a6:15:e1:5a:4d:9a:10:8e:3d:24:8d:fe:ca:bd:9a:50:75:
         69:fb:05:3f:a3:3f:77:2c:65:0b:8e:fc:9b:9a:d4:99:52:b7:
         46:92:6e:88:d4:6f:fb:a8:d7:59:93:65:8b:a4:e6:b3:7f:b1:
         24:3a:bb:50:f3:94:f0:ee:a7:02:64:65:08:8c:15:7d:33:36:
         96:03:2d:3f:88:ca:38:86:55:90:32:c1:98:0e:a8:d7:71:fe:
         87:29:fa:98:c4:1e:00:7a:7b:11:8c:3d:d9:fc:71:a3:fc:58:
         de:89:3d:6c:8b:64:42:fa:ef:f5:fe:a5:f3:13:72:1f:2f:b2:
         d7:74:2e:af:e7:8f:01:3e:f4:39:97:43:78:18:5c:0d:d9:0a:
         4b:26:31:f3:55:47:47:6a:cf:f9:ce:c2:2b:50:01:6a:6e:3c:
         70:6a:15:ea
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJjm9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
ZmNjZTc5YmQ5YzA4YTdhOThkMWRmZmIxMjA2ODVlN2YzZTJmNzQwHhcNMjMxMjA1
MTkxNTE4WhcNMjUxMjA1MTkxNTE4WjAzMTEwLwYDVQQDEygwMjQyNzZiYzhjYzU0
OTJlMWJmN2NlOGIxMGJiM2ZkZTYwNTNhYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0FqwIIow4nucHp+B2XpRA93ecRqd+ca+5IEfOGMPmqIs/qaE
qexjQIj8kW+QwJsv2QF5Y/a7KLyZZkaps2zDvix8jgSu0lC640uJ/qpJ4uj6CIGC
ZPnrkqDVfgeaeHrEgqxJvb/Kbg/Ie/ELQY4JiX4VG8caA+kyXuMeBJpH02Joxefl
ygL0Sv3KGTapjcgnZN7TEbhHnQCiUJT92OeXOb39IvM5oYtHoIdPsPEmchmHJahS
fPypHdLtHcz84fbJooDZsR4J4rbuZOJVTRyf14Nrk8RM0UOh+Yt88Y0fCXI6n5Jv
5L5Xvjoi0/ogp/Q5j5/qyJfOvSnGC/ewyGjEtQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDw5RIz2UcbBI7C8jq1/lvboeF8WMB8GA1UdIwQYMBaAFKHk4Ty2WepJpdix
qUK10PYWk1ijMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWZmY2Nl
NzliZDljMDhhN2E5OGQxZGZmYjEyMDY4NWU3ZjNlMmY3NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQzNTBlNzQtOTc2My00YWJlLTkwMWMtNDA3NTk0
MTVjNjZkLzAyNDI3NmJjOGNjNTQ5MmUxYmY3Y2U4YjEwYmIzZmRlNjA1M2FiZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDM1MGU3NC05NzYzLTRhYmUtOTAxYy00MDc1
OTQxNWM2NmQvMWZmY2NlNzliZDljMDhhN2E5OGQxZGZmYjEyMDY4NWU3ZjNlMmY3
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDRYAwDQYJKoZIhvcNAQELBQADggEBAEt8kNOMcinfcoJL
Hpi2ezgqR+201BI+BMmAubwnnxwn3H0w+9Ly/T1hlgPMC8X/sHamoGUQkgQ59+1z
s5gwCb2HR6xPAYh619q0L+Q+dtncFSpVyJEG50pPvUOmFeFaTZoQjj0kjf7KvZpQ
dWn7BT+jP3csZQuO/Jua1JlSt0aSbojUb/uo11mTZYuk5rN/sSQ6u1DzlPDupwJk
ZQiMFX0zNpYDLT+IyjiGVZAywZgOqNdx/ocp+pjEHgB6exGMPdn8caP8WN6JPWyL
ZEL67/X+pfMTch8vstd0Lq/njwE+9DmXQ3gYXA3ZCksmMfNVR0dqz/nOwitQAWpu
PHBqFeo=
-----END CERTIFICATE-----