Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/ff7e2ba3e2c9b3aa627a4549ee5021a3834bddf6.roa
File:                     ff7e2ba3e2c9b3aa627a4549ee5021a3834bddf6.roa (raw, json)
Hash identifier:          zpIhEbhzE6OJWpHuiESzd55AbJXaYoITJEPXuODOqMs=
Subject key identifier:   1C:BF:75:53:5C:CB:8E:CB:B8:B8:CB:29:0A:EE:6C:DB:FB:C1:BF:08
Certificate issuer:       /CN=8146f7d7fea1af093a2862ea298e92cca3ce04d5
Certificate serial:       047142
Authority key identifier: 0B:45:3C:D9:F5:50:68:12:3E:8D:DC:04:B3:28:12:32:16:3C:C1:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8146f7d7fea1af093a2862ea298e92cca3ce04d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/ff7e2ba3e2c9b3aa627a4549ee5021a3834bddf6.roa
Signing time:             Fri 27 Oct 2023 22:15:33 +0000
ROA not before:           Fri 27 Oct 2023 22:15:33 +0000
ROA not after:            Mon 27 Oct 2025 22:15:33 +0000
asID:                     272110
IP address blocks:        2803:7710::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291138 (0x47142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8146f7d7fea1af093a2862ea298e92cca3ce04d5
        Validity
            Not Before: Oct 27 22:15:33 2023 GMT
            Not After : Oct 27 22:15:33 2025 GMT
        Subject: CN=ff7e2ba3e2c9b3aa627a4549ee5021a3834bddf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:71:2d:98:c5:f7:b9:f6:2b:b1:e1:dd:b8:
                    bc:9c:93:6d:c0:ae:4c:e1:76:21:ec:0e:9d:08:b2:
                    87:bd:27:af:1b:24:07:68:9d:3b:51:1e:1b:8f:44:
                    1b:dc:b3:3d:0f:bf:fa:fc:d9:39:ab:49:c3:09:f5:
                    59:f2:8c:ec:2c:93:c1:97:54:32:7b:a5:8d:79:77:
                    48:26:33:8b:0b:b3:8a:c9:ac:d0:a5:35:73:30:02:
                    a4:68:d7:10:b5:b4:26:ba:c7:86:d0:94:2c:96:bc:
                    cb:9f:6f:46:b7:4f:e2:8a:66:b4:d5:09:b0:35:19:
                    7c:8e:fc:6b:c1:aa:c9:15:28:df:67:bb:ee:21:69:
                    95:f4:d8:59:4c:99:52:57:ab:d4:96:5d:1a:aa:56:
                    ea:f6:ad:da:b3:f2:2b:6a:a0:86:a1:7c:cf:80:01:
                    be:ab:10:8b:2a:87:ab:23:9e:c0:20:39:8d:aa:17:
                    ef:b1:9b:8b:44:43:7f:94:2c:ab:bc:08:42:b3:23:
                    4d:52:19:96:66:49:f0:28:a3:8d:95:1d:68:0b:62:
                    40:95:bd:0d:ef:42:fd:a0:42:de:a8:11:4c:cf:03:
                    2a:af:6c:38:e4:99:ba:88:4b:77:c4:0a:15:12:6d:
                    de:a5:d5:fa:bd:b7:09:8c:43:4b:b8:3b:3e:54:c3:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BF:75:53:5C:CB:8E:CB:B8:B8:CB:29:0A:EE:6C:DB:FB:C1:BF:08
            X509v3 Authority Key Identifier:
                keyid:0B:45:3C:D9:F5:50:68:12:3E:8D:DC:04:B3:28:12:32:16:3C:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8146f7d7fea1af093a2862ea298e92cca3ce04d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/ff7e2ba3e2c9b3aa627a4549ee5021a3834bddf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/8146f7d7fea1af093a2862ea298e92cca3ce04d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7710::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:d3:83:12:c3:2a:1f:70:d2:3c:94:f1:4d:ea:9d:6f:d5:e0:
         d3:44:7a:8d:0f:93:b4:1e:18:6d:e4:40:71:aa:01:6b:0e:58:
         45:e4:0c:06:7e:3f:53:05:d5:d4:83:c9:77:98:b5:d8:7f:a0:
         f2:4c:92:bc:a8:44:33:4a:56:9f:d1:4d:ba:4a:4f:2f:cc:c7:
         29:75:f4:65:71:9c:1d:ba:30:87:8d:11:dc:0d:48:43:82:9e:
         97:f8:b6:2e:89:15:f9:ad:50:76:98:99:d0:a6:26:e4:0c:43:
         fe:15:3f:f5:cf:4c:2e:08:6e:71:f2:5d:94:d6:fd:5d:20:7f:
         a2:1b:97:81:31:0f:ff:37:24:bf:0d:f1:4d:bf:53:8c:c2:81:
         bd:91:f5:ff:94:25:bd:f9:a1:3f:b6:80:8f:04:fc:66:4c:20:
         60:ca:08:a3:32:e9:77:ac:73:6f:c6:4b:ca:9c:d0:85:4d:a3:
         79:be:71:4b:8e:89:57:e3:0e:22:44:75:2b:80:19:3f:20:04:
         e1:26:06:14:bd:3c:2a:2f:4c:1d:66:07:3f:c8:4a:9d:c2:2c:
         d4:21:3f:1a:7c:90:b4:a7:84:8b:1f:9c:9a:11:91:b3:cf:77:
         e0:a3:2d:c7:74:eb:4e:35:24:99:da:15:7a:d5:10:11:c5:a1:
         ef:5f:d0:13
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBHFCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgx
NDZmN2Q3ZmVhMWFmMDkzYTI4NjJlYTI5OGU5MmNjYTNjZTA0ZDUwHhcNMjMxMDI3
MjIxNTMzWhcNMjUxMDI3MjIxNTMzWjAzMTEwLwYDVQQDEyhmZjdlMmJhM2UyYzli
M2FhNjI3YTQ1NDllZTUwMjFhMzgzNGJkZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjRdxLZjF97n2K7Hh3bi8nJNtwK5M4XYh7A6dCLKHvSevGyQH
aJ07UR4bj0Qb3LM9D7/6/Nk5q0nDCfVZ8ozsLJPBl1Qye6WNeXdIJjOLC7OKyazQ
pTVzMAKkaNcQtbQmuseG0JQslrzLn29Gt0/iima01QmwNRl8jvxrwarJFSjfZ7vu
IWmV9NhZTJlSV6vUll0aqlbq9q3as/IraqCGoXzPgAG+qxCLKoerI57AIDmNqhfv
sZuLREN/lCyrvAhCsyNNUhmWZknwKKONlR1oC2JAlb0N70L9oELeqBFMzwMqr2w4
5Jm6iEt3xAoVEm3epdX6vbcJjENLuDs+VMP4GQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFBy/dVNcy47LuLjLKQrubNv7wb8IMB8GA1UdIwQYMBaAFAtFPNn1UGgSPo3c
BLMoEjIWPMGUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODE0NmY3
ZDdmZWExYWYwOTNhMjg2MmVhMjk4ZTkyY2NhM2NlMDRkNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ0ZWNlNGYtNTZiNC00MDIwLWE2ODctOGMwOGY0
NzU5ZjQyL2ZmN2UyYmEzZTJjOWIzYWE2MjdhNDU0OWVlNTAyMWEzODM0YmRkZjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDRlY2U0Zi01NmI0LTQwMjAtYTY4Ny04YzA4
ZjQ3NTlmNDIvODE0NmY3ZDdmZWExYWYwOTNhMjg2MmVhMjk4ZTkyY2NhM2NlMDRk
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDdxAwDQYJKoZIhvcNAQELBQADggEBABHTgxLDKh9w0jyU
8U3qnW/V4NNEeo0Pk7QeGG3kQHGqAWsOWEXkDAZ+P1MF1dSDyXeYtdh/oPJMkryo
RDNKVp/RTbpKTy/Mxyl19GVxnB26MIeNEdwNSEOCnpf4ti6JFfmtUHaYmdCmJuQM
Q/4VP/XPTC4IbnHyXZTW/V0gf6Ibl4ExD/83JL8N8U2/U4zCgb2R9f+UJb35oT+2
gI8E/GZMIGDKCKMy6Xesc2/GS8qc0IVNo3m+cUuOiVfjDiJEdSuAGT8gBOEmBhS9
PCovTB1mBz/ISp3CLNQhPxp8kLSnhIsfnJoRkbPPd+CjLcd06041JJnaFXrVEBHF
oe9f0BM=
-----END CERTIFICATE-----