Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/8755c3e179907d21bdce3d94285623131e2d6df1.roa
File:                     8755c3e179907d21bdce3d94285623131e2d6df1.roa (raw, json)
Hash identifier:          +/a32t7EM9Tob/8r0VF8ZU3eWd1Q6fkw+CH3WcoQ4fY=
Subject key identifier:   C1:38:15:51:48:FF:50:B1:54:4C:35:94:CC:19:EE:3C:D8:F9:6B:1E
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       1BD9B8
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/8755c3e179907d21bdce3d94285623131e2d6df1.roa
Signing time:             Sat 29 Oct 2022 14:02:41 +0000
ROA not before:           Tue 23 Mar 2021 14:47:41 +0000
ROA not after:            Tue 24 Mar 2026 14:47:41 +0000
asID:                     264660
IP address blocks:        2803:3c40::/32 maxlen: 32
                          2803:3c40::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825208 (0x1bd9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 23 14:47:41 2021 GMT
            Not After : Mar 24 14:47:41 2026 GMT
        Subject: CN=8755c3e179907d21bdce3d94285623131e2d6df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:69:5f:41:90:7b:fd:e6:94:ab:9c:f6:bb:2d:
                    95:04:9e:6a:51:39:9d:fb:b5:0f:ee:5c:05:c1:e5:
                    a2:88:f4:0d:ca:79:eb:b1:2f:fa:fa:95:63:ca:4d:
                    fb:5c:12:7a:e0:16:ef:3c:52:b5:5e:58:de:d3:2b:
                    24:76:1c:41:ab:98:6f:3a:93:a1:9a:7b:51:f6:c0:
                    62:41:35:7b:38:78:8b:bd:78:45:e1:54:a2:67:e9:
                    59:fb:4a:3d:7c:65:4d:dd:a9:ba:d5:eb:5d:b3:28:
                    68:b8:a8:fa:dd:35:c2:bf:19:93:ba:19:b7:8c:12:
                    74:b2:e4:48:e6:6a:8b:23:0b:29:86:80:d1:28:3d:
                    ae:78:ea:b1:ee:da:57:f1:4a:52:18:7e:f2:10:31:
                    e5:9c:e5:fe:86:b7:ce:d7:da:c5:52:fc:17:f8:9e:
                    cb:37:ff:d2:72:45:b4:3b:ee:e3:9f:a8:d8:c1:2b:
                    a9:81:6b:da:f3:e7:cf:03:4c:f2:bc:63:63:6b:79:
                    eb:22:93:16:7e:5b:9c:69:ec:f5:74:2f:3c:8a:f0:
                    b8:9f:43:81:f7:d3:c2:84:15:e7:2c:7b:5f:f4:61:
                    03:b2:e9:f0:5a:6b:6f:c3:fc:c0:03:37:1b:91:d9:
                    f9:b1:86:df:74:7c:10:c4:03:c9:84:d5:84:05:73:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:15:51:48:FF:50:B1:54:4C:35:94:CC:19:EE:3C:D8:F9:6B:1E
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/8755c3e179907d21bdce3d94285623131e2d6df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:a1:4a:9d:d0:91:32:81:2c:78:c0:27:c1:9c:cd:fb:a9:
         40:53:0c:75:32:4f:8a:70:95:b3:0b:a9:70:26:49:ae:50:46:
         83:b0:eb:c9:4a:08:ad:84:39:43:b3:ba:ac:a3:d9:fb:4e:37:
         5d:27:3f:e9:1f:d5:6e:a9:d0:3e:95:49:c9:0b:41:4d:9f:c5:
         20:72:65:13:f3:96:75:cd:24:d4:64:b1:03:52:f2:e1:c7:9f:
         7e:9f:9a:4c:23:20:6e:8b:a3:d9:56:83:f0:e4:98:87:4d:0a:
         47:05:e8:6d:70:e9:ba:b4:64:af:38:f3:fd:f7:1e:97:ba:1c:
         0b:5d:cb:af:ad:04:c1:5e:47:bc:10:98:9b:6d:8d:93:3f:a7:
         12:2b:37:23:87:bb:e3:a7:2a:bc:8e:fd:d3:16:57:e5:c7:1b:
         b2:5f:b6:9a:4e:39:11:73:53:10:ad:b6:62:5f:04:65:22:65:
         ff:43:9b:84:cb:a5:92:87:e8:a5:2b:c8:1c:70:bd:de:3e:4b:
         ad:c7:64:92:74:e3:62:4f:a5:b1:82:17:77:2c:d3:0c:d1:49:
         8c:38:1c:84:f7:4b:7e:62:26:b2:e6:d4:f4:71:74:f6:f4:2f:
         1b:18:73:6a:e9:43:82:53:7d:01:c9:38:2f:b0:71:58:88:18:
         31:4a:5e:7b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDG9m4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZTRjYWRhZmNmN2UwM2FmZTI4OTI1YWRmMzUwZjEyODZkYjdiMjUwHhcNMjEwMzIz
MTQ0NzQxWhcNMjYwMzI0MTQ0NzQxWjAzMTEwLwYDVQQDEyg4NzU1YzNlMTc5OTA3
ZDIxYmRjZTNkOTQyODU2MjMxMzFlMmQ2ZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAimlfQZB7/eaUq5z2uy2VBJ5qUTmd+7UP7lwFweWiiPQNynnr
sS/6+pVjyk37XBJ64BbvPFK1Xlje0yskdhxBq5hvOpOhmntR9sBiQTV7OHiLvXhF
4VSiZ+lZ+0o9fGVN3am61etdsyhouKj63TXCvxmTuhm3jBJ0suRI5mqLIwsphoDR
KD2ueOqx7tpX8UpSGH7yEDHlnOX+hrfO19rFUvwX+J7LN//SckW0O+7jn6jYwSup
gWva8+fPA0zyvGNja3nrIpMWflucaez1dC88ivC4n0OB99PChBXnLHtf9GEDsunw
Wmtvw/zAAzcbkdn5sYbfdHwQxAPJhNWEBXNPAQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFME4FVFI/1CxVEw1lMwZ7jzY+WseMB8GA1UdIwQYMBaAFNaRNNTUo5m3dxWU
ae+IZyBfwVVzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBlNGNh
ZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2IyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ4YjhmYWEtYmJlMy00MzcxLWE5NWEtZGIxOTdk
ZmQzYmJmLzg3NTVjM2UxNzk5MDdkMjFiZGNlM2Q5NDI4NTYyMzEzMWUyZDZkZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDhiOGZhYS1iYmUzLTQzNzEtYTk1YS1kYjE5
N2RmZDNiYmYvYjBlNGNhZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2Iy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDPEAwDQYJKoZIhvcNAQELBQADggEBAG2XoUqd0JEygSx4
wCfBnM37qUBTDHUyT4pwlbMLqXAmSa5QRoOw68lKCK2EOUOzuqyj2ftON10nP+kf
1W6p0D6VSckLQU2fxSByZRPzlnXNJNRksQNS8uHHn36fmkwjIG6Lo9lWg/DkmIdN
CkcF6G1w6bq0ZK848/33Hpe6HAtdy6+tBMFeR7wQmJttjZM/pxIrNyOHu+OnKryO
/dMWV+XHG7JftppOORFzUxCttmJfBGUiZf9Dm4TLpZKH6KUryBxwvd4+S63HZJJ0
42JPpbGCF3cs0wzRSYw4HIT3S35iJrLm1PRxdPb0LxsYc2rpQ4JTfQHJOC+wcViI
GDFKXns=
-----END CERTIFICATE-----