Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/69514056c265a5fc820a71af58166525fc412a0f.roa
File:                     69514056c265a5fc820a71af58166525fc412a0f.roa (raw, json)
Hash identifier:          Y1YDXAtUPy7V99jp5M7swwi6Th/iYja22mB0RW7YOfQ=
Subject key identifier:   49:A4:83:32:92:A4:EC:6A:0E:45:C6:6B:82:76:DF:58:50:1F:22:4E
Certificate issuer:       /CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
Certificate serial:       13F85D
Authority key identifier: 4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/69514056c265a5fc820a71af58166525fc412a0f.roa
Signing time:             Sat 04 Nov 2023 01:18:10 +0000
ROA not before:           Sat 04 Nov 2023 01:18:10 +0000
ROA not after:            Tue 04 Nov 2025 01:18:10 +0000
asID:                     52414
IP address blocks:        2803:3e00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308765 (0x13f85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493602240364e8c2a8419a3e9d0843be8cf08cdd
        Validity
            Not Before: Nov  4 01:18:10 2023 GMT
            Not After : Nov  4 01:18:10 2025 GMT
        Subject: CN=69514056c265a5fc820a71af58166525fc412a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:25:4d:b4:b9:b8:8b:76:8c:42:4e:29:65:9d:
                    ea:80:df:a2:cc:93:2b:44:c7:6c:c8:ca:81:18:8b:
                    77:0b:80:59:1e:f0:47:7c:e5:71:e7:59:64:48:60:
                    2b:80:63:10:50:05:d7:85:3e:89:eb:1a:32:40:92:
                    7b:4b:04:fc:1e:55:d0:d8:92:64:98:88:71:9c:ac:
                    ec:ad:cd:38:94:2d:13:4a:c6:79:79:16:68:ee:ea:
                    28:51:b6:d4:76:5a:cc:36:1a:a8:6b:22:c9:94:44:
                    7e:dd:16:55:33:38:93:6a:8f:b1:17:5e:f2:f5:c4:
                    d1:e0:a1:b7:39:3c:ee:d6:3a:1f:34:fc:06:98:aa:
                    62:b1:db:f4:73:67:ec:a5:dc:d4:d9:db:82:b0:f6:
                    28:70:e5:38:6e:0a:f3:b6:4c:ef:d2:58:3d:ec:3a:
                    86:5a:6e:5a:e8:90:52:17:97:19:b2:6f:b7:30:a0:
                    6d:73:a4:26:09:eb:e5:b6:4d:87:5e:3e:2f:2e:fb:
                    56:e1:ec:9a:67:2c:46:a7:75:d9:1e:d1:6b:5e:52:
                    7d:03:a6:54:7d:e1:10:e5:68:f0:c2:18:cc:a4:56:
                    ac:77:cb:ae:09:a8:98:69:77:3e:5f:8f:87:11:b8:
                    2d:04:43:28:a6:cf:3f:8b:5c:fd:ad:84:11:0e:ec:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A4:83:32:92:A4:EC:6A:0E:45:C6:6B:82:76:DF:58:50:1F:22:4E
            X509v3 Authority Key Identifier:
                keyid:4A:00:4B:1F:6E:62:90:3B:4C:71:26:E4:65:3F:69:BE:5A:2F:1F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/493602240364e8c2a8419a3e9d0843be8cf08cdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/69514056c265a5fc820a71af58166525fc412a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f337d6d-5aac-4ba6-a6a0-f717dbf6b2e5/493602240364e8c2a8419a3e9d0843be8cf08cdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:84:75:d1:be:4f:59:ac:f3:fa:13:30:f3:c1:3c:2f:3e:
         cc:2d:7c:14:ff:12:78:36:3e:86:4f:a8:58:a0:d1:49:6b:9b:
         8d:2b:6b:a2:7f:d7:4f:f4:08:77:d5:6a:0b:48:25:9e:76:23:
         0a:e7:c0:41:62:83:67:00:61:34:99:f5:32:95:4a:34:fc:b6:
         05:ad:16:e3:f2:84:65:60:42:06:c3:fa:47:9c:35:e6:5c:5d:
         fb:8b:4a:c4:0f:f5:44:bd:c1:f5:63:c0:19:f1:f2:df:d9:8a:
         ac:cb:23:20:5e:a6:99:2c:40:fa:5f:1c:c9:11:93:72:6d:3b:
         3b:70:59:68:b3:6b:bb:fd:61:ed:3b:27:6b:97:76:b1:76:79:
         61:44:93:a7:d8:d4:49:0e:bf:2e:84:e5:b8:c8:c6:59:90:7e:
         15:26:88:5f:6e:98:fe:fb:2d:7f:69:4c:60:90:1b:a2:a0:94:
         c6:bf:1f:da:c6:fc:da:b0:44:92:ba:24:77:48:a6:ed:ce:98:
         80:bd:eb:28:cb:48:37:cc:46:9e:ff:83:e6:b8:c4:4e:d0:70:
         fb:e0:4b:65:b0:fb:11:96:e2:6f:65:f5:42:48:a4:35:fb:a2:
         96:ef:80:d9:05:47:01:3b:f3:a4:2f:ce:de:cc:e6:0b:32:c1:
         60:23:75:85
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDE/hdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MzYwMjI0MDM2NGU4YzJhODQxOWEzZTlkMDg0M2JlOGNmMDhjZGQwHhcNMjMxMTA0
MDExODEwWhcNMjUxMTA0MDExODEwWjAzMTEwLwYDVQQDEyg2OTUxNDA1NmMyNjVh
NWZjODIwYTcxYWY1ODE2NjUyNWZjNDEyYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA9iVNtLm4i3aMQk4pZZ3qgN+izJMrRMdsyMqBGIt3C4BZHvBH
fOVx51lkSGArgGMQUAXXhT6J6xoyQJJ7SwT8HlXQ2JJkmIhxnKzsrc04lC0TSsZ5
eRZo7uooUbbUdlrMNhqoayLJlER+3RZVMziTao+xF17y9cTR4KG3OTzu1jofNPwG
mKpisdv0c2fspdzU2duCsPYocOU4bgrztkzv0lg97DqGWm5a6JBSF5cZsm+3MKBt
c6QmCevltk2HXj4vLvtW4eyaZyxGp3XZHtFrXlJ9A6ZUfeEQ5WjwwhjMpFasd8uu
CaiYaXc+X4+HEbgtBEMops8/i1z9rYQRDuyoCQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEmkgzKSpOxqDkXGa4J231hQHyJOMB8GA1UdIwQYMBaAFEoASx9uYpA7THEm
5GU/ab5aLx/gMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkzNjAy
MjQwMzY0ZThjMmE4NDE5YTNlOWQwODQzYmU4Y2YwOGNkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWYzMzdkNmQtNWFhYy00YmE2LWE2YTAtZjcxN2Ri
ZjZiMmU1LzY5NTE0MDU2YzI2NWE1ZmM4MjBhNzFhZjU4MTY2NTI1ZmM0MTJhMGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZjMzN2Q2ZC01YWFjLTRiYTYtYTZhMC1mNzE3
ZGJmNmIyZTUvNDkzNjAyMjQwMzY0ZThjMmE4NDE5YTNlOWQwODQzYmU4Y2YwOGNk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDPgAwDQYJKoZIhvcNAQELBQADggEBAH2ohHXRvk9ZrPP6
EzDzwTwvPswtfBT/Eng2PoZPqFig0Ulrm40ra6J/10/0CHfVagtIJZ52IwrnwEFi
g2cAYTSZ9TKVSjT8tgWtFuPyhGVgQgbD+kecNeZcXfuLSsQP9US9wfVjwBnx8t/Z
iqzLIyBeppksQPpfHMkRk3JtOztwWWiza7v9Ye07J2uXdrF2eWFEk6fY1EkOvy6E
5bjIxlmQfhUmiF9umP77LX9pTGCQG6KglMa/H9rG/NqwRJK6JHdIpu3OmIC96yjL
SDfMRp7/g+a4xE7QcPvgS2Ww+xGW4m9l9UJIpDX7opbvgNkFRwE786Qvzt7M5gsy
wWAjdYU=
-----END CERTIFICATE-----