Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/8dd7f5d66483004b70dce543064a07ae54991df2.roa
File:                     8dd7f5d66483004b70dce543064a07ae54991df2.roa (raw, json)
Hash identifier:          BM+qVN40w8JZGDSyDMLipGhpBY+CIDfUvbpKSp2supY=
Subject key identifier:   EC:90:F8:BC:5B:D7:90:4A:D7:0C:08:C5:88:CB:22:CB:AA:E5:29:4C
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       0972A7
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/8dd7f5d66483004b70dce543064a07ae54991df2.roa
Signing time:             Sat 27 May 2023 15:59:47 +0000
ROA not before:           Fri 26 May 2023 15:59:47 +0000
ROA not after:            Tue 27 May 2025 15:59:47 +0000
asID:                     272137
IP address blocks:        2803:6090::/44 maxlen: 48
                          2803:6090::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619175 (0x972a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: May 26 15:59:47 2023 GMT
            Not After : May 27 15:59:47 2025 GMT
        Subject: CN=8dd7f5d66483004b70dce543064a07ae54991df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:25:7b:9b:ac:1e:e7:60:40:c6:09:e5:ae:47:
                    54:bd:8e:34:d5:16:d9:35:f2:84:a7:9a:0b:16:7a:
                    11:8f:98:22:95:ec:c3:b6:26:31:e7:96:7c:c3:c5:
                    34:a1:fc:e3:ac:80:ff:b8:16:f2:41:fd:d8:b4:ca:
                    44:0f:7d:b1:04:17:f8:c8:6b:6d:e3:aa:53:be:df:
                    49:2d:36:24:3c:03:35:23:bb:c5:bf:a9:0b:c8:1f:
                    11:26:f5:21:4e:7d:4f:b5:32:a3:fb:04:36:b1:6b:
                    d4:52:6f:e6:9d:8d:1e:c4:18:6d:67:a5:77:78:cf:
                    f4:d1:59:72:87:ad:de:5c:f9:1a:7b:fc:28:d3:9b:
                    30:a4:be:3d:65:f1:e1:88:ed:ba:5a:7e:f0:6d:2a:
                    af:d0:1a:03:ae:b5:a2:05:fe:51:a3:3d:90:78:3a:
                    79:a7:7f:68:21:8b:5f:e6:77:b0:e9:c3:07:c0:df:
                    4d:96:6f:56:ba:08:08:58:d2:ff:79:c1:e2:56:8d:
                    39:34:ce:d6:e1:18:cf:6a:03:2b:38:27:b5:06:c3:
                    1e:cd:8d:7e:27:37:53:1e:7b:c9:77:57:84:2b:60:
                    8b:b2:18:04:f6:cc:67:ef:40:57:01:ad:1c:c4:72:
                    4b:5f:bb:74:9f:4f:c1:45:29:ea:34:d7:da:6d:6d:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:F8:BC:5B:D7:90:4A:D7:0C:08:C5:88:CB:22:CB:AA:E5:29:4C
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/8dd7f5d66483004b70dce543064a07ae54991df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:67:c6:95:40:88:25:f6:c0:08:03:f5:ac:47:86:23:f9:49:
         6a:28:59:c5:bb:73:b0:05:5d:83:07:5a:98:70:95:79:2c:55:
         33:b9:1f:68:13:5e:c3:b2:51:7a:55:52:ba:13:ee:ac:d0:f6:
         f4:b1:06:57:63:16:07:11:74:43:f0:14:05:2b:45:16:ed:09:
         6e:bc:e3:ed:30:d3:f5:23:9b:59:fd:31:80:cb:90:25:d7:41:
         d6:25:6d:e0:61:e1:5c:a0:49:60:ab:34:a2:2e:50:18:90:75:
         c4:c6:d3:82:1c:a6:9b:5b:35:df:b3:40:82:64:86:2f:c8:59:
         47:97:f6:a8:d3:84:8f:53:cf:31:d0:4a:6f:a5:3d:5b:34:15:
         81:7c:34:6b:bd:3e:b2:6c:87:78:25:ca:d0:81:cd:1e:91:d7:
         a7:c7:62:d1:01:04:40:2e:29:02:8a:8f:43:ac:88:12:18:4b:
         91:76:d7:db:70:5a:74:92:06:ab:54:80:73:e0:b3:b4:39:41:
         4a:5f:82:9a:36:95:44:30:71:d9:b5:30:e6:d0:80:36:cf:b6:
         ba:51:60:4a:0e:ef:dc:c4:4c:06:41:be:fe:f6:b2:a9:de:36:
         4c:6a:59:3a:b2:2d:e7:e0:33:4a:7b:fa:0d:9a:c2:49:75:59:
         a9:bb:5b:d3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCXKnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJk
Mjg3ZDliYWNlMGFhYTg5YzhhMThiMzFkMjU4MTIyMzg3ZTg0N2YwHhcNMjMwNTI2
MTU1OTQ3WhcNMjUwNTI3MTU1OTQ3WjAzMTEwLwYDVQQDEyg4ZGQ3ZjVkNjY0ODMw
MDRiNzBkY2U1NDMwNjRhMDdhZTU0OTkxZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgSV7m6we52BAxgnlrkdUvY401RbZNfKEp5oLFnoRj5gilezD
tiYx55Z8w8U0ofzjrID/uBbyQf3YtMpED32xBBf4yGtt46pTvt9JLTYkPAM1I7vF
v6kLyB8RJvUhTn1PtTKj+wQ2sWvUUm/mnY0exBhtZ6V3eM/00Vlyh63eXPkae/wo
05swpL49ZfHhiO26Wn7wbSqv0BoDrrWiBf5Roz2QeDp5p39oIYtf5new6cMHwN9N
lm9WuggIWNL/ecHiVo05NM7W4RjPagMrOCe1BsMezY1+JzdTHnvJd1eEK2CLshgE
9sxn70BXAa0cxHJLX7t0n0/BRSnqNNfabW0yyQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOyQ+Lxb15BK1wwIxYjLIsuq5SlMMB8GA1UdIwQYMBaAFIA01X8ACnTUO36I
mhIZjIfmXQDNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmQyODdk
OWJhY2UwYWFhODljOGExOGIzMWQyNTgxMjIzODdlODQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTIwYTAyMWEtNTk3YS00M2M4LTk3MGMtMTdlNTY0
NjBhMjQ0LzhkZDdmNWQ2NjQ4MzAwNGI3MGRjZTU0MzA2NGEwN2FlNTQ5OTFkZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjBhMDIxYS01OTdhLTQzYzgtOTcwYy0xN2U1
NjQ2MGEyNDQvMmQyODdkOWJhY2UwYWFhODljOGExOGIzMWQyNTgxMjIzODdlODQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDYJAwDQYJKoZIhvcNAQELBQADggEBAJpnxpVAiCX2wAgD
9axHhiP5SWooWcW7c7AFXYMHWphwlXksVTO5H2gTXsOyUXpVUroT7qzQ9vSxBldj
FgcRdEPwFAUrRRbtCW684+0w0/Ujm1n9MYDLkCXXQdYlbeBh4VygSWCrNKIuUBiQ
dcTG04IcpptbNd+zQIJkhi/IWUeX9qjThI9TzzHQSm+lPVs0FYF8NGu9PrJsh3gl
ytCBzR6R16fHYtEBBEAuKQKKj0OsiBIYS5F219twWnSSBqtUgHPgs7Q5QUpfgpo2
lUQwcdm1MObQgDbPtrpRYEoO79zETAZBvv72sqneNkxqWTqyLefgM0p7+g2awkl1
Wam7W9M=
-----END CERTIFICATE-----