Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/e2489f77e25c534b9cdae6b60e6e67a9dcccc16d.roa
File:                     e2489f77e25c534b9cdae6b60e6e67a9dcccc16d.roa (raw, json)
Hash identifier:          jwtaiDcq6UtnCESxVydUh60OkPTuARJpQ7geOsEaCpI=
Subject key identifier:   7C:5C:FE:DB:3A:79:53:E4:1C:73:00:5E:D9:4B:37:D3:F4:A7:0C:1D
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       0CCE8C
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/e2489f77e25c534b9cdae6b60e6e67a9dcccc16d.roa
Signing time:             Sat 14 Oct 2023 16:22:37 +0000
ROA not before:           Fri 13 Oct 2023 16:22:37 +0000
ROA not after:            Tue 14 Oct 2025 16:22:37 +0000
asID:                     272137
IP address blocks:        2803:6090::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839308 (0xcce8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: Oct 13 16:22:37 2023 GMT
            Not After : Oct 14 16:22:37 2025 GMT
        Subject: CN=e2489f77e25c534b9cdae6b60e6e67a9dcccc16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:7e:9d:ce:d4:e5:c9:82:76:8c:51:f5:d2:
                    75:7d:82:92:97:22:3d:8a:7b:01:c5:96:a3:40:9d:
                    ad:21:76:cc:fe:9d:73:d4:bd:c2:7b:49:c8:4a:9a:
                    d6:2d:b6:70:8e:af:36:81:20:61:39:b1:d1:9f:38:
                    bd:b6:97:65:f2:ef:7f:20:69:37:a3:37:6b:53:ba:
                    25:60:dd:b0:bf:92:a3:cd:e4:d6:13:a2:32:01:e3:
                    b6:fb:cb:9a:40:4a:27:cd:f8:97:c2:2f:00:76:1b:
                    cd:6f:aa:20:ff:bd:b5:13:ef:1b:de:4e:83:e8:db:
                    e9:2e:9e:00:d3:95:80:58:04:77:63:af:ec:8d:27:
                    be:53:0c:32:34:11:88:e7:de:40:af:50:80:15:81:
                    1d:cc:61:10:71:b6:e8:82:da:4b:5d:16:ba:a7:3a:
                    b1:46:f8:17:94:6e:f1:5f:4e:cd:37:48:5d:74:a0:
                    0a:63:cc:e2:ed:5f:62:cd:6a:99:1e:a9:7e:1c:39:
                    55:a2:79:3f:57:4b:c7:a4:08:d1:7a:e6:35:1f:85:
                    19:d0:e4:0f:bc:d8:8f:1f:5a:02:c2:ee:9e:9b:c5:
                    b4:be:27:91:e8:2c:82:8f:f7:41:88:3b:e5:4c:c1:
                    2d:66:11:06:d6:33:cc:b7:02:b4:15:21:06:6d:6f:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:FE:DB:3A:79:53:E4:1C:73:00:5E:D9:4B:37:D3:F4:A7:0C:1D
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/e2489f77e25c534b9cdae6b60e6e67a9dcccc16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:1e:40:bf:58:30:48:04:4b:71:f1:93:51:97:9a:d0:87:
         bf:7d:f9:be:5d:e9:8b:76:1b:56:75:93:43:58:51:43:82:29:
         c0:06:3d:74:63:6a:f3:d5:f3:1c:1e:08:5f:bb:33:64:f7:ac:
         f1:be:23:f8:3c:8f:a6:68:a7:90:1e:65:e3:96:ab:26:b9:4e:
         64:b6:39:48:d1:b1:c2:68:70:2f:b3:3c:b4:0e:73:1a:41:05:
         76:e7:72:1f:04:b0:37:72:2f:5c:20:98:0b:7f:1a:6a:fd:96:
         82:08:4f:93:db:33:47:e2:05:9b:1c:a7:6a:fc:20:01:8f:2b:
         4a:68:e2:c3:d0:b1:83:3b:cb:ec:30:2f:19:ec:b8:99:ea:10:
         88:40:cc:4b:e0:5d:66:37:fd:1e:7f:cc:67:0c:f6:c5:a3:ac:
         ba:b4:ce:96:84:96:ca:4b:56:cc:4a:69:5b:b7:dc:d0:71:7a:
         77:09:75:99:c5:71:c0:a1:ab:9e:74:14:7a:78:b2:cc:33:1e:
         4c:9f:92:0d:b2:17:3e:55:3e:12:c5:00:99:1d:c5:0e:b4:8d:
         6d:e5:2d:da:03:66:7d:1c:7f:b6:c2:d1:f9:2e:46:c2:a5:d1:
         83:f7:2c:f0:9f:30:0b:a7:a1:96:9a:77:ae:f7:80:c5:1e:5c:
         f7:dc:de:ce
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDM6MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJk
Mjg3ZDliYWNlMGFhYTg5YzhhMThiMzFkMjU4MTIyMzg3ZTg0N2YwHhcNMjMxMDEz
MTYyMjM3WhcNMjUxMDE0MTYyMjM3WjAzMTEwLwYDVQQDEyhlMjQ4OWY3N2UyNWM1
MzRiOWNkYWU2YjYwZTZlNjdhOWRjY2NjMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr1B+nc7U5cmCdoxR9dJ1fYKSlyI9insBxZajQJ2tIXbM/p1z
1L3Ce0nISprWLbZwjq82gSBhObHRnzi9tpdl8u9/IGk3ozdrU7olYN2wv5KjzeTW
E6IyAeO2+8uaQEonzfiXwi8AdhvNb6og/721E+8b3k6D6NvpLp4A05WAWAR3Y6/s
jSe+UwwyNBGI595Ar1CAFYEdzGEQcbbogtpLXRa6pzqxRvgXlG7xX07NN0hddKAK
Y8zi7V9izWqZHql+HDlVonk/V0vHpAjReuY1H4UZ0OQPvNiPH1oCwu6em8W0vieR
6CyCj/dBiDvlTMEtZhEG1jPMtwK0FSEGbW8rfQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHxc/ts6eVPkHHMAXtlLN9P0pwwdMB8GA1UdIwQYMBaAFIA01X8ACnTUO36I
mhIZjIfmXQDNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmQyODdk
OWJhY2UwYWFhODljOGExOGIzMWQyNTgxMjIzODdlODQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTIwYTAyMWEtNTk3YS00M2M4LTk3MGMtMTdlNTY0
NjBhMjQ0L2UyNDg5Zjc3ZTI1YzUzNGI5Y2RhZTZiNjBlNmU2N2E5ZGNjY2MxNmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjBhMDIxYS01OTdhLTQzYzgtOTcwYy0xN2U1
NjQ2MGEyNDQvMmQyODdkOWJhY2UwYWFhODljOGExOGIzMWQyNTgxMjIzODdlODQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDYJAwDQYJKoZIhvcNAQELBQADggEBAB/XHkC/WDBIBEtx
8ZNRl5rQh799+b5d6Yt2G1Z1k0NYUUOCKcAGPXRjavPV8xweCF+7M2T3rPG+I/g8
j6Zop5AeZeOWqya5TmS2OUjRscJocC+zPLQOcxpBBXbnch8EsDdyL1wgmAt/Gmr9
loIIT5PbM0fiBZscp2r8IAGPK0po4sPQsYM7y+wwLxnsuJnqEIhAzEvgXWY3/R5/
zGcM9sWjrLq0zpaElspLVsxKaVu33NBxencJdZnFccChq550FHp4sswzHkyfkg2y
Fz5VPhLFAJkdxQ60jW3lLdoDZn0cf7bC0fkuRsKl0YP3LPCfMAunoZaad673gMUe
XPfc3s4=
-----END CERTIFICATE-----