Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/99d5c6abcd945eb7846171979065cf51c534902c.roa
File:                     99d5c6abcd945eb7846171979065cf51c534902c.roa (raw, json)
Hash identifier:          ijNlPAPYLYEl2T8N5FoYXT6pZ3HKFny5NBV3ElCzwJc=
Subject key identifier:   CE:2F:3F:F3:A5:50:15:C6:0E:39:E2:27:2B:80:99:B4:0E:E5:DA:CF
Certificate issuer:       /CN=8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d
Certificate serial:       1358
Authority key identifier: DF:04:11:59:40:71:62:78:1C:7D:C7:8E:35:88:31:67:24:7D:00:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/99d5c6abcd945eb7846171979065cf51c534902c.roa
Signing time:             Mon 09 Oct 2023 22:50:12 +0000
ROA not before:           Sun 08 Oct 2023 22:50:12 +0000
ROA not after:            Thu 09 Oct 2025 22:50:12 +0000
asID:                     273103
IP address blocks:        2803:7050::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4952 (0x1358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d
        Validity
            Not Before: Oct  8 22:50:12 2023 GMT
            Not After : Oct  9 22:50:12 2025 GMT
        Subject: CN=99d5c6abcd945eb7846171979065cf51c534902c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:83:d4:2b:bb:fc:9f:93:f0:6e:34:68:4a:
                    3d:9e:8f:73:d1:a8:05:a9:9a:e7:8c:6e:e7:9f:15:
                    71:59:86:76:47:4c:6c:90:14:03:9d:f1:57:04:f5:
                    4b:b5:d5:b1:82:77:fe:aa:02:8a:61:91:c7:a9:e4:
                    2c:a4:54:ef:91:65:51:54:fe:fd:d0:34:56:64:7a:
                    61:31:fd:37:c6:44:3b:bb:f0:dc:47:8c:19:6b:9c:
                    eb:af:99:f4:70:7f:78:e5:b9:d4:64:7d:e9:20:75:
                    f0:62:1b:59:eb:23:6d:a5:aa:31:e5:a9:38:71:19:
                    89:77:25:16:42:14:a2:38:2b:11:46:5d:f9:83:b0:
                    98:77:9d:a0:96:d4:3a:75:e7:e2:32:5a:69:5d:d8:
                    f2:03:40:f9:7e:da:f1:29:28:91:2b:8d:77:38:39:
                    ef:16:a5:dc:4a:6d:29:e1:91:60:df:b2:ec:4b:c8:
                    e4:da:39:fa:4b:90:74:07:53:03:23:8b:d3:49:61:
                    41:99:6c:83:b1:0c:c4:53:d1:06:54:59:39:a3:b0:
                    7a:f4:34:fa:4b:7d:d3:3b:5b:95:c7:75:97:d6:60:
                    4f:43:01:4e:ea:66:48:00:76:fb:3a:e1:0a:f5:85:
                    f3:3f:32:b2:7c:2f:a2:14:0b:3c:af:e5:40:f7:2f:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2F:3F:F3:A5:50:15:C6:0E:39:E2:27:2B:80:99:B4:0E:E5:DA:CF
            X509v3 Authority Key Identifier:
                keyid:DF:04:11:59:40:71:62:78:1C:7D:C7:8E:35:88:31:67:24:7D:00:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/99d5c6abcd945eb7846171979065cf51c534902c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7050::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:97:60:aa:b9:e7:9b:e7:a8:67:c0:25:a4:2a:20:b0:e2:
         71:78:22:97:5c:50:f3:ff:3b:e8:7a:b0:6d:85:9e:eb:aa:c4:
         2e:24:45:7e:d7:fb:08:32:18:f7:e2:69:69:16:cc:d7:99:31:
         dd:eb:75:96:42:0c:c5:4f:f1:0b:ba:ec:e9:b9:5a:a9:3b:d6:
         e2:e2:38:f0:bf:51:f6:df:e3:71:43:09:4a:ad:7a:7a:9e:39:
         42:af:73:cb:b3:6c:15:b0:dd:ee:54:b1:30:71:d7:1f:e0:af:
         d7:f8:36:c8:ac:e3:2e:46:87:67:da:b9:fc:f8:c7:c2:7f:8d:
         d9:f0:cf:40:e7:1e:6b:ee:8f:f6:da:31:e7:67:48:49:73:2e:
         e1:0c:5e:55:7b:76:0d:51:a6:e4:44:eb:78:e6:2a:eb:ee:c9:
         a9:34:b0:4d:58:f6:f2:66:f8:2b:51:2b:c8:84:26:1d:36:db:
         eb:ed:45:8c:1c:06:04:7d:a3:9f:bf:ea:0c:14:0c:22:65:af:
         bc:fe:87:a9:d4:00:21:05:48:74:21:56:10:c4:b9:5b:57:ed:
         40:2b:4f:62:b1:5a:38:4d:e5:ce:9f:0f:a3:06:25:e5:9e:20:
         e6:92:16:de:f5:bf:02:c3:eb:67:74:3e:0d:19:68:05:85:8b:
         0c:93:af:d3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICE1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGY4
MWU0YWFhZDZhMGQ3M2E2ZjhjOTc4NmE3NjY5NDBkZDFkYWYwZDAeFw0yMzEwMDgy
MjUwMTJaFw0yNTEwMDkyMjUwMTJaMDMxMTAvBgNVBAMTKDk5ZDVjNmFiY2Q5NDVl
Yjc4NDYxNzE5NzkwNjVjZjUxYzUzNDkwMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs0IPUK7v8n5PwbjRoSj2ej3PRqAWpmueMbuefFXFZhnZHTGyQ
FAOd8VcE9Uu11bGCd/6qAophkcep5CykVO+RZVFU/v3QNFZkemEx/TfGRDu78NxH
jBlrnOuvmfRwf3jludRkfekgdfBiG1nrI22lqjHlqThxGYl3JRZCFKI4KxFGXfmD
sJh3naCW1Dp15+IyWmld2PIDQPl+2vEpKJErjXc4Oe8WpdxKbSnhkWDfsuxLyOTa
OfpLkHQHUwMji9NJYUGZbIOxDMRT0QZUWTmjsHr0NPpLfdM7W5XHdZfWYE9DAU7q
ZkgAdvs64Qr1hfM/MrJ8L6IUCzyv5UD3L7rfAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUzi8/86VQFcYOOeInK4CZtA7l2s8wHwYDVR0jBBgwFoAU3wQRWUBxYngcfceO
NYgxZyR9AAAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84ZjgxZTRh
YWFkNmEwZDczYTZmOGM5Nzg2YTc2Njk0MGRkMWRhZjBkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hMjRhOGE0OS0yNzI0LTRkZDMtYTdmZC05ZmI1YmY5
OWVmODYvOTlkNWM2YWJjZDk0NWViNzg0NjE3MTk3OTA2NWNmNTFjNTM0OTAyYy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2EyNGE4YTQ5LTI3MjQtNGRkMy1hN2ZkLTlmYjVi
Zjk5ZWY4Ni84ZjgxZTRhYWFkNmEwZDczYTZmOGM5Nzg2YTc2Njk0MGRkMWRhZjBk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKANwUDANBgkqhkiG9w0BAQsFAAOCAQEARfGXYKq555vnqGfA
JaQqILDicXgil1xQ8/876HqwbYWe66rELiRFftf7CDIY9+JpaRbM15kx3et1lkIM
xU/xC7rs6blaqTvW4uI48L9R9t/jcUMJSq16ep45Qq9zy7NsFbDd7lSxMHHXH+Cv
1/g2yKzjLkaHZ9q5/PjHwn+N2fDPQOcea+6P9tox52dISXMu4QxeVXt2DVGm5ETr
eOYq6+7JqTSwTVj28mb4K1EryIQmHTbb6+1FjBwGBH2jn7/qDBQMImWvvP6HqdQA
IQVIdCFWEMS5W1ftQCtPYrFaOE3lzp8PowYl5Z4g5pIW3vW/AsPrZ3Q+DRloBYWL
DJOv0w==
-----END CERTIFICATE-----