Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a3a98656-3fc5-4d60-912f-8e0be62924b2/0b6b9cb6964f0e33456ce468c0fa83f4437dda54.roa
File:                     0b6b9cb6964f0e33456ce468c0fa83f4437dda54.roa (raw, json)
Hash identifier:          mD+rzfZblkcBPkDOpSw6XG/uLwP8WHAP7jFf+79Hvbs=
Subject key identifier:   6B:D4:31:1E:0A:48:9F:D7:F2:82:05:B6:3E:84:1B:CE:9D:4B:95:1C
Certificate issuer:       /CN=82d0afeda0adda7802399a1c9e4bbfdd6540fd18
Certificate serial:       01CE
Authority key identifier: F3:A0:2E:F0:8A:BE:37:66:4A:F4:11:A0:13:97:2E:E3:92:BB:8C:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82d0afeda0adda7802399a1c9e4bbfdd6540fd18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a3a98656-3fc5-4d60-912f-8e0be62924b2/0b6b9cb6964f0e33456ce468c0fa83f4437dda54.roa
Signing time:             Tue 19 Mar 2024 21:01:19 +0000
ROA not before:           Tue 19 Mar 2024 21:01:19 +0000
ROA not after:            Thu 19 Mar 2026 21:01:19 +0000
asID:                     273191
IP address blocks:        2803:fa50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d0afeda0adda7802399a1c9e4bbfdd6540fd18
        Validity
            Not Before: Mar 19 21:01:19 2024 GMT
            Not After : Mar 19 21:01:19 2026 GMT
        Subject: CN=0b6b9cb6964f0e33456ce468c0fa83f4437dda54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:08:5a:a9:41:ff:3f:46:95:eb:6e:53:c0:
                    d2:97:16:96:30:7d:af:9d:41:32:af:32:be:94:72:
                    3c:bb:75:4f:14:0d:b0:ba:26:a0:d0:ed:73:8f:bb:
                    fe:91:99:3d:80:a0:6e:74:72:8b:e4:b7:ad:62:1e:
                    b2:56:07:97:13:ef:f1:17:fb:02:53:b7:5b:da:5d:
                    53:06:c2:99:e8:f3:a1:05:4a:e1:ab:92:c9:3b:fd:
                    d4:88:d5:0c:98:ec:53:bb:a4:e4:11:b5:50:c0:64:
                    05:91:97:91:5a:69:ba:5a:ab:2d:b9:c3:39:b4:32:
                    82:7d:40:43:7c:28:1e:fa:2f:6f:fb:0b:79:12:b9:
                    a7:2e:a2:66:fb:04:f1:e5:88:94:f9:cf:21:df:08:
                    66:d4:62:d0:7f:60:1b:63:2c:bc:bb:46:c9:90:c7:
                    55:c1:1e:46:a3:17:8b:a0:c8:60:32:9d:fa:4c:d6:
                    07:f2:26:03:54:b2:f6:64:e9:c8:3a:9b:be:08:18:
                    5e:40:14:10:be:9c:a4:8b:95:3f:96:28:3d:ca:28:
                    71:26:f1:86:ed:99:d7:cf:ff:04:e9:60:d7:54:cb:
                    5c:4e:ac:4e:a6:5c:64:9f:4f:20:bf:c1:b5:85:62:
                    04:59:2a:19:9d:6d:d4:b9:8b:05:77:a8:77:2d:95:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D4:31:1E:0A:48:9F:D7:F2:82:05:B6:3E:84:1B:CE:9D:4B:95:1C
            X509v3 Authority Key Identifier:
                keyid:F3:A0:2E:F0:8A:BE:37:66:4A:F4:11:A0:13:97:2E:E3:92:BB:8C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82d0afeda0adda7802399a1c9e4bbfdd6540fd18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a3a98656-3fc5-4d60-912f-8e0be62924b2/0b6b9cb6964f0e33456ce468c0fa83f4437dda54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a3a98656-3fc5-4d60-912f-8e0be62924b2/82d0afeda0adda7802399a1c9e4bbfdd6540fd18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa50::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:86:d8:08:d6:bc:42:e0:3f:cf:76:b5:d4:cc:b0:d2:40:
         41:d0:d6:09:a7:f9:3f:b4:ac:0b:e1:cb:7b:fe:5b:a3:ea:9b:
         e5:d0:e9:39:22:e6:b4:94:d3:d3:7d:08:b4:9f:b9:5e:02:77:
         a3:76:53:1e:3b:48:78:bb:2d:d7:19:1f:68:50:4c:2d:1d:db:
         ba:a1:ee:19:cb:76:9c:30:06:be:8b:47:17:8f:be:75:2f:ca:
         80:89:3b:31:ce:db:a5:00:d9:79:d1:4a:e9:ac:79:21:23:76:
         08:5f:e6:5f:fd:a6:67:5d:e3:1b:fb:3b:40:ce:b1:e6:cd:79:
         11:13:1b:b2:24:4f:e4:22:fc:88:5a:dc:e7:34:31:c4:ae:41:
         15:21:b8:82:30:49:f6:c5:ba:b4:83:4e:17:b4:43:6a:6e:04:
         b8:4d:eb:60:b3:01:16:3a:c5:08:5e:86:65:44:b4:60:57:5a:
         d9:40:e9:42:ab:cb:24:4f:35:2c:56:0d:5a:e7:ff:0b:20:85:
         bc:fd:b5:57:e2:29:73:de:db:4f:89:36:cf:59:67:15:4f:b9:
         79:90:46:3d:f8:cf:12:d6:15:cc:e2:9d:03:fc:8a:ee:35:90:
         0e:5a:b5:70:07:50:74:7a:76:ed:7b:fc:20:85:29:00:cf:9b:
         65:14:2f:c6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJk
MGFmZWRhMGFkZGE3ODAyMzk5YTFjOWU0YmJmZGQ2NTQwZmQxODAeFw0yNDAzMTky
MTAxMTlaFw0yNjAzMTkyMTAxMTlaMDMxMTAvBgNVBAMTKDBiNmI5Y2I2OTY0ZjBl
MzM0NTZjZTQ2OGMwZmE4M2Y0NDM3ZGRhNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCPEQhaqUH/P0aV625TwNKXFpYwfa+dQTKvMr6Ucjy7dU8UDbC6
JqDQ7XOPu/6RmT2AoG50covkt61iHrJWB5cT7/EX+wJTt1vaXVMGwpno86EFSuGr
ksk7/dSI1QyY7FO7pOQRtVDAZAWRl5Faabpaqy25wzm0MoJ9QEN8KB76L2/7C3kS
uacuomb7BPHliJT5zyHfCGbUYtB/YBtjLLy7RsmQx1XBHkajF4ugyGAynfpM1gfy
JgNUsvZk6cg6m74IGF5AFBC+nKSLlT+WKD3KKHEm8YbtmdfP/wTpYNdUy1xOrE6m
XGSfTyC/wbWFYgRZKhmdbdS5iwV3qHctlYmTAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUa9QxHgpIn9fyggW2PoQbzp1LlRwwHwYDVR0jBBgwFoAU86Au8Iq+N2ZK9BGg
E5cu45K7jN0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84MmQwYWZl
ZGEwYWRkYTc4MDIzOTlhMWM5ZTRiYmZkZDY1NDBmZDE4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hM2E5ODY1Ni0zZmM1LTRkNjAtOTEyZi04ZTBiZTYy
OTI0YjIvMGI2YjljYjY5NjRmMGUzMzQ1NmNlNDY4YzBmYTgzZjQ0MzdkZGE1NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2EzYTk4NjU2LTNmYzUtNGQ2MC05MTJmLThlMGJl
NjI5MjRiMi84MmQwYWZlZGEwYWRkYTc4MDIzOTlhMWM5ZTRiYmZkZDY1NDBmZDE4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAP6UDANBgkqhkiG9w0BAQsFAAOCAQEAGJ+G2AjWvELgP892
tdTMsNJAQdDWCaf5P7SsC+HLe/5bo+qb5dDpOSLmtJTT030ItJ+5XgJ3o3ZTHjtI
eLst1xkfaFBMLR3buqHuGct2nDAGvotHF4++dS/KgIk7Mc7bpQDZedFK6ax5ISN2
CF/mX/2mZ13jG/s7QM6x5s15ERMbsiRP5CL8iFrc5zQxxK5BFSG4gjBJ9sW6tINO
F7RDam4EuE3rYLMBFjrFCF6GZUS0YFda2UDpQqvLJE81LFYNWuf/CyCFvP21V+Ip
c97bT4k2z1lnFU+5eZBGPfjPEtYVzOKdA/yK7jWQDlq1cAdQdHp27Xv8IIUpAM+b
ZRQvxg==
-----END CERTIFICATE-----