Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2c1833a4e9401c092f00a1fddd65ecfbde2b1a94.roa
File:                     2c1833a4e9401c092f00a1fddd65ecfbde2b1a94.roa (raw, json)
Hash identifier:          jvVXAh777RKlr759apOlma4Elyr83fgR1JjA6pAMnAo=
Subject key identifier:   46:43:B3:78:09:9D:52:7C:75:DD:81:E3:60:E2:93:8A:F2:11:46:C0
Certificate issuer:       /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial:       24F369
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2c1833a4e9401c092f00a1fddd65ecfbde2b1a94.roa
Signing time:             Wed 01 Nov 2023 13:09:40 +0000
ROA not before:           Wed 01 Nov 2023 13:09:39 +0000
ROA not after:            Sat 01 Nov 2025 13:09:39 +0000
asID:                     263746
IP address blocks:        2803:6c40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421609 (0x24f369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
        Validity
            Not Before: Nov  1 13:09:39 2023 GMT
            Not After : Nov  1 13:09:39 2025 GMT
        Subject: CN=2c1833a4e9401c092f00a1fddd65ecfbde2b1a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:14:3b:9a:5f:5d:6e:f5:d8:ee:b8:76:ff:
                    48:ba:98:44:f8:a4:b2:30:36:14:d6:94:15:12:37:
                    50:3b:2e:eb:93:d0:d1:bc:a4:3a:10:62:de:b5:68:
                    2b:af:ed:d4:ac:75:1f:5c:5d:13:7f:9e:80:9d:41:
                    eb:5c:e7:6a:14:c2:8d:a2:4e:11:a5:9a:9f:1f:53:
                    66:48:c6:c2:c4:40:ef:65:ef:e4:02:55:2a:69:5b:
                    8e:35:06:fd:9b:02:7b:e1:5c:a5:a2:f3:8c:97:37:
                    75:b5:e4:ec:ac:6e:d7:41:b3:26:3b:4e:bf:dd:be:
                    0b:4f:93:03:15:36:d3:8b:6e:99:1b:58:87:97:0f:
                    65:f5:c4:c1:20:24:d8:dc:94:30:6c:d6:48:ff:94:
                    1b:96:b1:84:37:2f:42:ec:7a:f8:ee:12:b9:b6:f0:
                    17:c8:c2:ba:7f:10:ae:3a:a5:e1:f4:bc:b3:46:16:
                    4e:4c:c5:0d:0c:3d:b9:e3:e8:fb:42:f6:fa:3d:26:
                    a6:a8:0a:8d:d7:57:78:ab:b8:cd:13:d7:bb:2e:c3:
                    87:09:75:87:2f:af:ee:80:0b:86:7a:71:8f:45:d6:
                    34:25:d6:37:6d:33:af:d2:a1:8d:9c:13:ac:ca:b9:
                    5b:4d:32:97:0b:46:bb:75:33:85:d4:76:26:bb:5c:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:B3:78:09:9D:52:7C:75:DD:81:E3:60:E2:93:8A:F2:11:46:C0
            X509v3 Authority Key Identifier:
                keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2c1833a4e9401c092f00a1fddd65ecfbde2b1a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:6e:dc:0a:25:e1:b6:9a:e2:23:e4:f3:16:2e:37:b1:07:
         41:30:b6:33:cc:d2:1a:73:74:cb:b8:a7:08:72:e2:79:d0:7b:
         86:1f:4e:eb:ae:24:fc:31:e4:82:33:38:aa:3b:e6:f3:13:21:
         25:68:b1:61:0b:00:f8:a8:1e:9d:0f:e0:85:f9:8c:83:5f:62:
         5e:97:18:2e:1f:cd:af:e6:a4:5c:45:40:c0:90:00:37:70:e5:
         2d:7b:57:9a:40:5a:fd:e5:93:72:2b:ff:78:2f:02:4a:59:af:
         d7:cb:69:62:74:d4:ae:ca:11:e7:b3:dc:52:71:64:36:ee:49:
         ea:dc:62:fb:4a:70:79:b8:5b:09:8c:5a:65:d0:c1:46:c7:e8:
         95:3e:c0:0e:4e:60:20:0f:1e:8e:a3:05:1f:85:3e:23:7b:a6:
         3e:a7:2d:55:f8:9e:0f:b7:1e:30:ce:22:8d:cb:d9:3d:6d:67:
         d0:f9:e1:33:80:00:b2:62:e3:95:af:96:10:62:9b:9c:2d:e5:
         9f:a0:cb:10:d4:67:ae:7f:91:ab:48:64:c8:86:d6:38:dc:e0:
         f6:28:4f:75:b5:d5:e4:c3:6f:6a:ca:ff:11:7d:b5:c4:08:0a:
         d4:ab:17:a5:7a:12:fc:63:44:2e:5b:f7:6a:01:3e:93:cc:5d:
         3f:f3:02:5b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJPNpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
ZjNkMTJlODU2MTg1OWNjN2NkZjQzM2RlMGQxMzFhNjZjMWE0M2IwHhcNMjMxMTAx
MTMwOTM5WhcNMjUxMTAxMTMwOTM5WjAzMTEwLwYDVQQDEygyYzE4MzNhNGU5NDAx
YzA5MmYwMGExZmRkZDY1ZWNmYmRlMmIxYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuVIUO5pfXW712O64dv9IuphE+KSyMDYU1pQVEjdQOy7rk9DR
vKQ6EGLetWgrr+3UrHUfXF0Tf56AnUHrXOdqFMKNok4RpZqfH1NmSMbCxEDvZe/k
AlUqaVuONQb9mwJ74VylovOMlzd1teTsrG7XQbMmO06/3b4LT5MDFTbTi26ZG1iH
lw9l9cTBICTY3JQwbNZI/5QblrGENy9C7Hr47hK5tvAXyMK6fxCuOqXh9LyzRhZO
TMUNDD254+j7Qvb6PSamqAqN11d4q7jNE9e7LsOHCXWHL6/ugAuGenGPRdY0JdY3
bTOv0qGNnBOsyrlbTTKXC0a7dTOF1HYmu1wG2QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEZDs3gJnVJ8dd2B42Dik4ryEUbAMB8GA1UdIwQYMBaAFCnODtdn8Rt+b8WR
3nNvcFELLftPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmJmM2Qx
MmU4NTYxODU5Y2M3Y2RmNDMzZGUwZDEzMWE2NmMxYTQzYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTU1YmQxNDctYjQ3ZC00NmU3LWI0MWEtNzI1ZDZj
ZDUzYzM4LzJjMTgzM2E0ZTk0MDFjMDkyZjAwYTFmZGRkNjVlY2ZiZGUyYjFhOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNTViZDE0Ny1iNDdkLTQ2ZTctYjQxYS03MjVk
NmNkNTNjMzgvMmJmM2QxMmU4NTYxODU5Y2M3Y2RmNDMzZGUwZDEzMWE2NmMxYTQz
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDbEAwDQYJKoZIhvcNAQELBQADggEBAB8sbtwKJeG2muIj
5PMWLjexB0EwtjPM0hpzdMu4pwhy4nnQe4YfTuuuJPwx5IIzOKo75vMTISVosWEL
APioHp0P4IX5jINfYl6XGC4fza/mpFxFQMCQADdw5S17V5pAWv3lk3Ir/3gvAkpZ
r9fLaWJ01K7KEeez3FJxZDbuSercYvtKcHm4WwmMWmXQwUbH6JU+wA5OYCAPHo6j
BR+FPiN7pj6nLVX4ng+3HjDOIo3L2T1tZ9D54TOAALJi45WvlhBim5wt5Z+gyxDU
Z65/katIZMiG1jjc4PYoT3W11eTDb2rK/xF9tcQICtSrF6V6EvxjRC5b92oBPpPM
XT/zAls=
-----END CERTIFICATE-----