Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/fad6844709fba548b86cbc88120de2d9e7cb1a4f.roa
File:                     fad6844709fba548b86cbc88120de2d9e7cb1a4f.roa (raw, json)
Hash identifier:          CcsnHmPsEQSxgL+KMSMPxoHy0dyYoBJpnVdiBs/hHEo=
Subject key identifier:   47:83:24:0C:74:5A:F7:46:07:89:60:5B:CB:2C:DE:99:51:B0:19:5E
Certificate issuer:       /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial:       25D01B
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/fad6844709fba548b86cbc88120de2d9e7cb1a4f.roa
Signing time:             Wed 31 Jan 2024 14:39:55 +0000
ROA not before:           Wed 31 Jan 2024 14:39:55 +0000
ROA not after:            Sat 31 Jan 2026 14:39:55 +0000
asID:                     27837
IP address blocks:        2800:ac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2478107 (0x25d01b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
        Validity
            Not Before: Jan 31 14:39:55 2024 GMT
            Not After : Jan 31 14:39:55 2026 GMT
        Subject: CN=fad6844709fba548b86cbc88120de2d9e7cb1a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:9d:60:15:35:ef:0f:be:ec:b8:33:af:d4:
                    db:ce:a9:3d:03:1a:04:c8:0a:03:45:03:e3:bf:f6:
                    7c:0a:64:cb:e4:17:55:a8:4e:06:e9:12:41:dc:1a:
                    6d:52:47:51:ae:63:e8:07:ee:50:52:4d:39:76:ea:
                    d8:9b:e3:b6:be:95:e1:ff:0f:fe:92:c8:a2:84:c1:
                    85:83:f3:6f:9d:ec:b9:a0:3d:28:2b:dc:7f:85:02:
                    ef:22:79:38:27:41:eb:a5:82:8e:a8:83:89:77:ea:
                    0d:ec:08:0d:6c:75:35:ff:3b:96:88:9d:3a:82:bb:
                    72:98:40:6a:9c:4b:20:e4:01:f7:75:27:57:ee:86:
                    29:52:cb:ff:f5:81:bd:2e:20:f6:87:7a:fc:15:c4:
                    16:36:c3:9c:9c:f3:a0:4d:3e:b3:a6:eb:4f:40:81:
                    ea:03:1e:5d:ef:a0:fb:aa:2e:3e:96:a5:b3:97:0f:
                    d6:7b:6f:9b:cc:6b:35:d0:10:63:c1:26:1b:db:48:
                    1d:62:47:e3:85:b5:e1:0a:da:d8:32:5f:f9:93:61:
                    b8:f8:47:00:75:5a:da:7b:a0:47:a2:36:9d:20:4c:
                    fa:e5:58:00:ac:a8:d9:a2:62:e4:95:c2:f9:c2:66:
                    fd:28:c5:e1:c5:17:69:84:e7:3f:d3:a5:d9:84:38:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:83:24:0C:74:5A:F7:46:07:89:60:5B:CB:2C:DE:99:51:B0:19:5E
            X509v3 Authority Key Identifier:
                keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/fad6844709fba548b86cbc88120de2d9e7cb1a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:96:23:3a:ab:b9:39:e7:b5:43:82:b8:e1:7d:e9:b0:fb:3e:
         15:6e:af:d6:af:88:c4:c6:6e:90:fe:d2:7a:5e:77:b2:3c:fc:
         7a:5d:cf:e0:2b:01:74:15:b1:ac:52:39:f5:fe:e7:41:1f:dc:
         93:46:d1:0f:04:04:55:38:91:3d:33:0b:20:3e:5d:54:aa:0c:
         25:db:fd:a3:84:f8:f7:de:9e:78:9c:b6:06:f2:87:74:1a:e3:
         88:a1:d6:da:8c:17:69:e6:08:72:38:c4:c4:29:fc:49:ca:8a:
         6a:05:f4:07:4d:3b:d0:35:1e:96:6e:5c:d3:8b:90:10:62:24:
         9d:df:81:ad:4e:ca:51:56:62:80:16:53:c8:62:ef:f1:f1:34:
         99:ba:a9:ca:50:e2:ee:3b:cd:d6:c4:f1:1d:64:bf:0c:7d:ed:
         63:2c:da:27:70:f1:77:54:cd:2c:c3:94:ee:90:f0:45:82:e5:
         e9:30:47:70:54:cc:b3:7c:4a:02:37:87:bd:6e:39:19:3a:fa:
         70:ad:e8:dc:33:0d:e3:ca:70:78:bd:82:1b:a7:db:b7:0d:8a:
         82:50:14:93:3b:8f:25:21:10:6e:0f:42:43:ac:86:0f:f5:1f:
         71:5a:c5:e0:82:13:5a:69:9f:a7:f1:82:ea:2b:b5:b9:7f:53:
         ea:e1:ec:0b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJdAbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
ODU3NjhhZGVmNmQ0ZGRlMWNhNDViYWU0MzA1NzFlNDVkOTM3MGEwHhcNMjQwMTMx
MTQzOTU1WhcNMjYwMTMxMTQzOTU1WjAzMTEwLwYDVQQDEyhmYWQ2ODQ0NzA5ZmJh
NTQ4Yjg2Y2JjODgxMjBkZTJkOWU3Y2IxYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlj2dYBU17w++7Lgzr9Tbzqk9AxoEyAoDRQPjv/Z8CmTL5BdV
qE4G6RJB3BptUkdRrmPoB+5QUk05durYm+O2vpXh/w/+ksiihMGFg/Nvney5oD0o
K9x/hQLvInk4J0HrpYKOqIOJd+oN7AgNbHU1/zuWiJ06grtymEBqnEsg5AH3dSdX
7oYpUsv/9YG9LiD2h3r8FcQWNsOcnPOgTT6zputPQIHqAx5d76D7qi4+lqWzlw/W
e2+bzGs10BBjwSYb20gdYkfjhbXhCtrYMl/5k2G4+EcAdVrae6BHojadIEz65VgA
rKjZomLklcL5wmb9KMXhxRdphOc/06XZhDgmMQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEeDJAx0WvdGB4lgW8ss3plRsBleMB8GA1UdIwQYMBaAFBlsB4f4g99vpI8p
SmHQNNI974w2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWU4NTc2
OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5MzcwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjk3NjM4MGQtMmU5MC00ZTI4LWIwYTYtNGIzZGZl
MWQ4YWQ1L2ZhZDY4NDQ3MDlmYmE1NDhiODZjYmM4ODEyMGRlMmQ5ZTdjYjFhNGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOTc2MzgwZC0yZTkwLTRlMjgtYjBhNi00YjNk
ZmUxZDhhZDUvYWU4NTc2OGFkZWY2ZDRkZGUxY2E0NWJhZTQzMDU3MWU0NWQ5Mzcw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgACsAwDQYJKoZIhvcNAQELBQADggEBAE+WIzqruTnntUOC
uOF96bD7PhVur9aviMTGbpD+0nped7I8/Hpdz+ArAXQVsaxSOfX+50Ef3JNG0Q8E
BFU4kT0zCyA+XVSqDCXb/aOE+Pfennictgbyh3Qa44ih1tqMF2nmCHI4xMQp/EnK
imoF9AdNO9A1HpZuXNOLkBBiJJ3fga1OylFWYoAWU8hi7/HxNJm6qcpQ4u47zdbE
8R1kvwx97WMs2idw8XdUzSzDlO6Q8EWC5ekwR3BUzLN8SgI3h71uORk6+nCt6Nwz
DePKcHi9ghun27cNioJQFJM7jyUhEG4PQkOshg/1H3FaxeCCE1ppn6fxguortbl/
U+rh7As=
-----END CERTIFICATE-----