Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/08a5c11668333231cad96d60e186b2c12b53f832.roa
File:                     08a5c11668333231cad96d60e186b2c12b53f832.roa (raw, json)
Hash identifier:          YETk7OMZ6PsiRxilol8kgQl4ajai7pwix9Fj/r7PjSk=
Subject key identifier:   2B:DC:13:9E:55:D3:F0:70:DC:FD:BD:D7:F9:A7:90:E6:B8:81:95:E1
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       1F9DF4
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/08a5c11668333231cad96d60e186b2c12b53f832.roa
Signing time:             Tue 11 Apr 2023 17:49:25 +0000
ROA not before:           Mon 10 Apr 2023 17:48:53 +0000
ROA not after:            Fri 11 Apr 2025 17:48:53 +0000
asID:                     264646
IP address blocks:        2803:1780:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072052 (0x1f9df4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Apr 10 17:48:53 2023 GMT
            Not After : Apr 11 17:48:53 2025 GMT
        Subject: CN=08a5c11668333231cad96d60e186b2c12b53f832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:c0:3c:8f:b0:f6:ab:f4:3a:cd:33:d3:2d:
                    b1:f8:21:50:48:30:50:61:80:ea:14:74:7b:69:52:
                    f6:51:7f:9c:99:c0:87:88:92:0c:af:3c:51:48:81:
                    1c:38:1e:0a:2e:d3:39:01:78:62:42:bb:e1:5d:da:
                    75:ac:5c:10:79:1f:06:8e:0c:2e:48:c6:bb:60:33:
                    c4:95:25:d1:1f:d0:7e:ba:71:34:d5:60:31:0a:64:
                    ad:0d:13:cb:5c:ed:ea:4c:20:f8:1a:84:35:fd:31:
                    79:69:82:a2:aa:6a:04:11:e7:cd:49:20:9e:aa:ff:
                    3b:7f:c6:44:a9:f8:0e:7a:74:8c:db:58:ef:d0:1d:
                    1f:dd:27:ce:33:91:9c:db:0b:21:86:77:36:5b:6f:
                    28:5e:27:ea:00:10:d7:cc:17:c9:5a:fa:77:99:ef:
                    bd:fc:51:b1:72:83:47:3c:22:96:3a:e4:be:9a:5d:
                    fa:ae:ba:db:09:58:1c:db:7a:14:ee:7a:e9:aa:a2:
                    72:3a:88:75:06:77:57:a5:e8:70:4a:c9:3d:6e:8a:
                    af:74:0b:73:fd:d9:0b:82:72:25:78:df:03:4a:d7:
                    bd:14:56:d9:3c:bd:26:3d:12:4a:e8:59:6e:54:8e:
                    ac:17:a7:0f:50:73:f5:8f:78:0d:8d:e3:5c:a1:81:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:13:9E:55:D3:F0:70:DC:FD:BD:D7:F9:A7:90:E6:B8:81:95:E1
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/08a5c11668333231cad96d60e186b2c12b53f832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:3f:bc:b3:14:da:e8:68:c7:42:75:e1:37:96:5c:c8:04:
         4f:02:c0:db:d1:93:c8:6c:6d:19:5d:d6:62:3a:6a:93:22:d9:
         be:fc:d8:d5:cb:49:63:bf:a4:d6:6a:e1:74:44:12:de:e5:34:
         6e:64:63:c2:65:3c:99:05:96:6d:26:b9:1e:6b:b9:80:f8:ce:
         c0:0e:25:43:eb:77:fb:cd:59:78:76:98:d3:a5:b1:ad:2c:78:
         f1:37:d0:4d:16:43:93:98:bf:fc:f3:55:5f:6e:bc:bc:b7:99:
         9a:26:8f:98:65:d8:fe:9e:d9:62:e0:a9:49:0c:d9:df:48:d8:
         e9:d4:9c:ee:6d:e9:bb:12:e5:45:43:eb:39:cc:89:58:1c:59:
         de:07:af:3b:0e:5a:99:35:d1:b9:a0:19:2f:85:86:66:fe:f1:
         a6:42:31:70:19:89:e1:de:e3:47:60:a1:a7:2a:fa:e2:60:80:
         59:29:9f:1f:7f:71:a6:b7:5f:e6:ab:3c:e3:21:e9:b1:9f:f3:
         0c:0c:61:eb:9d:e1:56:75:b8:03:65:de:14:c8:78:4a:67:dc:
         61:e2:df:93:ad:6d:f5:47:aa:65:dd:63:fb:86:83:79:54:1f:
         c1:a3:83:60:6f:f0:81:3e:d0:86:8c:f9:d2:ab:bf:01:6a:93:
         d1:d2:c4:66
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDH530MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
ODU1YjE0YjlhMDQzZWEyMTI3MDkzYmU3Zjg2N2IwOTFmNjAyMzEwHhcNMjMwNDEw
MTc0ODUzWhcNMjUwNDExMTc0ODUzWjAzMTEwLwYDVQQDEygwOGE1YzExNjY4MzMz
MjMxY2FkOTZkNjBlMTg2YjJjMTJiNTNmODMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApaLAPI+w9qv0Os0z0y2x+CFQSDBQYYDqFHR7aVL2UX+cmcCH
iJIMrzxRSIEcOB4KLtM5AXhiQrvhXdp1rFwQeR8GjgwuSMa7YDPElSXRH9B+unE0
1WAxCmStDRPLXO3qTCD4GoQ1/TF5aYKiqmoEEefNSSCeqv87f8ZEqfgOenSM21jv
0B0f3SfOM5Gc2wshhnc2W28oXifqABDXzBfJWvp3me+9/FGxcoNHPCKWOuS+ml36
rrrbCVgc23oU7nrpqqJyOoh1BndXpehwSsk9boqvdAtz/dkLgnIleN8DSte9FFbZ
PL0mPRJK6FluVI6sF6cPUHP1j3gNjeNcoYHbSwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCvcE55V0/Bw3P291/mnkOa4gZXhMB8GA1UdIwQYMBaAFCrwKsBKA2VldyRG
rZupA0MvAGT5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA4NTVi
MTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjljN2UyYzYtYTBkMy00NGRiLWJiZjAtYzE5NGQ1
NzZmODhjLzA4YTVjMTE2NjgzMzMyMzFjYWQ5NmQ2MGUxODZiMmMxMmI1M2Y4MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOWM3ZTJjNi1hMGQzLTQ0ZGItYmJmMC1jMTk0
ZDU3NmY4OGMvMzA4NTViMTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDF4CAAjANBgkqhkiG9w0BAQsFAAOCAQEAU+o/vLMU2uho
x0J14TeWXMgETwLA29GTyGxtGV3WYjpqkyLZvvzY1ctJY7+k1mrhdEQS3uU0bmRj
wmU8mQWWbSa5Hmu5gPjOwA4lQ+t3+81ZeHaY06WxrSx48TfQTRZDk5i//PNVX268
vLeZmiaPmGXY/p7ZYuCpSQzZ30jY6dSc7m3puxLlRUPrOcyJWBxZ3gevOw5amTXR
uaAZL4WGZv7xpkIxcBmJ4d7jR2Chpyr64mCAWSmfH39xprdf5qs84yHpsZ/zDAxh
653hVnW4A2XeFMh4SmfcYeLfk61t9UeqZd1j+4aDeVQfwaODYG/wgT7Qhoz50qu/
AWqT0dLEZg==
-----END CERTIFICATE-----