Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/0622ca4be1ff3af00696be2549b577c6d968cc72.roa
File:                     0622ca4be1ff3af00696be2549b577c6d968cc72.roa (raw, json)
Hash identifier:          X/QRyxm45MK+S0390dltz7eH3FHKuel1m6cvMj14Iko=
Subject key identifier:   28:41:5D:FF:85:BB:FF:8D:15:FC:7F:31:55:94:92:68:49:A6:10:D1
Certificate issuer:       /CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
Certificate serial:       0E8F8D
Authority key identifier: A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/0622ca4be1ff3af00696be2549b577c6d968cc72.roa
Signing time:             Tue 21 Nov 2023 21:11:57 +0000
ROA not before:           Tue 21 Nov 2023 21:11:57 +0000
ROA not after:            Fri 21 Nov 2025 21:11:57 +0000
asID:                     61468
IP address blocks:        2801:16:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954253 (0xe8f8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
        Validity
            Not Before: Nov 21 21:11:57 2023 GMT
            Not After : Nov 21 21:11:57 2025 GMT
        Subject: CN=0622ca4be1ff3af00696be2549b577c6d968cc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:e0:e9:28:ff:95:f5:f0:50:8b:f6:2a:88:
                    9b:db:1f:6e:ee:e6:a9:55:fb:a8:c5:14:bd:7e:4f:
                    93:73:d1:b1:5c:3b:c7:b0:00:d6:cf:b8:20:c5:97:
                    f7:11:0f:03:1f:5d:3a:2f:17:6d:c5:48:15:75:8b:
                    82:b1:01:4c:ff:fc:c0:5b:9f:fe:28:22:a2:04:0e:
                    9d:59:09:a3:78:eb:97:0f:c5:11:22:78:3e:b3:ed:
                    cd:8e:58:2b:28:1d:87:8b:0c:57:36:41:6e:35:cb:
                    ba:8a:7b:64:3d:ed:cb:ad:45:53:dd:54:dd:0d:40:
                    3a:31:11:8b:3d:37:ce:1d:b1:2a:e3:4f:44:a3:7a:
                    5d:01:d5:1d:d5:33:96:64:3f:df:ee:7b:da:23:68:
                    76:13:85:68:4b:c4:e4:0b:f4:82:65:03:bc:24:dd:
                    9d:2d:bc:8e:a8:03:d5:45:5a:98:70:56:78:a9:1b:
                    b7:50:4e:53:59:cb:5f:8d:61:a2:6e:4c:ee:00:72:
                    91:df:14:98:ea:6c:57:be:fb:48:1e:07:28:3c:04:
                    4f:59:1b:36:6a:56:93:01:c0:a8:18:95:17:33:48:
                    16:78:39:ee:d0:4e:73:df:05:e6:63:78:4d:81:c4:
                    10:b4:74:9a:df:5b:67:a3:75:1f:c2:d7:b5:db:99:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:5D:FF:85:BB:FF:8D:15:FC:7F:31:55:94:92:68:49:A6:10:D1
            X509v3 Authority Key Identifier:
                keyid:A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/0622ca4be1ff3af00696be2549b577c6d968cc72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/87b7f548b0d643ffa768da76ef82c2b3680dff0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:cb:2b:7f:5d:7a:c9:8c:25:b1:5f:bd:fa:f3:c1:66:73:eb:
         02:89:7b:c7:d1:81:fa:70:a9:cf:bf:28:fb:eb:a7:45:5a:b8:
         08:a4:02:d9:8c:71:26:c3:f6:9a:7f:d5:20:b1:59:43:59:a2:
         96:04:a0:36:8b:29:6b:c4:21:d2:db:87:c2:fd:9a:15:fc:c9:
         bc:1b:7e:a5:16:f5:9c:1d:4e:a6:fd:9e:b3:21:7f:ee:ab:78:
         db:cf:5f:a5:31:3e:db:e4:3b:05:9a:2b:5a:d6:97:7c:53:54:
         ca:1e:ae:fe:b3:86:74:52:1b:c0:7a:b1:a4:72:5a:a9:10:d2:
         99:8d:37:bc:ae:5c:46:f3:8c:de:67:ee:73:07:73:75:d2:24:
         f3:7e:c6:e8:40:c8:c9:8b:7b:21:73:27:4f:5b:f2:c8:95:9d:
         07:fb:bf:4b:1b:b8:6e:4c:ff:2a:30:a0:ef:64:99:78:55:7d:
         c3:bc:65:0b:fd:f5:6b:ff:da:27:e3:33:16:de:76:85:00:0f:
         7b:90:07:e5:22:52:01:a2:a5:44:38:f3:fa:92:28:19:73:d3:
         f1:3c:c5:d4:b2:f5:76:ca:bd:6b:7a:69:45:fb:88:fe:7a:59:
         27:00:3e:19:c6:4d:ad:ae:50:9a:f4:b8:be:9a:33:4c:5a:41:
         89:93:00:ec
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDo+NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
YjdmNTQ4YjBkNjQzZmZhNzY4ZGE3NmVmODJjMmIzNjgwZGZmMGQwHhcNMjMxMTIx
MjExMTU3WhcNMjUxMTIxMjExMTU3WjAzMTEwLwYDVQQDEygwNjIyY2E0YmUxZmYz
YWYwMDY5NmJlMjU0OWI1NzdjNmQ5NjhjYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwpjg6Sj/lfXwUIv2Koib2x9u7uapVfuoxRS9fk+Tc9GxXDvH
sADWz7ggxZf3EQ8DH106LxdtxUgVdYuCsQFM//zAW5/+KCKiBA6dWQmjeOuXD8UR
Ing+s+3NjlgrKB2HiwxXNkFuNcu6intkPe3LrUVT3VTdDUA6MRGLPTfOHbEq409E
o3pdAdUd1TOWZD/f7nvaI2h2E4VoS8TkC/SCZQO8JN2dLbyOqAPVRVqYcFZ4qRu3
UE5TWctfjWGibkzuAHKR3xSY6mxXvvtIHgcoPARPWRs2alaTAcCoGJUXM0gWeDnu
0E5z3wXmY3hNgcQQtHSa31tno3Ufwte125k/9wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFChBXf+Fu/+NFfx/MVWUkmhJphDRMB8GA1UdIwQYMBaAFKV9Q3a+gW85dheG
4AEzGwgeQt0YMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODdiN2Y1
NDhiMGQ2NDNmZmE3NjhkYTc2ZWY4MmMyYjM2ODBkZmYwZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmEzNzNhMWItMzg3Yi00MWQxLTg1NDAtYzE3NThk
ZmUzY2YzLzA2MjJjYTRiZTFmZjNhZjAwNjk2YmUyNTQ5YjU3N2M2ZDk2OGNjNzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTM3M2ExYi0zODdiLTQxZDEtODU0MC1jMTc1
OGRmZTNjZjMvODdiN2Y1NDhiMGQ2NDNmZmE3NjhkYTc2ZWY4MmMyYjM2ODBkZmYw
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABaYADANBgkqhkiG9w0BAQsFAAOCAQEAXcsrf116yYwl
sV+9+vPBZnPrAol7x9GB+nCpz78o++unRVq4CKQC2YxxJsP2mn/VILFZQ1milgSg
Nospa8Qh0tuHwv2aFfzJvBt+pRb1nB1Opv2esyF/7qt4289fpTE+2+Q7BZorWtaX
fFNUyh6u/rOGdFIbwHqxpHJaqRDSmY03vK5cRvOM3mfucwdzddIk837G6EDIyYt7
IXMnT1vyyJWdB/u/Sxu4bkz/KjCg72SZeFV9w7xlC/31a//aJ+MzFt52hQAPe5AH
5SJSAaKlRDjz+pIoGXPT8TzF1LL1dsq9a3ppRfuI/npZJwA+GcZNra5QmvS4vpoz
TFpBiZMA7A==
-----END CERTIFICATE-----