Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/55dd84e31801f6119e183cda3947ec97cc9c5788.roa
File:                     55dd84e31801f6119e183cda3947ec97cc9c5788.roa (raw, json)
Hash identifier:          5lJR3SCMAV2TuThskDHnlmwIMQxLQDNmOt6+tcGeJpo=
Subject key identifier:   08:84:41:FB:DC:55:71:68:4B:A4:94:4A:2B:86:89:51:6C:E5:2F:45
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       1DAED3
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/55dd84e31801f6119e183cda3947ec97cc9c5788.roa
Signing time:             Mon 23 Jan 2023 17:41:29 +0000
ROA not before:           Sun 22 Jan 2023 17:38:50 +0000
ROA not after:            Thu 23 Jan 2025 17:38:50 +0000
asID:                     11830
IP address blocks:        2803:9b20::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945299 (0x1daed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Jan 22 17:38:50 2023 GMT
            Not After : Jan 23 17:38:50 2025 GMT
        Subject: CN=55dd84e31801f6119e183cda3947ec97cc9c5788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:fc:84:dd:2d:f5:0f:8e:8d:04:84:af:71:
                    5c:8f:70:ea:75:3b:64:a1:e5:43:f2:7a:3c:36:2e:
                    91:54:d1:83:e7:1f:75:d0:b3:aa:5c:f1:cf:be:d4:
                    84:10:ac:b8:80:09:3a:67:16:88:6d:29:db:04:b1:
                    fb:e8:8e:4e:61:dc:45:62:e6:e7:4b:f0:10:69:62:
                    7b:71:7e:4a:2d:41:93:4a:6c:61:aa:b5:ff:67:66:
                    d6:38:f5:f6:80:08:f2:63:92:2c:15:f5:d5:8d:81:
                    9e:cf:12:a3:be:68:fc:f8:7b:43:74:8c:0e:fc:82:
                    df:7c:39:32:4e:bc:e6:9e:e2:51:b3:30:91:b5:ba:
                    9d:f1:3d:a3:72:15:1a:70:60:1e:98:a1:56:6b:d5:
                    fb:86:f0:09:da:97:03:24:68:42:94:8f:94:ac:eb:
                    a4:76:e5:f3:b8:b1:7e:ae:3c:c9:e3:01:36:86:91:
                    f4:cb:01:04:c7:ac:8b:51:dc:41:09:6c:94:87:06:
                    67:5a:2a:30:93:c2:95:86:f7:ab:4a:f7:df:96:db:
                    66:ae:85:53:71:26:d0:56:6f:a5:1e:0d:34:29:7d:
                    23:88:28:23:df:fb:84:3f:ce:2d:4f:99:71:40:7e:
                    fb:b6:f1:6d:ad:c3:9c:6f:9f:b0:c2:52:b4:0f:6f:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:84:41:FB:DC:55:71:68:4B:A4:94:4A:2B:86:89:51:6C:E5:2F:45
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/55dd84e31801f6119e183cda3947ec97cc9c5788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:3c:b9:eb:6b:9f:86:a2:a5:0a:74:2f:8c:9d:55:52:81:11:
         0b:10:6d:b1:9d:d8:72:47:af:0c:79:8e:43:a0:56:e1:8e:ac:
         7b:5c:dc:28:1d:80:e4:b5:0c:88:1e:9a:19:3f:af:72:39:fb:
         63:e2:db:d8:21:62:ba:57:15:e7:c4:a3:3c:25:f8:6e:f0:fc:
         32:49:d2:af:eb:fe:95:c7:fb:5c:eb:f9:74:06:c1:fe:c5:65:
         ed:92:73:fc:bc:0b:a7:69:8d:5a:97:ef:d8:33:6f:35:fc:23:
         a3:11:fd:2f:09:46:ab:5e:79:3a:5d:a9:28:a2:3e:50:7b:28:
         6d:cf:76:35:52:33:1c:8b:ea:1f:a1:f9:6a:3f:8e:03:de:21:
         b3:c6:e9:3d:50:9b:e7:87:72:0b:f5:36:7d:30:ae:0b:47:aa:
         9f:47:04:21:c1:fd:73:33:6c:ef:97:b8:93:a2:7c:d5:d7:44:
         b8:21:9f:cd:56:7e:92:e6:14:5a:fd:0a:89:a3:b3:35:dc:df:
         c0:67:dd:f1:8c:34:89:47:22:2b:e5:16:c4:d7:c7:53:58:17:
         21:f9:09:74:d3:c1:c1:20:64:39:ce:01:40:ed:d1:17:1b:0d:
         f4:a1:91:71:09:2c:0f:b4:1e:36:74:c8:80:0e:b4:6a:5b:b7:
         1d:a0:a1:e0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHa7TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
YzE1ZmFmYTMwYmZjZDc5YmY5OTUxMjYyNTczMTU4ZDk4YTI3NWUwHhcNMjMwMTIy
MTczODUwWhcNMjUwMTIzMTczODUwWjAzMTEwLwYDVQQDEyg1NWRkODRlMzE4MDFm
NjExOWUxODNjZGEzOTQ3ZWM5N2NjOWM1Nzg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoUn8hN0t9Q+OjQSEr3Fcj3DqdTtkoeVD8no8Ni6RVNGD5x91
0LOqXPHPvtSEEKy4gAk6ZxaIbSnbBLH76I5OYdxFYubnS/AQaWJ7cX5KLUGTSmxh
qrX/Z2bWOPX2gAjyY5IsFfXVjYGezxKjvmj8+HtDdIwO/ILffDkyTrzmnuJRszCR
tbqd8T2jchUacGAemKFWa9X7hvAJ2pcDJGhClI+UrOukduXzuLF+rjzJ4wE2hpH0
ywEEx6yLUdxBCWyUhwZnWiowk8KVhverSvfflttmroVTcSbQVm+lHg00KX0jiCgj
3/uEP84tT5lxQH77tvFtrcOcb5+wwlK0D2/0ywIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFAiEQfvcVXFoS6SUSiuGiVFs5S9FMB8GA1UdIwQYMBaAFKGwewo8koNx/Cou
jrXotarzdPBHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzdjMTVm
YWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI2YTNhY2MtMmE0Yy00ZmJjLWEyYTYtOTUwZmQx
ZTI2NjdkLzU1ZGQ4NGUzMTgwMWY2MTE5ZTE4M2NkYTM5NDdlYzk3Y2M5YzU3ODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjZhM2FjYy0yYTRjLTRmYmMtYTJhNi05NTBm
ZDFlMjY2N2QvYzdjMTVmYWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDmyAwDQYJKoZIhvcNAQELBQADggEBAEo8uetrn4aipQp0
L4ydVVKBEQsQbbGd2HJHrwx5jkOgVuGOrHtc3CgdgOS1DIgemhk/r3I5+2Pi29gh
YrpXFefEozwl+G7w/DJJ0q/r/pXH+1zr+XQGwf7FZe2Sc/y8C6dpjVqX79gzbzX8
I6MR/S8JRqteeTpdqSiiPlB7KG3PdjVSMxyL6h+h+Wo/jgPeIbPG6T1Qm+eHcgv1
Nn0wrgtHqp9HBCHB/XMzbO+XuJOifNXXRLghn81WfpLmFFr9ComjszXc38Bn3fGM
NIlHIivlFsTXx1NYFyH5CXTTwcEgZDnOAUDt0RcbDfShkXEJLA+0HjZ0yIAOtGpb
tx2goeA=
-----END CERTIFICATE-----