Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/edca25444f469bd42a9b006f86e4ddbb8ddc4196.roa
File:                     edca25444f469bd42a9b006f86e4ddbb8ddc4196.roa (raw, json)
Hash identifier:          Oo7kup+Cth/myB3z3BO1ukJxH+cu7/rDRFEFvOnwmr4=
Subject key identifier:   32:8C:10:74:79:90:A7:CA:E0:76:3C:40:19:30:41:2C:6E:DE:79:C3
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       1DBDB2
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/edca25444f469bd42a9b006f86e4ddbb8ddc4196.roa
Signing time:             Mon 23 Jan 2023 18:23:45 +0000
ROA not before:           Sun 22 Jan 2023 18:20:59 +0000
ROA not after:            Thu 23 Jan 2025 18:20:59 +0000
asID:                     203
IP address blocks:        2001:1330::/30 maxlen: 64
                          2001:1334::/30 maxlen: 64
                          2800:d300::/29 maxlen: 48
                          2803:9b20::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949106 (0x1dbdb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Jan 22 18:20:59 2023 GMT
            Not After : Jan 23 18:20:59 2025 GMT
        Subject: CN=edca25444f469bd42a9b006f86e4ddbb8ddc4196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:2a:f3:eb:05:d1:43:1b:7c:87:e1:aa:3a:
                    79:27:2f:79:96:9f:c4:f7:a4:40:00:3a:79:f1:21:
                    b5:4c:fe:19:59:fc:a9:9b:cf:f6:74:a8:28:27:ba:
                    f5:94:20:ca:ad:68:2d:bd:74:fc:5c:79:ba:42:6d:
                    29:e4:40:0d:0d:b5:0a:84:14:4c:6e:64:17:d9:7f:
                    75:ea:ec:78:86:5c:92:b7:ea:f2:c9:a2:2c:e8:7d:
                    f3:bc:b5:ee:fd:7d:f7:5d:3e:56:c4:3c:a8:be:75:
                    7d:30:67:a9:8b:dd:8d:5d:88:4f:5d:3b:2a:85:68:
                    a4:0b:0a:fc:4e:16:48:90:96:ad:86:a3:3b:8d:23:
                    48:f5:e9:89:02:7c:8b:5e:e5:5c:5f:bc:96:4c:3d:
                    a7:97:bd:64:ba:26:fb:4d:50:87:f6:71:74:ab:b7:
                    3e:01:2e:c4:57:42:15:03:f1:02:a0:32:57:ac:f4:
                    7a:ca:3a:51:a0:c3:0e:65:bb:ea:60:4f:63:07:ec:
                    21:76:58:a1:60:1a:5a:be:ba:1e:df:57:58:90:af:
                    6e:91:29:90:dc:58:71:24:e6:65:89:c7:a4:fb:54:
                    cd:4b:9a:f8:0d:36:8a:a5:07:86:67:49:4a:3e:e8:
                    6e:b3:46:fd:2d:a8:0c:c6:ac:f6:58:ec:59:3b:8f:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:10:74:79:90:A7:CA:E0:76:3C:40:19:30:41:2C:6E:DE:79:C3
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/edca25444f469bd42a9b006f86e4ddbb8ddc4196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1330::/29
                  2800:d300::/29
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:a1:53:94:13:22:19:fe:7e:05:e4:7b:1a:a4:19:b8:a2:
         69:b5:34:fd:4c:c4:6b:dd:d4:a0:94:c7:d3:c3:5d:f9:44:11:
         b2:3c:f6:d0:b7:13:29:e6:34:43:07:0d:df:63:5d:63:46:be:
         e4:a1:ec:d2:e5:c3:73:57:01:aa:24:07:52:db:67:78:a3:5e:
         0f:bb:68:cd:f7:0c:1b:02:81:df:a0:e4:9a:04:ad:e2:78:35:
         b0:81:5f:e6:ce:e3:b9:7b:99:ab:89:80:57:a9:83:86:6a:6b:
         88:d9:3e:05:cb:78:7b:4e:6b:25:53:f6:da:6a:07:cf:51:70:
         e4:21:5c:4f:e6:be:39:97:cf:0a:a3:db:06:05:96:e6:87:9b:
         86:16:65:62:84:a3:d0:b8:36:3c:ed:6a:59:d9:6a:21:8f:09:
         84:19:86:d8:3d:20:11:db:5d:1b:59:f3:b2:24:1a:75:c0:82:
         5c:33:4b:83:33:7f:c8:84:0a:ba:a8:1d:22:96:5f:09:90:64:
         64:d3:c9:b9:1b:da:aa:4e:5d:f2:2f:98:04:49:a7:8a:da:0b:
         45:bb:e5:74:9d:aa:6c:fc:01:31:76:ee:b8:c9:d6:1b:37:42:
         d0:de:f9:89:63:a0:30:9b:20:41:1b:70:dc:ed:a9:9e:17:e2:
         9a:11:b3:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHb2yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
YzE1ZmFmYTMwYmZjZDc5YmY5OTUxMjYyNTczMTU4ZDk4YTI3NWUwHhcNMjMwMTIy
MTgyMDU5WhcNMjUwMTIzMTgyMDU5WjAzMTEwLwYDVQQDEyhlZGNhMjU0NDRmNDY5
YmQ0MmE5YjAwNmY4NmU0ZGRiYjhkZGM0MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0fEq8+sF0UMbfIfhqjp5Jy95lp/E96RAADp58SG1TP4ZWfyp
m8/2dKgoJ7r1lCDKrWgtvXT8XHm6Qm0p5EANDbUKhBRMbmQX2X916ux4hlySt+ry
yaIs6H3zvLXu/X33XT5WxDyovnV9MGepi92NXYhPXTsqhWikCwr8ThZIkJathqM7
jSNI9emJAnyLXuVcX7yWTD2nl71kuib7TVCH9nF0q7c+AS7EV0IVA/ECoDJXrPR6
yjpRoMMOZbvqYE9jB+whdlihYBpavroe31dYkK9ukSmQ3FhxJOZlicek+1TNS5r4
DTaKpQeGZ0lKPuhus0b9LagMxqz2WOxZO4+/cwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDKMEHR5kKfK4HY8QBkwQSxu3nnDMB8GA1UdIwQYMBaAFKGwewo8koNx/Cou
jrXotarzdPBHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzdjMTVm
YWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI2YTNhY2MtMmE0Yy00ZmJjLWEyYTYtOTUwZmQx
ZTI2NjdkL2VkY2EyNTQ0NGY0NjliZDQyYTliMDA2Zjg2ZTRkZGJiOGRkYzQxOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjZhM2FjYy0yYTRjLTRmYmMtYTJhNi05NTBm
ZDFlMjY2N2QvYzdjMTVmYWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wGwQCAAIwFQMFAyABEzADBQMoANMAAwUAKAObIDANBgkqhkiG9w0BAQsFAAOC
AQEAKvmhU5QTIhn+fgXkexqkGbiiabU0/UzEa93UoJTH08Nd+UQRsjz20LcTKeY0
QwcN32NdY0a+5KHs0uXDc1cBqiQHUttneKNeD7tozfcMGwKB36DkmgSt4ng1sIFf
5s7juXuZq4mAV6mDhmpriNk+Bct4e05rJVP22moHz1Fw5CFcT+a+OZfPCqPbBgWW
5oebhhZlYoSj0Lg2PO1qWdlqIY8JhBmG2D0gEdtdG1nzsiQadcCCXDNLgzN/yIQK
uqgdIpZfCZBkZNPJuRvaqk5d8i+YBEmnitoLRbvldJ2qbPwBMXbuuMnWGzdC0N75
iWOgMJsgQRtw3O2pnhfimhGzsQ==
-----END CERTIFICATE-----