Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/71e63aa9ebd99404c69a85cebda3196855eefc85.roa
File:                     71e63aa9ebd99404c69a85cebda3196855eefc85.roa (raw, json)
Hash identifier:          BrBBerD+ytm63YEiewpq6re0ycEqPCzU6ftpDUZu+S0=
Subject key identifier:   80:C1:73:0C:36:AB:4F:97:56:FA:13:A5:83:24:81:12:DD:96:CE:93
Certificate issuer:       /CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
Certificate serial:       200331
Authority key identifier: B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/71e63aa9ebd99404c69a85cebda3196855eefc85.roa
Signing time:             Tue 24 Oct 2023 00:56:44 +0000
ROA not before:           Tue 24 Oct 2023 00:56:44 +0000
ROA not after:            Fri 24 Oct 2025 00:56:44 +0000
asID:                     267834
IP address blocks:        2803:6460::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097969 (0x200331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3cca3e6f60aaad1f230a519a0f328c0869c9dc
        Validity
            Not Before: Oct 24 00:56:44 2023 GMT
            Not After : Oct 24 00:56:44 2025 GMT
        Subject: CN=71e63aa9ebd99404c69a85cebda3196855eefc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:62:33:dd:d4:eb:22:f5:96:38:ef:d4:aa:
                    8e:f0:64:bb:7a:64:86:3f:81:19:0e:ef:42:0b:8c:
                    0d:1c:7b:08:2f:3b:41:ee:38:bd:b2:a6:46:e4:85:
                    3a:28:84:ca:42:3d:41:5d:9d:7b:6f:25:c2:0a:fb:
                    8f:83:19:a4:4a:12:b8:15:9f:e5:91:9e:e4:9c:fe:
                    b3:72:01:bb:09:89:52:ed:7b:ec:c4:c8:ef:37:8b:
                    c2:b5:b9:b1:5b:e7:cf:08:6e:03:8c:52:40:21:93:
                    de:57:0b:5a:41:bb:a3:76:35:4c:ee:08:64:2a:fe:
                    75:ab:98:c4:38:24:ea:2f:a5:01:f8:e0:0a:fa:a6:
                    7b:28:06:dc:2f:38:33:ae:e2:91:a6:cb:ba:92:4c:
                    0e:85:7e:7e:8d:1b:d1:e4:92:73:c3:ae:d5:1d:72:
                    2b:bd:fd:23:5c:84:76:b8:88:cd:2e:9d:04:c9:53:
                    6b:c6:8e:8f:9e:93:d4:a5:69:fe:34:d8:f1:16:8d:
                    56:4b:c0:5e:bb:5f:21:8a:85:4e:03:7a:8b:c4:e2:
                    de:5f:45:d8:81:c8:82:a9:90:6e:89:f9:cd:b2:76:
                    e3:05:d7:3b:cd:f8:6c:2d:96:f2:78:04:ee:1c:25:
                    dd:02:a7:41:1c:d0:2d:90:ee:f8:3b:8c:1e:4c:64:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C1:73:0C:36:AB:4F:97:56:FA:13:A5:83:24:81:12:DD:96:CE:93
            X509v3 Authority Key Identifier:
                keyid:B5:2B:7B:B9:D4:2C:C6:6F:DC:D1:14:7D:F6:84:B2:17:53:41:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/71e63aa9ebd99404c69a85cebda3196855eefc85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c172b38f-0d7d-44ea-bc3e-824de43d7e3b/1e3cca3e6f60aaad1f230a519a0f328c0869c9dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6460::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:3d:f1:f3:a0:16:3f:4d:e0:7c:5d:b3:ee:e2:d9:c1:bd:
         42:8f:6a:26:55:d7:30:07:d5:af:d0:aa:4a:ef:59:8a:58:eb:
         cb:0c:97:b0:1d:4c:31:67:e2:e1:52:8d:ab:ed:be:72:04:79:
         d8:28:97:99:51:92:16:7f:52:75:53:27:43:70:7c:c8:93:d4:
         58:61:d9:3e:2c:89:a1:99:ef:0c:8a:cb:8f:3c:ce:ac:9d:17:
         a1:2f:d4:16:db:46:ab:fe:97:8d:3a:54:bc:07:55:d4:78:74:
         90:c8:bb:63:6f:ae:a8:7c:dd:a4:66:90:2b:58:c1:8c:e8:e1:
         7d:fb:59:2a:a4:68:d1:a0:a7:4e:ed:35:73:bb:e0:53:e8:7c:
         1d:ee:e8:ea:1b:81:53:ba:15:47:c4:60:ee:b0:83:20:77:79:
         06:5a:5d:ca:f9:fb:fd:e5:26:31:bc:e0:41:58:8b:89:27:3b:
         4a:d3:a8:70:17:43:cc:74:48:1f:77:22:ee:16:be:04:0a:33:
         af:ff:a2:2b:3c:7e:94:ae:47:05:1b:87:1d:a9:51:52:4e:b4:
         6e:f6:01:c2:77:87:4c:7f:6d:c6:eb:87:b1:e7:8e:98:b3:c3:
         34:cc:cc:b9:02:8e:e5:21:12:64:f1:ca:94:6f:99:24:92:66:
         b0:b0:b5:01
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIAMxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFl
M2NjYTNlNmY2MGFhYWQxZjIzMGE1MTlhMGYzMjhjMDg2OWM5ZGMwHhcNMjMxMDI0
MDA1NjQ0WhcNMjUxMDI0MDA1NjQ0WjAzMTEwLwYDVQQDEyg3MWU2M2FhOWViZDk5
NDA0YzY5YTg1Y2ViZGEzMTk2ODU1ZWVmYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnZ5iM93U6yL1ljjv1KqO8GS7emSGP4EZDu9CC4wNHHsILztB
7ji9sqZG5IU6KITKQj1BXZ17byXCCvuPgxmkShK4FZ/lkZ7knP6zcgG7CYlS7Xvs
xMjvN4vCtbmxW+fPCG4DjFJAIZPeVwtaQbujdjVM7ghkKv51q5jEOCTqL6UB+OAK
+qZ7KAbcLzgzruKRpsu6kkwOhX5+jRvR5JJzw67VHXIrvf0jXIR2uIjNLp0EyVNr
xo6PnpPUpWn+NNjxFo1WS8Beu18hioVOA3qLxOLeX0XYgciCqZBuifnNsnbjBdc7
zfhsLZbyeATuHCXdAqdBHNAtkO74O4weTGQ/FQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIDBcww2q0+XVvoTpYMkgRLdls6TMB8GA1UdIwQYMBaAFLUre7nULMZv3NEU
ffaEshdTQfYnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWUzY2Nh
M2U2ZjYwYWFhZDFmMjMwYTUxOWEwZjMyOGMwODY5YzlkYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzE3MmIzOGYtMGQ3ZC00NGVhLWJjM2UtODI0ZGU0
M2Q3ZTNiLzcxZTYzYWE5ZWJkOTk0MDRjNjlhODVjZWJkYTMxOTY4NTVlZWZjODUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMTcyYjM4Zi0wZDdkLTQ0ZWEtYmMzZS04MjRk
ZTQzZDdlM2IvMWUzY2NhM2U2ZjYwYWFhZDFmMjMwYTUxOWEwZjMyOGMwODY5Yzlk
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDZGAwDQYJKoZIhvcNAQELBQADggEBAE+qPfHzoBY/TeB8
XbPu4tnBvUKPaiZV1zAH1a/QqkrvWYpY68sMl7AdTDFn4uFSjavtvnIEedgol5lR
khZ/UnVTJ0NwfMiT1Fhh2T4siaGZ7wyKy488zqydF6Ev1BbbRqv+l406VLwHVdR4
dJDIu2Nvrqh83aRmkCtYwYzo4X37WSqkaNGgp07tNXO74FPofB3u6OobgVO6FUfE
YO6wgyB3eQZaXcr5+/3lJjG84EFYi4knO0rTqHAXQ8x0SB93Iu4WvgQKM6//ois8
fpSuRwUbhx2pUVJOtG72AcJ3h0x/bcbrh7HnjpizwzTMzLkCjuUhEmTxypRvmSSS
ZrCwtQE=
-----END CERTIFICATE-----