Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/615fa4723e2b36a64d9fcf21dd2b583f4a59d1a2.roa
File:                     615fa4723e2b36a64d9fcf21dd2b583f4a59d1a2.roa (raw, json)
Hash identifier:          qZCjkC0ES3+yjbwJUQUPrH02rwhOZ+C8edKAIEtWzg4=
Subject key identifier:   57:D5:79:C8:5B:79:6C:62:4D:61:44:63:A4:98:E2:A2:B6:0A:66:C6
Certificate issuer:       /CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
Certificate serial:       1AA5E0
Authority key identifier: 0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/615fa4723e2b36a64d9fcf21dd2b583f4a59d1a2.roa
Signing time:             Fri 28 Apr 2023 12:07:27 +0000
ROA not before:           Thu 27 Apr 2023 12:07:26 +0000
ROA not after:            Mon 28 Apr 2025 12:07:26 +0000
asID:                     207036
IP address blocks:        2803:9c0::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746400 (0x1aa5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
        Validity
            Not Before: Apr 27 12:07:26 2023 GMT
            Not After : Apr 28 12:07:26 2025 GMT
        Subject: CN=615fa4723e2b36a64d9fcf21dd2b583f4a59d1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:70:15:4f:5d:65:91:60:80:72:d7:c1:46:
                    da:25:88:78:86:38:12:05:15:22:78:93:fe:ae:bf:
                    ff:93:ce:80:3b:f7:80:7f:95:b6:5f:82:8a:d8:c2:
                    1a:d2:df:e1:4f:ae:1b:f7:17:94:84:1d:b8:f9:4f:
                    6e:eb:6c:e4:f8:65:b3:68:c6:64:79:ef:41:ee:0f:
                    73:ef:19:4c:fd:bf:43:b4:8d:f6:c7:1b:96:21:1f:
                    41:3a:d5:08:5d:4a:49:9d:92:8b:ef:23:32:35:b3:
                    f1:82:21:14:a9:8f:44:d1:52:45:db:17:f0:55:c0:
                    45:02:22:46:8b:95:12:fd:8e:18:c7:0c:49:8e:76:
                    12:5e:7b:76:a7:4a:3e:ea:b8:e7:49:95:e4:52:77:
                    0a:c7:7f:e0:b8:f7:cb:2a:5e:4e:a8:f6:60:31:66:
                    3f:6a:0a:ec:a5:66:6b:d9:63:7f:b2:68:b1:55:cc:
                    7e:af:a5:b3:81:ac:56:b1:64:53:67:15:d8:0d:80:
                    9d:8d:1e:5a:31:f5:69:50:50:92:7d:2c:f1:36:41:
                    0a:6c:23:b2:16:dd:08:f8:8f:b6:22:67:f5:70:2b:
                    00:e0:8f:cf:80:75:88:c2:5a:53:9c:96:d5:49:ea:
                    9f:17:c7:15:38:3f:a3:c9:5b:07:6f:77:a5:39:85:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D5:79:C8:5B:79:6C:62:4D:61:44:63:A4:98:E2:A2:B6:0A:66:C6
            X509v3 Authority Key Identifier:
                keyid:0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/615fa4723e2b36a64d9fcf21dd2b583f4a59d1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/9144c0a44649b8dc574f61d431e56ed273ddb9f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:07:eb:29:88:c9:5c:d5:7c:32:56:a0:14:28:30:d6:96:
         79:d9:6d:97:40:c5:03:24:e8:18:e9:ee:b6:eb:76:fa:91:e2:
         f9:88:fb:b2:ef:ba:3e:7c:64:f6:3a:ae:d5:ea:99:91:7a:f9:
         61:d0:e5:6a:e0:92:2b:ce:f7:cd:d4:28:ed:d0:a5:bc:aa:8e:
         2f:72:03:cd:7d:9a:d8:10:cc:2c:aa:d7:9e:0c:6e:e8:20:75:
         d7:45:b8:5f:b9:c8:30:57:6d:44:6f:79:03:40:c6:8a:d5:6e:
         3e:15:0b:c8:8f:2d:18:7a:e1:cb:77:b4:88:f7:50:6f:d0:ee:
         73:01:ca:42:a1:65:06:6c:93:68:6e:10:cb:f5:37:aa:0e:65:
         d7:16:e8:44:a4:2f:88:59:ea:99:0f:bc:fe:01:03:34:93:2b:
         9c:fa:18:5e:5d:a4:dd:e0:40:ab:c8:48:cd:54:b2:c7:cd:9e:
         e4:a0:83:a3:77:45:11:91:b4:dd:7a:84:58:ba:92:c8:bd:8a:
         e4:d7:bf:e5:68:d9:a8:a6:6e:81:c1:d7:3f:7f:09:bf:a5:fc:
         b3:08:df:d5:09:f2:83:45:36:b0:7a:c1:d5:b7:df:db:21:fa:
         aa:4d:c8:df:47:2f:d2:ea:ef:b8:32:94:33:2d:42:f2:9d:2c:
         df:b6:74:fc
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDGqXgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
NDRjMGE0NDY0OWI4ZGM1NzRmNjFkNDMxZTU2ZWQyNzNkZGI5ZjYwHhcNMjMwNDI3
MTIwNzI2WhcNMjUwNDI4MTIwNzI2WjAzMTEwLwYDVQQDEyg2MTVmYTQ3MjNlMmIz
NmE2NGQ5ZmNmMjFkZDJiNTgzZjRhNTlkMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj+hwFU9dZZFggHLXwUbaJYh4hjgSBRUieJP+rr//k86AO/eA
f5W2X4KK2MIa0t/hT64b9xeUhB24+U9u62zk+GWzaMZkee9B7g9z7xlM/b9DtI32
xxuWIR9BOtUIXUpJnZKL7yMyNbPxgiEUqY9E0VJF2xfwVcBFAiJGi5US/Y4YxwxJ
jnYSXnt2p0o+6rjnSZXkUncKx3/guPfLKl5OqPZgMWY/agrspWZr2WN/smixVcx+
r6WzgaxWsWRTZxXYDYCdjR5aMfVpUFCSfSzxNkEKbCOyFt0I+I+2Imf1cCsA4I/P
gHWIwlpTnJbVSeqfF8cVOD+jyVsHb3elOYV4/wIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFFfVechbeWxiTWFEY6SY4qK2CmbGMB8GA1UdIwQYMBaAFArSV4LmXx6MGpfe
HlVysDC+Me1sMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTE0NGMw
YTQ0NjQ5YjhkYzU3NGY2MWQ0MzFlNTZlZDI3M2RkYjlmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzNiNDA4YWEtNmQ1YS00YTM5LTkyYjQtMTMyZjk4
ZTUxNzIzLzYxNWZhNDcyM2UyYjM2YTY0ZDlmY2YyMWRkMmI1ODNmNGE1OWQxYTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jM2I0MDhhYS02ZDVhLTRhMzktOTJiNC0xMzJm
OThlNTE3MjMvOTE0NGMwYTQ0NjQ5YjhkYzU3NGY2MWQ0MzFlNTZlZDI3M2RkYjlm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgDCcAAMA0GCSqGSIb3DQEBCwUAA4IBAQCOxwfrKYjJXNV8
MlagFCgw1pZ52W2XQMUDJOgY6e6263b6keL5iPuy77o+fGT2Oq7V6pmRevlh0OVq
4JIrzvfN1Cjt0KW8qo4vcgPNfZrYEMwsqteeDG7oIHXXRbhfucgwV21Eb3kDQMaK
1W4+FQvIjy0YeuHLd7SI91Bv0O5zAcpCoWUGbJNobhDL9TeqDmXXFuhEpC+IWeqZ
D7z+AQM0kyuc+hheXaTd4ECryEjNVLLHzZ7koIOjd0URkbTdeoRYupLIvYrk17/l
aNmopm6Bwdc/fwm/pfyzCN/VCfKDRTawesHVt9/bIfqqTcjfRy/S6u+4MpQzLULy
nSzftnT8
-----END CERTIFICATE-----