Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/14b51ca55bc23fef4a548a26b51b0ddc994a1f54.roa
File:                     14b51ca55bc23fef4a548a26b51b0ddc994a1f54.roa (raw, json)
Hash identifier:          CR28+1LqPmIEI2NGmgIhATXMNdyCwKvymydP6AM0URg=
Subject key identifier:   EB:22:FD:1D:55:53:D9:0B:97:0A:D0:E6:53:17:FB:E8:D9:F8:6F:E8
Certificate issuer:       /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial:       28B92A
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/14b51ca55bc23fef4a548a26b51b0ddc994a1f54.roa
Signing time:             Tue 09 Apr 2024 16:54:00 +0000
ROA not before:           Tue 09 Apr 2024 16:54:00 +0000
ROA not after:            Thu 09 Apr 2026 16:54:00 +0000
asID:                     270009
IP address blocks:        2803:8420::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668842 (0x28b92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Validity
            Not Before: Apr  9 16:54:00 2024 GMT
            Not After : Apr  9 16:54:00 2026 GMT
        Subject: CN=14b51ca55bc23fef4a548a26b51b0ddc994a1f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:80:1a:1f:c2:ef:b7:97:e2:5c:9f:0b:67:
                    92:f6:9c:24:d3:72:10:57:fb:1c:82:8b:59:a0:f0:
                    a6:fd:20:47:f8:38:54:41:72:43:8c:c2:44:fd:d9:
                    7d:1a:f7:5b:c7:f6:2a:7e:67:28:75:a9:8f:62:82:
                    d2:b9:24:d0:1d:b9:a4:1f:65:e2:15:38:c0:f6:1d:
                    8c:2e:87:21:34:ba:37:71:58:0c:3e:1d:61:ad:20:
                    35:f6:20:cc:e9:6a:fc:35:83:d0:cb:9e:5c:2b:9f:
                    c3:2f:f0:64:e1:75:80:3e:f6:24:03:87:d0:bb:c8:
                    5e:6d:3c:18:b3:83:b8:15:33:73:11:8c:5d:a8:8c:
                    6d:ab:cc:06:6b:d0:84:f1:d9:c7:95:4c:87:12:d2:
                    b5:c8:5f:d6:81:3c:a9:74:ef:3e:fc:21:23:58:47:
                    9b:fd:61:b1:63:94:c1:cb:d7:8c:9f:44:ea:a7:21:
                    00:c0:f2:ac:32:ad:1f:47:ed:56:92:7d:8e:54:88:
                    bb:be:97:d3:05:c1:19:34:8f:49:e9:32:84:33:9a:
                    43:d5:e5:d2:21:96:e7:9f:48:61:07:48:05:cb:84:
                    6c:a4:13:75:6b:98:b2:7f:56:85:74:57:35:05:9a:
                    2f:ed:ae:fc:69:f1:92:de:ed:88:ac:b6:17:a8:cb:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:22:FD:1D:55:53:D9:0B:97:0A:D0:E6:53:17:FB:E8:D9:F8:6F:E8
            X509v3 Authority Key Identifier:
                keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/14b51ca55bc23fef4a548a26b51b0ddc994a1f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8420::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:83:88:e1:18:ec:b4:a2:5c:bd:c8:53:3e:35:76:39:46:
         a0:bf:55:f8:9f:bd:05:2b:50:ab:97:6c:8f:e2:2f:3b:d9:3c:
         60:0b:1d:e1:90:c6:55:ef:91:e2:f9:df:39:88:68:bf:e2:83:
         e2:13:6f:2a:1f:52:a4:22:8f:8c:44:e8:0b:90:4f:87:06:28:
         87:76:7a:17:07:ec:73:6d:ab:46:53:e0:13:0f:4b:7d:11:79:
         ed:36:4b:13:27:9b:d1:37:a0:08:e6:96:fe:8e:b3:10:e4:58:
         c3:79:98:4f:ef:9c:2d:1e:c0:78:ae:86:60:11:c6:a1:2e:1f:
         c9:9b:51:a0:27:bb:1f:5c:81:8c:f5:ac:f5:77:90:2d:24:75:
         c5:d6:26:fc:32:1e:62:37:96:24:40:ab:48:4a:04:8d:18:8c:
         6a:da:7c:82:93:2f:15:82:d5:f5:6a:9e:7a:4b:ee:c5:f6:91:
         32:78:31:9b:34:45:cd:5a:15:78:11:1a:c5:18:1a:90:dd:be:
         3d:de:d2:64:f7:10:c7:a9:19:35:b3:2f:98:0b:fa:d0:f1:e0:
         a6:a5:76:81:f0:c9:b8:72:37:e5:55:40:75:ab:4a:9a:e5:9b:
         e1:99:1e:a3:78:a8:fe:6b:b6:64:6b:6c:9a:d2:01:1b:e3:49:
         e0:05:09:c3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDKLkqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
NmNhNDEwZTlkNGQ2NjA5YTk2NjgwOTc2MzEzM2QzNmE5MjJiODIwHhcNMjQwNDA5
MTY1NDAwWhcNMjYwNDA5MTY1NDAwWjAzMTEwLwYDVQQDEygxNGI1MWNhNTViYzIz
ZmVmNGE1NDhhMjZiNTFiMGRkYzk5NGExZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxESAGh/C77eX4lyfC2eS9pwk03IQV/scgotZoPCm/SBH+DhU
QXJDjMJE/dl9Gvdbx/YqfmcodamPYoLSuSTQHbmkH2XiFTjA9h2MLochNLo3cVgM
Ph1hrSA19iDM6Wr8NYPQy55cK5/DL/Bk4XWAPvYkA4fQu8hebTwYs4O4FTNzEYxd
qIxtq8wGa9CE8dnHlUyHEtK1yF/WgTypdO8+/CEjWEeb/WGxY5TBy9eMn0TqpyEA
wPKsMq0fR+1Wkn2OVIi7vpfTBcEZNI9J6TKEM5pD1eXSIZbnn0hhB0gFy4RspBN1
a5iyf1aFdFc1BZov7a78afGS3u2IrLYXqMsadwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOsi/R1VU9kLlwrQ5lMX++jZ+G/oMB8GA1UdIwQYMBaAFGHJZcaafzMxVG7p
0Egpgt9FnHY5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGE2Y2E0
MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI4YmU2ODItZWE1Ni00NzQ3LWExMzItOGI1MDUw
OWY4MDhhLzE0YjUxY2E1NWJjMjNmZWY0YTU0OGEyNmI1MWIwZGRjOTk0YTFmNTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjhiZTY4Mi1lYTU2LTQ3NDctYTEzMi04YjUw
NTA5ZjgwOGEvMGE2Y2E0MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDhCAwDQYJKoZIhvcNAQELBQADggEBAKUGg4jhGOy0oly9
yFM+NXY5RqC/VfifvQUrUKuXbI/iLzvZPGALHeGQxlXvkeL53zmIaL/ig+ITbyof
UqQij4xE6AuQT4cGKId2ehcH7HNtq0ZT4BMPS30Ree02SxMnm9E3oAjmlv6OsxDk
WMN5mE/vnC0ewHiuhmARxqEuH8mbUaAnux9cgYz1rPV3kC0kdcXWJvwyHmI3liRA
q0hKBI0YjGrafIKTLxWC1fVqnnpL7sX2kTJ4MZs0Rc1aFXgRGsUYGpDdvj3e0mT3
EMepGTWzL5gL+tDx4KaldoHwybhyN+VVQHWrSprlm+GZHqN4qP5rtmRrbJrSARvj
SeAFCcM=
-----END CERTIFICATE-----