Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/a6bf16db02629e1ee931d9ffe22585fe14ff55e1.roa
File:                     a6bf16db02629e1ee931d9ffe22585fe14ff55e1.roa (raw, json)
Hash identifier:          93AY6MJdC9PufKslikgUl0LMnAtNsuoojpEN+iNLGA8=
Subject key identifier:   AE:16:EB:E4:29:1A:9F:C2:05:90:58:26:D5:4A:95:12:76:F6:CD:A7
Certificate issuer:       /CN=0a9b0c850b0e3d642c9616f419a02c86c57e4ef3
Certificate serial:       092497
Authority key identifier: 41:0E:AC:7C:47:5D:F5:8B:2C:87:92:10:F6:2C:D3:8A:1E:4F:43:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/a6bf16db02629e1ee931d9ffe22585fe14ff55e1.roa
Signing time:             Thu 11 Apr 2024 14:17:00 +0000
ROA not before:           Thu 11 Apr 2024 14:16:59 +0000
ROA not after:            Sat 11 Apr 2026 14:16:59 +0000
asID:                     263751
IP address blocks:        2803:1040::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599191 (0x92497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9b0c850b0e3d642c9616f419a02c86c57e4ef3
        Validity
            Not Before: Apr 11 14:16:59 2024 GMT
            Not After : Apr 11 14:16:59 2026 GMT
        Subject: CN=a6bf16db02629e1ee931d9ffe22585fe14ff55e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:a3:54:b0:44:8b:d8:2d:52:01:38:b4:84:
                    d1:a9:91:61:3e:5a:2e:28:6d:6e:e6:18:db:67:10:
                    74:4f:29:58:1f:bd:99:25:4b:2b:e2:4c:dd:2d:c9:
                    1a:44:11:25:52:a5:26:b1:1d:eb:d3:4f:1d:ba:a9:
                    2b:af:dd:9e:a7:ae:4e:8c:75:34:b7:f6:71:0d:0a:
                    bb:34:17:63:b9:f9:c1:50:bc:4a:e6:75:f8:24:54:
                    80:ed:59:7c:3e:d5:c6:13:49:71:3e:38:57:eb:20:
                    90:e2:45:91:4f:c1:a5:b0:92:27:36:a9:8b:1c:82:
                    57:25:98:71:ee:a6:a3:72:17:7f:7c:27:9f:ba:c9:
                    39:9c:01:5b:08:c9:5d:02:5f:91:9b:57:9d:a3:f5:
                    70:b5:d8:cf:f5:f6:f5:84:07:a6:c1:84:86:c5:4e:
                    c9:95:3a:6a:ab:50:af:c3:8f:18:2c:02:4f:cf:db:
                    99:86:e9:bd:98:92:20:c3:04:1b:05:3d:35:86:00:
                    47:ea:c0:96:f7:22:8a:50:70:de:ab:43:53:bc:d0:
                    b3:58:9d:3d:6f:7b:91:33:15:9f:d1:44:f2:6a:a1:
                    5d:0a:d1:3a:3c:1d:45:07:b1:ea:4e:85:f9:b7:fc:
                    10:5e:7d:b0:33:0b:09:44:36:49:9d:b5:4c:48:ee:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:16:EB:E4:29:1A:9F:C2:05:90:58:26:D5:4A:95:12:76:F6:CD:A7
            X509v3 Authority Key Identifier:
                keyid:41:0E:AC:7C:47:5D:F5:8B:2C:87:92:10:F6:2C:D3:8A:1E:4F:43:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/a6bf16db02629e1ee931d9ffe22585fe14ff55e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1040::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:ad:83:48:bf:bc:0e:7f:8d:74:1c:74:7b:69:2f:cc:ee:
         25:fc:8d:aa:63:dd:ce:07:a5:55:f0:86:df:0f:0b:99:49:7e:
         dd:8b:1a:d8:f3:3b:56:45:4d:99:0a:1a:d6:c5:2d:c4:1f:81:
         27:ee:ad:23:96:2a:20:62:d0:ba:cd:25:a9:ca:f3:ce:18:5d:
         97:ac:01:f0:66:f6:ed:ef:fb:7d:e2:a5:01:55:b5:dc:a2:d8:
         92:b8:ec:2e:9e:c3:58:eb:54:ac:86:1d:82:92:2d:d8:6e:5e:
         b3:f6:6f:95:f4:fa:98:86:b1:bf:0c:2d:02:8b:ee:5c:3d:eb:
         a9:55:c3:4e:03:db:21:91:60:cb:de:dc:f3:1a:29:1a:ad:c4:
         b7:68:00:69:e0:ec:ce:8b:38:fa:68:a1:de:01:d5:81:ad:4b:
         83:85:01:5a:3c:10:b6:19:1d:d0:f0:a4:35:2c:f5:88:19:6b:
         e4:66:c9:c2:f2:d5:3e:a7:6a:18:a1:d2:e0:32:4e:fc:dc:28:
         79:65:8c:cf:76:f0:a6:80:83:83:0f:42:92:62:37:87:27:63:
         c7:72:42:fc:f7:24:9e:cf:43:2b:fe:1a:1b:68:92:61:1a:8e:
         8d:25:84:b3:31:ab:4f:f6:3e:09:9c:e7:82:49:1f:1e:b4:6e:
         a0:26:d6:28
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCSSXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
OWIwYzg1MGIwZTNkNjQyYzk2MTZmNDE5YTAyYzg2YzU3ZTRlZjMwHhcNMjQwNDEx
MTQxNjU5WhcNMjYwNDExMTQxNjU5WjAzMTEwLwYDVQQDEyhhNmJmMTZkYjAyNjI5
ZTFlZTkzMWQ5ZmZlMjI1ODVmZTE0ZmY1NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxEOjVLBEi9gtUgE4tITRqZFhPlouKG1u5hjbZxB0TylYH72Z
JUsr4kzdLckaRBElUqUmsR3r008duqkrr92ep65OjHU0t/ZxDQq7NBdjufnBULxK
5nX4JFSA7Vl8PtXGE0lxPjhX6yCQ4kWRT8GlsJInNqmLHIJXJZhx7qajchd/fCef
usk5nAFbCMldAl+Rm1edo/VwtdjP9fb1hAemwYSGxU7JlTpqq1Cvw48YLAJPz9uZ
hum9mJIgwwQbBT01hgBH6sCW9yKKUHDeq0NTvNCzWJ09b3uRMxWf0UTyaqFdCtE6
PB1FB7HqToX5t/wQXn2wMwsJRDZJnbVMSO79ZQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFK4W6+QpGp/CBZBYJtVKlRJ29s2nMB8GA1UdIwQYMBaAFEEOrHxHXfWLLIeS
EPYs04oeT0PRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGE5YjBj
ODUwYjBlM2Q2NDJjOTYxNmY0MTlhMDJjODZjNTdlNGVmMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGM3NzQxOWMtZjliMS00ODAwLTg0MWMtODkyMTgy
ZDJhMzQ2L2E2YmYxNmRiMDI2MjllMWVlOTMxZDlmZmUyMjU4NWZlMTRmZjU1ZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzc3NDE5Yy1mOWIxLTQ4MDAtODQxYy04OTIx
ODJkMmEzNDYvMGE5YjBjODUwYjBlM2Q2NDJjOTYxNmY0MTlhMDJjODZjNTdlNGVm
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDEEAwDQYJKoZIhvcNAQELBQADggEBAG2wrYNIv7wOf410
HHR7aS/M7iX8japj3c4HpVXwht8PC5lJft2LGtjzO1ZFTZkKGtbFLcQfgSfurSOW
KiBi0LrNJanK884YXZesAfBm9u3v+33ipQFVtdyi2JK47C6ew1jrVKyGHYKSLdhu
XrP2b5X0+piGsb8MLQKL7lw966lVw04D2yGRYMve3PMaKRqtxLdoAGng7M6LOPpo
od4B1YGtS4OFAVo8ELYZHdDwpDUs9YgZa+RmycLy1T6nahih0uAyTvzcKHlljM92
8KaAg4MPQpJiN4cnY8dyQvz3JJ7PQyv+GhtokmEajo0lhLMxq0/2Pgmc54JJHx60
bqAm1ig=
-----END CERTIFICATE-----