Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/7ef1ba182661d4fadf7a8de1c8d6f91d0ad852a4.roa
File:                     7ef1ba182661d4fadf7a8de1c8d6f91d0ad852a4.roa (raw, json)
Hash identifier:          i5719EV5PkD3DYYk+E+3OgKvgHOzCdPcdijEAXsrNXQ=
Subject key identifier:   77:8B:81:3E:3B:C0:95:D4:19:4B:74:86:06:24:D6:13:26:05:F8:6E
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0BFC86
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/7ef1ba182661d4fadf7a8de1c8d6f91d0ad852a4.roa
Signing time:             Tue 03 Oct 2023 15:38:58 +0000
ROA not before:           Mon 02 Oct 2023 15:38:58 +0000
ROA not after:            Fri 03 Oct 2025 16:38:58 +0000
asID:                     272150
IP address blocks:        2803:6020::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785542 (0xbfc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  2 15:38:58 2023 GMT
            Not After : Oct  3 16:38:58 2025 GMT
        Subject: CN=7ef1ba182661d4fadf7a8de1c8d6f91d0ad852a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:05:2c:1e:ee:a4:06:33:23:21:cc:c2:67:
                    75:3e:ec:c9:85:a2:0a:12:a1:5d:83:2a:4f:25:b8:
                    b9:a3:4d:9f:32:97:1e:a3:5c:a1:ff:5b:9d:76:70:
                    64:37:0c:f0:c9:a0:1c:30:bf:40:e5:5b:64:e9:b4:
                    42:f3:dc:94:eb:99:71:ba:4c:f5:e8:41:d8:cb:15:
                    d1:56:21:06:cd:e4:2c:97:d2:64:59:0a:01:d4:08:
                    89:6b:ba:44:81:97:03:11:0e:e7:43:ed:57:f6:47:
                    25:db:b5:22:53:29:e1:7f:02:70:f8:50:24:ab:ae:
                    8e:03:fc:79:ba:7e:1e:bb:eb:9f:56:a9:87:4b:9f:
                    ea:53:b3:50:66:5e:26:35:63:76:62:49:38:64:3d:
                    3f:a9:a1:a4:82:6e:91:df:54:8f:2b:e8:32:41:cb:
                    fb:66:f0:de:60:a6:68:71:51:fe:91:57:fb:9a:e6:
                    e9:b2:28:8e:ae:68:a0:96:25:22:e0:29:d7:0f:17:
                    5b:18:49:11:55:75:cc:c7:82:db:18:f0:1b:90:a4:
                    54:08:17:bb:26:f0:7d:4c:f4:34:fe:9b:89:88:b8:
                    c0:27:67:79:5e:a2:82:0e:c6:8f:21:50:57:49:4f:
                    72:2d:f6:13:a3:0c:04:6c:4f:8e:3b:4d:9b:f3:7b:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8B:81:3E:3B:C0:95:D4:19:4B:74:86:06:24:D6:13:26:05:F8:6E
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/7ef1ba182661d4fadf7a8de1c8d6f91d0ad852a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:70:b3:95:b9:f5:d7:f9:a0:3e:73:69:bd:a8:af:db:89:
         8d:a0:7c:eb:7e:bb:4a:56:47:26:05:5b:81:ca:3d:dc:a8:c4:
         cb:d1:f3:78:ee:9a:8c:c1:dd:db:d0:37:ee:76:73:a6:fa:b3:
         f9:81:47:98:56:6c:e9:56:13:16:f1:96:46:1a:a4:ba:68:a5:
         44:cd:ce:6a:3d:77:42:f7:b0:5c:93:f3:67:fb:cc:a9:1e:4b:
         1b:cc:88:9d:e9:b0:d8:47:4d:1b:32:f9:fa:26:fd:29:fa:f5:
         13:10:ef:76:0d:2e:79:f8:d1:09:00:45:f2:e7:62:5a:4a:34:
         bd:3b:8e:d6:fb:13:cb:00:30:db:9b:07:9b:19:01:62:13:8f:
         43:2b:d3:48:da:78:28:53:e2:7d:e8:d4:4b:51:e1:ab:46:ed:
         0c:ac:3c:2d:b1:8c:83:6e:5b:45:49:f7:ae:96:cd:5e:d1:09:
         7d:96:0c:98:1e:c0:71:bf:bd:8f:6a:8d:2f:0c:95:b5:23:19:
         fe:5e:a9:48:ba:11:81:a1:4a:12:64:07:ef:b9:f1:62:32:d8:
         13:bf:d3:6b:aa:10:0b:0f:51:29:6c:7d:8c:7f:86:8e:45:cf:
         a9:61:98:91:45:b4:f9:3e:37:c0:82:5b:78:1b:3c:f6:65:8b:
         d3:01:ba:5f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDC/yGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
M2NhYjg4ODdiODBhMWJlYWZiMjNmNDU1ZDdkODQ1OGM4YzFjNWEwHhcNMjMxMDAy
MTUzODU4WhcNMjUxMDAzMTYzODU4WjAzMTEwLwYDVQQDEyg3ZWYxYmExODI2NjFk
NGZhZGY3YThkZTFjOGQ2ZjkxZDBhZDg1MmE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgT0FLB7upAYzIyHMwmd1PuzJhaIKEqFdgypPJbi5o02fMpce
o1yh/1uddnBkNwzwyaAcML9A5Vtk6bRC89yU65lxukz16EHYyxXRViEGzeQsl9Jk
WQoB1AiJa7pEgZcDEQ7nQ+1X9kcl27UiUynhfwJw+FAkq66OA/x5un4eu+ufVqmH
S5/qU7NQZl4mNWN2Ykk4ZD0/qaGkgm6R31SPK+gyQcv7ZvDeYKZocVH+kVf7mubp
siiOrmigliUi4CnXDxdbGEkRVXXMx4LbGPAbkKRUCBe7JvB9TPQ0/puJiLjAJ2d5
XqKCDsaPIVBXSU9yLfYTowwEbE+OO02b83upywIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHeLgT47wJXUGUt0hgYk1hMmBfhuMB8GA1UdIwQYMBaAFEBqfmLR5HcP4GGq
m2KC6PCzaQFaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDYzY2Fi
ODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTEzNGFhMGQtMzQ5Ny00ZTUxLThhNTgtNTJlYTgz
YzgxMTY5LzdlZjFiYTE4MjY2MWQ0ZmFkZjdhOGRlMWM4ZDZmOTFkMGFkODUyYTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTM0YWEwZC0zNDk3LTRlNTEtOGE1OC01MmVh
ODNjODExNjkvNDYzY2FiODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDYCAwDQYJKoZIhvcNAQELBQADggEBAFgtcLOVufXX+aA+
c2m9qK/biY2gfOt+u0pWRyYFW4HKPdyoxMvR83jumozB3dvQN+52c6b6s/mBR5hW
bOlWExbxlkYapLpopUTNzmo9d0L3sFyT82f7zKkeSxvMiJ3psNhHTRsy+fom/Sn6
9RMQ73YNLnn40QkARfLnYlpKNL07jtb7E8sAMNubB5sZAWITj0Mr00jaeChT4n3o
1EtR4atG7QysPC2xjINuW0VJ966WzV7RCX2WDJgewHG/vY9qjS8MlbUjGf5eqUi6
EYGhShJkB++58WIy2BO/02uqEAsPUSlsfYx/ho5Fz6lhmJFFtPk+N8CCW3gbPPZl
i9MBul8=
-----END CERTIFICATE-----