Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/0b6d27016076a4e4830151c5c486464fd420c7b3.roa
File:                     0b6d27016076a4e4830151c5c486464fd420c7b3.roa (raw, json)
Hash identifier:          hTRjsPci/ZajDzm8sp+WdZYvRdrQA+K6U0euaLXuzeE=
Subject key identifier:   FB:C0:7F:19:EB:EB:27:83:AF:78:E6:70:F0:2C:A8:3E:36:17:69:81
Certificate issuer:       /CN=993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd
Certificate serial:       19A947
Authority key identifier: AE:C5:6D:08:2E:10:D8:BE:8F:7A:D5:1A:12:68:17:F7:38:FB:93:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/0b6d27016076a4e4830151c5c486464fd420c7b3.roa
Signing time:             Fri 24 Jun 2022 21:40:46 +0000
ROA not before:           Fri 24 Jun 2022 03:00:00 +0000
ROA not after:            Mon 24 Jun 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        2803:d420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681735 (0x19a947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd
        Validity
            Not Before: Jun 24 03:00:00 2022 GMT
            Not After : Jun 24 03:00:00 2024 GMT
        Subject: CN=0b6d27016076a4e4830151c5c486464fd420c7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:3c:ba:a8:72:ba:83:0c:3c:94:72:1b:dc:
                    d6:61:37:58:39:c2:ef:18:a9:fc:2f:cc:db:80:27:
                    b8:a7:29:e1:4b:9d:41:de:d7:b1:5c:72:9f:fd:88:
                    28:f3:96:ef:64:ce:3a:b0:65:1f:77:c1:61:49:b2:
                    83:2c:86:af:2e:89:a9:dc:c0:a2:50:b6:45:72:37:
                    63:97:98:20:d3:83:af:ce:2b:32:c6:77:06:c9:fc:
                    b3:c6:87:53:e3:f8:78:0a:7a:d9:bb:6a:8c:74:93:
                    6f:66:4e:50:89:e6:9d:da:80:05:c8:ca:2d:b7:5c:
                    d9:a9:cb:77:75:7b:16:cd:9c:7a:9e:26:5c:e9:94:
                    c0:e4:ee:17:8c:c7:e1:85:30:8a:07:53:59:ec:44:
                    1d:d3:24:76:56:9e:df:50:79:74:dc:17:e4:04:d8:
                    0f:36:c2:70:cb:8a:fc:95:3e:cf:67:b8:81:bd:45:
                    f5:26:43:60:95:90:fe:12:1f:55:99:a5:3c:55:62:
                    79:64:9b:f4:52:68:6c:f6:c5:27:17:2f:e4:4a:c7:
                    45:4b:16:96:74:7f:fd:8f:31:82:82:b9:f5:25:98:
                    5c:bc:c0:60:8c:79:0e:e0:dd:ed:54:11:62:5f:09:
                    5a:a3:92:3a:0c:99:6a:d7:1a:6d:ff:b3:90:65:87:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C0:7F:19:EB:EB:27:83:AF:78:E6:70:F0:2C:A8:3E:36:17:69:81
            X509v3 Authority Key Identifier:
                keyid:AE:C5:6D:08:2E:10:D8:BE:8F:7A:D5:1A:12:68:17:F7:38:FB:93:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/0b6d27016076a4e4830151c5c486464fd420c7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d420::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:27:29:81:69:20:fc:77:bb:83:8f:c7:1a:41:e9:37:14:
         a0:6e:dc:ae:e8:b7:69:a8:fc:bf:94:f1:ba:63:f7:f9:d4:42:
         79:d9:cc:4e:0c:ab:2e:e6:74:c2:6c:fe:ce:e2:93:7b:3b:58:
         ac:c9:64:bd:00:2c:b0:50:24:74:6b:43:a2:46:0b:fc:a3:e5:
         5f:59:b7:39:79:4d:ed:1e:ab:ba:d6:e0:e1:1e:48:65:c4:9f:
         91:db:90:6a:c2:9a:c4:bb:fc:16:16:50:51:ac:ec:33:a8:55:
         22:92:fa:c4:9f:c3:bd:b5:35:38:a5:cb:58:92:a8:52:a5:95:
         31:84:65:2e:76:e5:c9:59:bd:1b:b8:33:0f:95:28:eb:21:eb:
         1d:f3:a9:14:d1:3e:b8:47:86:1c:88:19:9e:06:3a:8c:8b:91:
         c4:01:1b:c2:d0:39:4c:3f:4f:8d:c7:85:87:ca:e1:c6:48:2d:
         e6:a2:60:8f:10:c8:3c:27:c3:3d:73:f2:67:9f:a2:ed:74:cd:
         dc:ce:1b:97:8f:51:49:78:45:a1:96:3a:f6:0e:07:5e:f5:fe:
         c5:e0:7c:69:05:3b:0b:70:89:b0:b3:cc:c1:8f:da:3e:3e:61:
         70:f3:82:3e:e7:58:a4:06:89:e9:3d:5d:a6:40:bb:bf:1c:ed:
         81:4f:9c:1e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGalHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk5
M2UwZTFlN2FhZjg5ZGFiOGQzYzY1MGY3YTg0ZDdlMWRiMDJhY2QwHhcNMjIwNjI0
MDMwMDAwWhcNMjQwNjI0MDMwMDAwWjAzMTEwLwYDVQQDEygwYjZkMjcwMTYwNzZh
NGU0ODMwMTUxYzVjNDg2NDY0ZmQ0MjBjN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlNQ8uqhyuoMMPJRyG9zWYTdYOcLvGKn8L8zbgCe4pynhS51B
3texXHKf/Ygo85bvZM46sGUfd8FhSbKDLIavLomp3MCiULZFcjdjl5gg04Ovzisy
xncGyfyzxodT4/h4CnrZu2qMdJNvZk5Qiead2oAFyMott1zZqct3dXsWzZx6niZc
6ZTA5O4XjMfhhTCKB1NZ7EQd0yR2Vp7fUHl03BfkBNgPNsJwy4r8lT7PZ7iBvUX1
JkNglZD+Eh9VmaU8VWJ5ZJv0Umhs9sUnFy/kSsdFSxaWdH/9jzGCgrn1JZhcvMBg
jHkO4N3tVBFiXwlao5I6DJlq1xpt/7OQZYeDkwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPvAfxnr6yeDr3jmcPAsqD42F2mBMB8GA1UdIwQYMBaAFK7FbQguENi+j3rV
GhJoF/c4+5NfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTkzZTBl
MWU3YWFmODlkYWI4ZDNjNjUwZjdhODRkN2UxZGIwMmFjZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTYwYTJkMDgtOTdiMS00OTY2LTllNzYtZjgxZDYz
OWNmMGI4LzBiNmQyNzAxNjA3NmE0ZTQ4MzAxNTFjNWM0ODY0NjRmZDQyMGM3YjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNjBhMmQwOC05N2IxLTQ5NjYtOWU3Ni1mODFk
NjM5Y2YwYjgvOTkzZTBlMWU3YWFmODlkYWI4ZDNjNjUwZjdhODRkN2UxZGIwMmFj
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD1CAwDQYJKoZIhvcNAQELBQADggEBAIceJymBaSD8d7uD
j8caQek3FKBu3K7ot2mo/L+U8bpj9/nUQnnZzE4Mqy7mdMJs/s7ik3s7WKzJZL0A
LLBQJHRrQ6JGC/yj5V9Ztzl5Te0eq7rW4OEeSGXEn5HbkGrCmsS7/BYWUFGs7DOo
VSKS+sSfw721NTily1iSqFKllTGEZS525clZvRu4Mw+VKOsh6x3zqRTRPrhHhhyI
GZ4GOoyLkcQBG8LQOUw/T43HhYfK4cZILeaiYI8QyDwnwz1z8mefou10zdzOG5eP
UUl4RaGWOvYOB171/sXgfGkFOwtwibCzzMGP2j4+YXDzgj7nWKQGiek9XaZAu78c
7YFPnB4=
-----END CERTIFICATE-----