Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/80229d59811bd67695334dd6f8733cc6d2be4cfb.roa
File:                     80229d59811bd67695334dd6f8733cc6d2be4cfb.roa (raw, json)
Hash identifier:          KPn9SZZpcZiM7VsZ4+tgP903HKosBcVCas1bERdLTFc=
Subject key identifier:   5E:FE:9A:ED:4B:B7:AC:BA:AF:72:54:0B:C5:9D:7A:69:30:80:11:40
Certificate issuer:       /CN=f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2
Certificate serial:       0820CC
Authority key identifier: 19:6C:BD:B0:CE:5D:09:33:D3:BF:00:72:42:68:EB:DF:40:C4:96:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/80229d59811bd67695334dd6f8733cc6d2be4cfb.roa
Signing time:             Mon 31 Jul 2023 16:17:12 +0000
ROA not before:           Sun 30 Jul 2023 16:17:12 +0000
ROA not after:            Thu 31 Jul 2025 16:17:12 +0000
asID:                     14080
IP address blocks:        2803:a810:406::/48 maxlen: 48
                          2803:a810:404::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532684 (0x820cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2
        Validity
            Not Before: Jul 30 16:17:12 2023 GMT
            Not After : Jul 31 16:17:12 2025 GMT
        Subject: CN=80229d59811bd67695334dd6f8733cc6d2be4cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:8c:be:06:4d:97:19:70:fe:80:47:f8:87:
                    f6:24:8c:6a:b9:02:a1:a2:c7:bf:df:b2:45:0e:d8:
                    2f:db:13:65:6c:cd:91:ff:67:5f:7d:f3:b4:f4:d4:
                    73:b8:15:96:73:ed:5d:4c:ff:e0:b1:f1:96:78:f0:
                    c9:47:7d:b4:2a:ba:f3:14:09:ef:cd:b8:dd:d1:a9:
                    0b:77:00:bd:fb:1e:9c:dc:98:66:4b:cc:b1:2e:e5:
                    03:4a:58:5a:d1:4d:88:37:6e:8b:4a:a5:a4:c0:8a:
                    bc:d1:30:7f:51:84:9c:a2:7f:64:5b:91:ac:1b:96:
                    56:6d:20:92:5f:2a:e2:f8:82:45:a4:8f:21:69:15:
                    f8:75:4d:85:fa:24:e4:18:a5:60:c9:ee:1b:2e:50:
                    1e:01:38:f2:14:20:ec:98:4a:42:ef:90:fa:44:bc:
                    08:91:dd:7f:b6:f6:81:2b:6b:b2:06:8a:4a:36:a3:
                    fc:ee:38:d9:4b:2b:e8:7d:24:21:d8:e2:ac:f2:6e:
                    c7:fc:fa:49:c4:ff:2a:e7:54:4d:79:28:65:75:ae:
                    ed:24:7f:ca:46:0c:85:e8:28:4c:7d:74:0b:d1:6e:
                    e8:14:c9:d2:04:3f:03:82:e0:05:19:2b:5c:7b:83:
                    77:ba:52:db:56:b2:71:d1:c0:73:70:d1:3a:87:74:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FE:9A:ED:4B:B7:AC:BA:AF:72:54:0B:C5:9D:7A:69:30:80:11:40
            X509v3 Authority Key Identifier:
                keyid:19:6C:BD:B0:CE:5D:09:33:D3:BF:00:72:42:68:EB:DF:40:C4:96:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/80229d59811bd67695334dd6f8733cc6d2be4cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a810:404::/48
                  2803:a810:406::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:57:66:b9:35:fb:d0:b7:d2:9a:5b:89:a6:c3:1d:07:f5:
         5c:24:1c:11:ea:3d:cf:3e:24:1e:55:e5:5b:de:16:dd:1f:a4:
         77:cb:12:5d:36:f6:f8:8c:fe:0c:01:81:9d:fb:c1:8d:41:6b:
         ce:ed:cf:3f:6b:c7:fc:7d:02:bd:e1:0c:b7:1f:91:cb:bd:70:
         e1:db:a3:24:9e:f9:d9:d3:ee:1c:31:d8:9a:ae:9a:fe:b6:e8:
         ec:2d:f1:39:33:a1:62:5d:05:c7:07:75:d5:11:f7:7b:64:83:
         98:2b:dc:6d:a3:92:4e:d4:f1:71:d2:2b:79:8f:aa:32:48:d8:
         23:67:9b:79:cc:60:16:5f:ff:a3:58:f8:33:9e:4d:73:b7:bc:
         a2:38:40:eb:bb:a1:3c:ec:52:f8:6c:9a:e2:d9:3e:dd:36:e1:
         90:8f:1f:a7:77:43:a3:79:96:0c:2e:1f:f6:26:a6:86:3e:7c:
         ed:20:69:ce:27:be:a5:9b:58:01:36:fb:5d:ff:30:0a:7a:17:
         6b:4c:26:30:43:1e:4c:63:9a:08:67:9e:41:b1:1f:b0:fb:28:
         fb:83:4c:3b:0f:91:2c:bf:b6:fd:50:e2:0e:49:35:96:01:44:
         35:48:bd:81:a8:4a:6c:32:23:95:ea:7e:7c:23:bc:2e:0d:b7:
         0c:b2:1c:f3
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDCCDMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY2
MzNiOTJkZmNjN2Q5ZDMyNDVmMWNlZjJkYmE4MDZjN2FiMDFkZDIwHhcNMjMwNzMw
MTYxNzEyWhcNMjUwNzMxMTYxNzEyWjAzMTEwLwYDVQQDEyg4MDIyOWQ1OTgxMWJk
Njc2OTUzMzRkZDZmODczM2NjNmQyYmU0Y2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjWeMvgZNlxlw/oBH+If2JIxquQKhose/37JFDtgv2xNlbM2R
/2dfffO09NRzuBWWc+1dTP/gsfGWePDJR320KrrzFAnvzbjd0akLdwC9+x6c3Jhm
S8yxLuUDSlha0U2IN26LSqWkwIq80TB/UYScon9kW5GsG5ZWbSCSXyri+IJFpI8h
aRX4dU2F+iTkGKVgye4bLlAeATjyFCDsmEpC75D6RLwIkd1/tvaBK2uyBopKNqP8
7jjZSyvofSQh2OKs8m7H/PpJxP8q51RNeShlda7tJH/KRgyF6ChMfXQL0W7oFMnS
BD8DguAFGStce4N3ulLbVrJx0cBzcNE6h3SKJwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFF7+mu1Lt6y6r3JUC8WdemkwgBFAMB8GA1UdIwQYMBaAFBlsvbDOXQkz078A
ckJo699AxJaMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjYzM2I5
MmRmY2M3ZDlkMzI0NWYxY2VmMmRiYTgwNmM3YWIwMWRkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjBmYmI5N2UtMzhkZS00NmQwLWIyODEtNGQwMzQz
N2YyNDI0LzgwMjI5ZDU5ODExYmQ2NzY5NTMzNGRkNmY4NzMzY2M2ZDJiZTRjZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMGZiYjk3ZS0zOGRlLTQ2ZDAtYjI4MS00ZDAz
NDM3ZjI0MjQvZjYzM2I5MmRmY2M3ZDlkMzI0NWYxY2VmMmRiYTgwNmM3YWIwMWRk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAIwEgMHACgDqBAEBAMHACgDqBAEBjANBgkqhkiG9w0BAQsFAAOCAQEA
FxpXZrk1+9C30ppbiabDHQf1XCQcEeo9zz4kHlXlW94W3R+kd8sSXTb2+Iz+DAGB
nfvBjUFrzu3PP2vH/H0CveEMtx+Ry71w4dujJJ752dPuHDHYmq6a/rbo7C3xOTOh
Yl0Fxwd11RH3e2SDmCvcbaOSTtTxcdIreY+qMkjYI2ebecxgFl//o1j4M55Nc7e8
ojhA67uhPOxS+Gya4tk+3TbhkI8fp3dDo3mWDC4f9iamhj587SBpzie+pZtYATb7
Xf8wCnoXa0wmMEMeTGOaCGeeQbEfsPso+4NMOw+RLL+2/VDiDkk1lgFENUi9gahK
bDIjlep+fCO8Lg23DLIc8w==
-----END CERTIFICATE-----