Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/d40c05c3c9df4acbcb3bd0ede8fd223fc38c449d.roa
File:                     d40c05c3c9df4acbcb3bd0ede8fd223fc38c449d.roa (raw, json)
Hash identifier:          USnOs44lYU2kv2R/DI05F/Ly7efQYH4yHRnHviJzxoQ=
Subject key identifier:   28:FC:3C:89:B8:6B:33:8F:E9:48:F2:3D:8D:1F:BE:8C:3A:D8:4F:55
Certificate issuer:       /CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
Certificate serial:       1A67
Authority key identifier: 07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/d40c05c3c9df4acbcb3bd0ede8fd223fc38c449d.roa
Signing time:             Tue 25 Apr 2023 20:16:37 +0000
ROA not before:           Mon 24 Apr 2023 20:16:37 +0000
ROA not after:            Fri 25 Apr 2025 20:16:37 +0000
asID:                     270078
IP address blocks:        2803:4be0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6759 (0x1a67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
        Validity
            Not Before: Apr 24 20:16:37 2023 GMT
            Not After : Apr 25 20:16:37 2025 GMT
        Subject: CN=d40c05c3c9df4acbcb3bd0ede8fd223fc38c449d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:cc:dd:04:4e:2f:54:0e:55:93:56:6d:ec:
                    dd:e8:d3:b7:18:ff:fd:3a:69:d6:a6:73:1e:2e:49:
                    41:e4:0c:34:c2:ec:5e:ee:56:48:af:84:fc:ca:5a:
                    e0:16:db:52:de:b5:84:62:f9:7b:b8:11:5a:f2:90:
                    32:71:a4:d3:ae:f0:85:e2:40:67:0c:fe:69:9c:eb:
                    aa:2b:30:38:c1:f9:db:d6:4a:97:0a:68:67:e8:8c:
                    eb:f7:68:85:48:67:ca:79:f2:df:5d:10:58:9c:a7:
                    b5:d4:12:66:cb:62:c2:c1:93:02:03:ae:d7:fa:ce:
                    0a:ab:c0:fb:eb:c1:45:38:80:f1:f1:29:01:e8:01:
                    43:8e:4d:c4:ba:12:70:38:1e:a3:1e:d4:1f:ee:6a:
                    85:26:a3:34:5f:a3:a0:62:61:c1:1a:f8:94:8d:be:
                    6e:b1:34:17:f4:d1:20:cf:9d:c8:a8:0a:70:81:0f:
                    c6:95:8f:f5:34:c1:e4:95:95:ca:f6:ea:15:86:22:
                    35:c0:e5:1e:37:55:ea:25:51:aa:37:b8:3a:66:8f:
                    e9:96:b6:99:b4:52:81:19:ff:e3:6c:2d:93:ee:0b:
                    91:da:11:47:09:61:d5:56:2a:d0:2a:74:93:3e:02:
                    ed:8a:ab:82:38:9c:18:42:dd:a4:00:1b:dc:46:f9:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FC:3C:89:B8:6B:33:8F:E9:48:F2:3D:8D:1F:BE:8C:3A:D8:4F:55
            X509v3 Authority Key Identifier:
                keyid:07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/d40c05c3c9df4acbcb3bd0ede8fd223fc38c449d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/c958d4e8b3e978aac802f96e9b7d380f9995c148.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:47:f3:ad:7e:45:2f:69:1d:0c:cc:5a:cd:18:e5:46:d6:
         53:44:e9:54:bf:a7:89:9f:b3:a2:37:2c:1e:f2:fc:96:4c:1a:
         79:0d:7b:06:58:e7:e1:91:1b:87:e0:14:e2:e7:e1:81:71:1d:
         c0:96:30:c2:30:25:31:04:36:48:80:d1:05:e4:e8:64:1c:01:
         71:91:4d:21:d3:e8:c6:96:97:80:5e:2a:4e:e0:d9:59:c3:7c:
         3a:83:2b:d4:85:4c:c5:22:3e:85:7e:c7:34:d1:5b:a4:70:c8:
         c5:2a:7b:04:12:8e:38:60:d2:ce:e6:fc:a5:af:73:0e:85:ec:
         5e:94:53:e0:83:dd:82:f1:47:9f:0c:41:0a:42:e5:bc:ea:0c:
         ea:42:92:73:10:91:ea:dc:cd:58:bb:7b:bf:79:c8:de:d9:f9:
         a7:df:79:53:f4:35:ea:ce:a6:df:74:8c:e0:8f:30:55:19:77:
         00:8e:2f:23:5e:08:2f:a2:b5:39:6f:a2:65:bc:7f:68:84:20:
         6e:78:57:ac:87:8e:f3:d0:30:58:82:56:d4:43:6a:95:b8:f2:
         33:b3:70:7f:5f:30:96:39:f7:6e:77:d8:7e:eb:09:9d:f5:98:
         16:bc:1e:30:e1:ca:5a:8e:f4:00:6c:16:c5:ed:fd:86:fe:33:
         85:70:82:b8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICGmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYzk1
OGQ0ZThiM2U5NzhhYWM4MDJmOTZlOWI3ZDM4MGY5OTk1YzE0ODAeFw0yMzA0MjQy
MDE2MzdaFw0yNTA0MjUyMDE2MzdaMDMxMTAvBgNVBAMTKGQ0MGMwNWMzYzlkZjRh
Y2JjYjNiZDBlZGU4ZmQyMjNmYzM4YzQ0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2/8zdBE4vVA5Vk1Zt7N3o07cY//06adamcx4uSUHkDDTC7F7u
VkivhPzKWuAW21LetYRi+Xu4EVrykDJxpNOu8IXiQGcM/mmc66orMDjB+dvWSpcK
aGfojOv3aIVIZ8p58t9dEFicp7XUEmbLYsLBkwIDrtf6zgqrwPvrwUU4gPHxKQHo
AUOOTcS6EnA4HqMe1B/uaoUmozRfo6BiYcEa+JSNvm6xNBf00SDPncioCnCBD8aV
j/U0weSVlcr26hWGIjXA5R43VeolUao3uDpmj+mWtpm0UoEZ/+NsLZPuC5HaEUcJ
YdVWKtAqdJM+Au2Kq4I4nBhC3aQAG9xG+dfTAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUKPw8ibhrM4/pSPI9jR++jDrYT1UwHwYDVR0jBBgwFoAUB82oCpBv8qriaWUF
IXhebUT5PFowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9jOTU4ZDRl
OGIzZTk3OGFhYzgwMmY5NmU5YjdkMzgwZjk5OTVjMTQ4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mOGRlZTI2MS03YmZmLTRhOWUtOTk3Yy02YmEzNTE4
ODIzMWYvZDQwYzA1YzNjOWRmNGFjYmNiM2JkMGVkZThmZDIyM2ZjMzhjNDQ5ZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2Y4ZGVlMjYxLTdiZmYtNGE5ZS05OTdjLTZiYTM1
MTg4MjMxZi9jOTU4ZDRlOGIzZTk3OGFhYzgwMmY5NmU5YjdkMzgwZjk5OTVjMTQ4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKANL4DANBgkqhkiG9w0BAQsFAAOCAQEAN05H861+RS9pHQzM
Ws0Y5UbWU0TpVL+niZ+zojcsHvL8lkwaeQ17Bljn4ZEbh+AU4ufhgXEdwJYwwjAl
MQQ2SIDRBeToZBwBcZFNIdPoxpaXgF4qTuDZWcN8OoMr1IVMxSI+hX7HNNFbpHDI
xSp7BBKOOGDSzub8pa9zDoXsXpRT4IPdgvFHnwxBCkLlvOoM6kKScxCR6tzNWLt7
v3nI3tn5p995U/Q16s6m33SM4I8wVRl3AI4vI14IL6K1OW+iZbx/aIQgbnhXrIeO
89AwWIJW1ENqlbjyM7Nwf18wljn3bnfYfusJnfWYFrweMOHKWo70AGwWxe39hv4z
hXCCuA==
-----END CERTIFICATE-----