Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/edafecf5d86a2b9c39904ae4a58fad8f95dd2de3.roa
File:                     edafecf5d86a2b9c39904ae4a58fad8f95dd2de3.roa (raw, json)
Hash identifier:          0ilmoab45T33oHsPGBiglO6V0HqXGLmWmRG76gt6cBA=
Subject key identifier:   40:F1:2A:E6:77:C9:E0:01:CD:A1:F1:20:77:55:58:2F:B3:84:74:57
Certificate issuer:       /CN=f8d93c5107f48e2fc590fd12241c7c6d150bba57
Certificate serial:       0729B3
Authority key identifier: D4:98:04:F6:EA:16:9D:CA:96:36:31:01:62:EC:C0:42:D5:1F:A3:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8d93c5107f48e2fc590fd12241c7c6d150bba57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/edafecf5d86a2b9c39904ae4a58fad8f95dd2de3.roa
Signing time:             Wed 31 Jan 2024 02:44:57 +0000
ROA not before:           Wed 31 Jan 2024 02:44:57 +0000
ROA not after:            Sat 31 Jan 2026 02:44:57 +0000
asID:                     272869
IP address blocks:        2803:7290::/40 maxlen: 40
                          2803:7290:100::/40 maxlen: 40
                          2803:7290:200::/40 maxlen: 40
                          2803:7290:300::/40 maxlen: 40
                          2803:7290:400::/40 maxlen: 40
                          2803:7290:500::/40 maxlen: 40
                          2803:7290:600::/40 maxlen: 40
                          2803:7290:700::/40 maxlen: 40
                          2803:7290:800::/40 maxlen: 40
                          2803:7290:900::/40 maxlen: 40
                          2803:7290:a00::/40 maxlen: 40
                          2803:7290:b00::/40 maxlen: 40
                          2803:7290:c00::/40 maxlen: 40
                          2803:7290:d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469427 (0x729b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d93c5107f48e2fc590fd12241c7c6d150bba57
        Validity
            Not Before: Jan 31 02:44:57 2024 GMT
            Not After : Jan 31 02:44:57 2026 GMT
        Subject: CN=edafecf5d86a2b9c39904ae4a58fad8f95dd2de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:ff:5f:16:ae:ec:e5:b2:a4:d5:a7:4e:1c:
                    c5:36:57:f5:0d:ad:bf:f4:cc:de:80:de:48:a1:d9:
                    1c:e7:9c:ff:cd:14:87:6f:00:39:db:47:9b:dc:b4:
                    c9:29:63:ba:22:e9:03:98:4c:6a:a2:bd:b5:24:de:
                    d4:2a:e0:6a:c8:21:ee:94:7b:78:4d:a9:f0:8e:c1:
                    11:f6:f5:4a:44:69:1e:fc:97:3a:9d:9c:0d:5b:5e:
                    85:8c:42:3e:dc:26:f2:8b:62:47:4e:d3:67:ae:50:
                    6d:ce:f6:16:9b:ca:58:98:cc:4e:9b:20:83:27:11:
                    52:1f:e2:6d:6c:4e:40:fe:12:65:7d:17:30:a1:2c:
                    d2:68:1b:30:5d:c5:d9:3e:23:41:9a:18:aa:db:69:
                    0b:18:05:f1:f8:b9:4f:88:68:64:0e:e5:b6:20:3c:
                    aa:cb:66:11:b5:75:08:0b:3c:8a:bc:ee:a6:5f:b0:
                    18:2e:45:75:64:09:67:87:37:55:d9:e3:f1:4c:f3:
                    e8:37:d6:ee:d7:90:c9:a1:a2:a9:f3:83:9e:8f:cd:
                    a4:14:0b:77:56:77:69:29:ec:53:78:9c:de:5b:0f:
                    7e:e4:5e:7b:59:1e:ec:da:4d:57:03:3b:4d:a9:0f:
                    96:73:13:6b:24:20:24:f2:04:07:6c:b5:cc:46:32:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F1:2A:E6:77:C9:E0:01:CD:A1:F1:20:77:55:58:2F:B3:84:74:57
            X509v3 Authority Key Identifier:
                keyid:D4:98:04:F6:EA:16:9D:CA:96:36:31:01:62:EC:C0:42:D5:1F:A3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8d93c5107f48e2fc590fd12241c7c6d150bba57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/edafecf5d86a2b9c39904ae4a58fad8f95dd2de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/f8d93c5107f48e2fc590fd12241c7c6d150bba57.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290::-2803:7290:dff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         38:73:74:fa:a3:02:40:45:70:72:97:d5:4e:a4:93:04:4d:e5:
         ae:c5:00:6e:0e:2d:ba:e5:76:e8:00:e1:33:b9:77:d3:4e:8d:
         30:bc:bd:d6:ec:68:cd:0e:12:43:9e:45:d3:2e:6f:4b:af:87:
         2a:fd:41:91:7f:52:8f:21:db:c4:ab:89:e8:7f:5c:43:c2:e9:
         78:0f:21:b3:2a:2d:96:7f:ca:4e:2d:d0:4c:3b:d4:98:20:40:
         3d:6d:aa:03:0a:b6:97:76:41:dd:b4:21:42:fa:25:98:a8:4e:
         5e:7a:ac:4d:74:35:6b:a0:c8:a8:28:8e:b7:02:b3:d3:3c:1f:
         8c:2e:a0:b1:3c:55:e3:8f:f4:7e:2c:38:b6:99:c9:77:ec:d3:
         fe:74:09:fc:c5:cc:94:65:50:e7:3a:b0:88:05:bb:6c:30:3f:
         45:8f:64:aa:2e:58:14:bd:f3:3f:46:96:e6:da:62:1c:67:3e:
         96:6a:e7:bb:35:99:40:6f:a3:ed:14:97:17:f3:3f:98:8e:46:
         9a:22:d0:59:19:ba:80:fb:59:73:7f:70:2e:8a:ee:91:d9:f2:
         66:19:da:e0:2c:f6:eb:03:08:f8:11:94:41:5a:84:21:b7:9b:
         fe:f4:bd:0b:e6:55:71:8e:1e:2d:08:1d:36:5e:fd:2c:cc:61:
         b8:01:2b:e2
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIDBymzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
ZDkzYzUxMDdmNDhlMmZjNTkwZmQxMjI0MWM3YzZkMTUwYmJhNTcwHhcNMjQwMTMx
MDI0NDU3WhcNMjYwMTMxMDI0NDU3WjAzMTEwLwYDVQQDEyhlZGFmZWNmNWQ4NmEy
YjljMzk5MDRhZTRhNThmYWQ4Zjk1ZGQyZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuAD/Xxau7OWypNWnThzFNlf1Da2/9MzegN5Iodkc55z/zRSH
bwA520eb3LTJKWO6IukDmExqor21JN7UKuBqyCHulHt4TanwjsER9vVKRGke/Jc6
nZwNW16FjEI+3Cbyi2JHTtNnrlBtzvYWm8pYmMxOmyCDJxFSH+JtbE5A/hJlfRcw
oSzSaBswXcXZPiNBmhiq22kLGAXx+LlPiGhkDuW2IDyqy2YRtXUICzyKvO6mX7AY
LkV1ZAlnhzdV2ePxTPPoN9bu15DJoaKp84Oej82kFAt3VndpKexTeJzeWw9+5F57
WR7s2k1XAztNqQ+WcxNrJCAk8gQHbLXMRjKALwIDAQABo4ICZjCCAmIwHQYDVR0O
BBYEFEDxKuZ3yeABzaHxIHdVWC+zhHRXMB8GA1UdIwQYMBaAFNSYBPbqFp3KljYx
AWLswELVH6PEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjhkOTNj
NTEwN2Y0OGUyZmM1OTBmZDEyMjQxYzdjNmQxNTBiYmE1Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTdiZDQ2MmQtZWZkMi00NWI3LWI1YzctZDc1OTg4
NWY1NDI4L2VkYWZlY2Y1ZDg2YTJiOWMzOTkwNGFlNGE1OGZhZDhmOTVkZDJkZTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85N2JkNDYyZC1lZmQyLTQ1YjctYjVjNy1kNzU5
ODg1ZjU0MjgvZjhkOTNjNTEwN2Y0OGUyZmM1OTBmZDEyMjQxYzdjNmQxNTBiYmE1
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQb
MBkwFwQCAAIwETAPAwUEKANykAMGASgDcpAMMA0GCSqGSIb3DQEBCwUAA4IBAQA4
c3T6owJARXByl9VOpJMETeWuxQBuDi265XboAOEzuXfTTo0wvL3W7GjNDhJDnkXT
Lm9Lr4cq/UGRf1KPIdvEq4nof1xDwul4DyGzKi2Wf8pOLdBMO9SYIEA9baoDCraX
dkHdtCFC+iWYqE5eeqxNdDVroMioKI63ArPTPB+MLqCxPFXjj/R+LDi2mcl37NP+
dAn8xcyUZVDnOrCIBbtsMD9Fj2SqLlgUvfM/Rpbm2mIcZz6Waue7NZlAb6PtFJcX
8z+YjkaaItBZGbqA+1lzf3Auiu6R2fJmGdrgLPbrAwj4EZRBWoQht5v+9L0L5lVx
jh4tCB02Xv0szGG4ASvi
-----END CERTIFICATE-----