Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/43307cdbb38589921080e3d83abe4f93020bf79c.roa
File:                     43307cdbb38589921080e3d83abe4f93020bf79c.roa (raw, json)
Hash identifier:          k/LBBtHsYGYQCafrqBA95ZLO/Wu7tTZarzEzDTbhxXg=
Subject key identifier:   45:98:BC:7C:65:E5:B5:99:06:BA:E9:F8:06:7B:6B:DC:C7:1F:12:ED
Certificate issuer:       /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial:       17FCB0
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/43307cdbb38589921080e3d83abe4f93020bf79c.roa
Signing time:             Wed 16 Aug 2023 13:56:08 +0000
ROA not before:           Tue 15 Aug 2023 13:56:08 +0000
ROA not after:            Sat 16 Aug 2025 13:56:08 +0000
asID:                     272992
IP address blocks:        2803:8b80:3::/48 maxlen: 48
                          2803:8b80:4::/48 maxlen: 48
                          2803:8b80:5::/48 maxlen: 48
                          2803:8b80:6::/48 maxlen: 48
                          2803:8b80:7::/48 maxlen: 48
                          2803:8b80:8::/48 maxlen: 48
                          2803:8b80:9::/48 maxlen: 48
                          2803:8b80:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572016 (0x17fcb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
        Validity
            Not Before: Aug 15 13:56:08 2023 GMT
            Not After : Aug 16 13:56:08 2025 GMT
        Subject: CN=43307cdbb38589921080e3d83abe4f93020bf79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:a0:1f:e0:8e:a8:7c:b1:fa:c4:d9:09:02:
                    e9:5e:9f:b1:84:b0:06:ef:37:5e:ed:4f:ad:35:69:
                    ef:e6:8a:ba:cd:0c:ff:c3:85:50:6c:b6:ac:b0:3b:
                    e3:21:34:5a:33:9c:be:a0:ab:39:58:7b:c0:07:e3:
                    a8:ec:1f:96:01:dd:fc:e7:f2:0f:69:26:3c:13:38:
                    c8:38:a5:58:16:a7:1e:2e:d8:f8:a3:96:c1:b7:0f:
                    7d:c6:aa:2b:fd:b8:27:9a:68:72:29:9f:d2:fd:68:
                    53:83:6c:13:d0:12:53:28:a1:72:f0:0b:23:21:c7:
                    39:7f:d6:44:e4:14:1b:33:f4:71:b7:88:d0:2f:ed:
                    2a:37:8a:6d:3a:12:f1:08:02:1e:1a:57:9a:05:96:
                    68:db:c1:98:e5:f8:65:83:d8:ff:1a:44:1c:a4:92:
                    37:a3:90:cb:f8:6c:b1:79:1d:1c:af:d4:0c:fe:18:
                    73:2b:0a:f8:f3:c3:15:dc:3b:fb:08:1a:10:7a:5d:
                    50:a0:b0:bd:74:c6:f8:c6:81:a0:89:90:2c:78:e3:
                    12:74:b3:c8:8d:ae:c1:03:6b:30:58:ba:29:e6:4e:
                    da:61:e8:80:bf:4d:99:3e:be:27:fb:95:a3:c0:36:
                    0c:0a:0a:ca:99:f6:2e:d8:a3:5b:3b:03:fb:5a:9c:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:98:BC:7C:65:E5:B5:99:06:BA:E9:F8:06:7B:6B:DC:C7:1F:12:ED
            X509v3 Authority Key Identifier:
                keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/43307cdbb38589921080e3d83abe4f93020bf79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b80:3::-2803:8b80:9:ffff:ffff:ffff:ffff:ffff
                  2803:8b80:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:3f:e2:47:11:9f:f3:dc:be:29:68:c4:54:54:89:fa:4d:7a:
         4e:50:46:d2:d1:24:0b:aa:70:aa:c0:6b:a0:af:f5:57:f6:dc:
         50:26:af:53:49:e9:76:67:8b:d4:b7:8c:8c:1c:83:7c:45:0c:
         7a:b3:2d:f4:d3:99:a6:68:07:5d:78:c5:67:74:ff:b0:f0:9f:
         14:20:10:33:8d:60:ed:cd:32:21:46:75:10:a1:e0:ba:a5:9a:
         be:de:4f:d1:96:26:67:87:1c:22:13:d7:68:00:20:d5:c1:9e:
         f6:ee:c6:0e:f6:5d:77:bc:cc:e2:f7:cc:0b:38:65:66:a0:51:
         6a:7d:16:56:0e:fa:d7:50:71:5c:3d:b3:6f:b2:d7:25:77:ea:
         1a:8a:38:79:6e:6c:7e:44:a8:c6:00:de:2e:be:84:b2:d0:e8:
         da:23:3d:08:b2:fd:c6:07:aa:11:ee:7d:ab:c4:56:8c:92:79:
         f5:ad:d2:9a:cf:4f:d0:23:da:95:7d:c5:da:ba:fe:08:a2:ac:
         06:02:ef:71:b8:b6:2f:bf:90:41:0a:f1:27:b0:72:c8:70:ea:
         d4:75:be:ab:5c:9e:b8:55:1e:8e:a1:b0:74:44:9e:3e:86:04:
         44:b5:21:0b:12:a9:76:69:43:9e:03:a0:44:3e:f1:12:a6:85:
         fe:26:e4:e6
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDF/ywMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
NGUwYzdjMTBlM2NhMmU3ZDE5NDVlYWQ2YTllZTRjZDA0NThmNmMwHhcNMjMwODE1
MTM1NjA4WhcNMjUwODE2MTM1NjA4WjAzMTEwLwYDVQQDEyg0MzMwN2NkYmIzODU4
OTkyMTA4MGUzZDgzYWJlNGY5MzAyMGJmNzljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnVOgH+COqHyx+sTZCQLpXp+xhLAG7zde7U+tNWnv5oq6zQz/
w4VQbLassDvjITRaM5y+oKs5WHvAB+Oo7B+WAd385/IPaSY8EzjIOKVYFqceLtj4
o5bBtw99xqor/bgnmmhyKZ/S/WhTg2wT0BJTKKFy8AsjIcc5f9ZE5BQbM/Rxt4jQ
L+0qN4ptOhLxCAIeGleaBZZo28GY5fhlg9j/GkQcpJI3o5DL+GyxeR0cr9QM/hhz
Kwr488MV3Dv7CBoQel1QoLC9dMb4xoGgiZAseOMSdLPIja7BA2swWLop5k7aYeiA
v02ZPr4n+5WjwDYMCgrKmfYu2KNbOwP7WpwAnQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFEWYvHxl5bWZBrrp+AZ7a9zHHxLtMB8GA1UdIwQYMBaAFGHuxv3CzC/O3OD3
LHLHVCyTDfbFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzc0ZTBj
N2MxMGUzY2EyZTdkMTk0NWVhZDZhOWVlNGNkMDQ1OGY2Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDk4NWU2NjctZGE5Zi00ZjE1LWFjZmYtNTlhMzY2
NjAzN2JlLzQzMzA3Y2RiYjM4NTg5OTIxMDgwZTNkODNhYmU0ZjkzMDIwYmY3OWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOTg1ZTY2Ny1kYTlmLTRmMTUtYWNmZi01OWEz
NjY2MDM3YmUvMzc0ZTBjN2MxMGUzY2EyZTdkMTk0NWVhZDZhOWVlNGNkMDQ1OGY2
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwIwQCAAIwHTASAwcAKAOLgAADAwcBKAOLgAAIAwcAKAOLgAAQMA0GCSqGSIb3
DQEBCwUAA4IBAQBaP+JHEZ/z3L4paMRUVIn6TXpOUEbS0SQLqnCqwGugr/VX9txQ
Jq9TSel2Z4vUt4yMHIN8RQx6sy3005mmaAddeMVndP+w8J8UIBAzjWDtzTIhRnUQ
oeC6pZq+3k/RliZnhxwiE9doACDVwZ727sYO9l13vMzi98wLOGVmoFFqfRZWDvrX
UHFcPbNvstcld+oaijh5bmx+RKjGAN4uvoSy0OjaIz0Isv3GB6oR7n2rxFaMknn1
rdKaz0/QI9qVfcXauv4IoqwGAu9xuLYvv5BBCvEnsHLIcOrUdb6rXJ64VR6OobB0
RJ4+hgREtSELEql2aUOeA6BEPvESpoX+JuTm
-----END CERTIFICATE-----