Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/f5b9f6bbad0668c2c6916defb3c2be4533bd5676.roa
File:                     f5b9f6bbad0668c2c6916defb3c2be4533bd5676.roa (raw, json)
Hash identifier:          YcZ4p99CBo11esOoSSK5jdfPnakZSHww9LChZV/Ptdw=
Subject key identifier:   0E:5C:0D:04:06:24:90:AF:0B:5C:9E:BE:14:7C:49:9C:60:AA:4C:06
Certificate issuer:       /CN=3fbf313036c5d4fb6af8fd241fb44b5803bc64b0
Certificate serial:       CBE4
Authority key identifier: 9B:CA:B7:DD:8E:3C:CD:88:68:2E:1F:5F:0D:59:7E:C0:A1:BC:42:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fbf313036c5d4fb6af8fd241fb44b5803bc64b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/f5b9f6bbad0668c2c6916defb3c2be4533bd5676.roa
Signing time:             Wed 30 Aug 2023 16:19:21 +0000
ROA not before:           Tue 29 Aug 2023 16:19:21 +0000
ROA not after:            Sat 30 Aug 2025 16:19:21 +0000
asID:                     273048
IP address blocks:        2803:5b90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52196 (0xcbe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fbf313036c5d4fb6af8fd241fb44b5803bc64b0
        Validity
            Not Before: Aug 29 16:19:21 2023 GMT
            Not After : Aug 30 16:19:21 2025 GMT
        Subject: CN=f5b9f6bbad0668c2c6916defb3c2be4533bd5676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:ec:11:0c:cf:ba:5f:ed:7c:c2:21:66:66:
                    ad:30:5d:e2:a3:f5:86:d1:91:af:8f:1f:81:fc:57:
                    c3:c6:44:00:a8:23:20:2e:30:94:9c:72:17:a2:75:
                    b2:96:a4:5e:2d:4f:5d:94:9a:e5:a1:c7:69:86:d2:
                    a5:53:ca:19:4a:83:0d:15:66:be:19:b6:a4:5e:1f:
                    73:96:f6:f3:80:c2:67:16:57:6e:7a:6a:e2:e4:74:
                    20:c4:96:8a:6a:5b:44:59:ed:8f:cf:b8:87:a7:6f:
                    76:96:34:06:1d:ad:60:44:02:e7:2c:5a:0c:35:9a:
                    e8:87:97:af:1e:ce:f5:c1:f1:94:5e:09:a7:27:73:
                    95:77:fc:3b:89:50:26:ae:c4:96:8c:ae:32:b0:06:
                    79:bd:bc:50:2e:f6:d8:f9:d2:7c:3e:86:bf:16:d8:
                    ff:a4:24:93:05:69:32:8f:ea:17:0d:f9:97:3b:06:
                    94:f7:51:ce:b7:40:9b:79:c7:4b:a2:9b:8a:ce:b0:
                    ac:dc:81:c7:79:f2:92:1c:f6:79:1b:02:a5:70:1a:
                    55:7d:6b:f3:a9:51:a3:ee:f3:f4:0f:1f:89:2e:79:
                    d1:86:c1:35:44:d6:6f:6e:68:f9:a7:23:f2:21:c7:
                    88:22:9f:4a:01:b9:6c:00:1e:a0:fe:92:e8:64:23:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5C:0D:04:06:24:90:AF:0B:5C:9E:BE:14:7C:49:9C:60:AA:4C:06
            X509v3 Authority Key Identifier:
                keyid:9B:CA:B7:DD:8E:3C:CD:88:68:2E:1F:5F:0D:59:7E:C0:A1:BC:42:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fbf313036c5d4fb6af8fd241fb44b5803bc64b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/f5b9f6bbad0668c2c6916defb3c2be4533bd5676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/3fbf313036c5d4fb6af8fd241fb44b5803bc64b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:6b:ae:f0:56:dc:a7:2e:48:b4:cf:b5:97:91:5a:3d:dc:9e:
         fc:af:b4:76:ee:d2:75:c0:96:fe:af:09:81:01:f7:aa:91:53:
         62:dc:73:37:d1:e7:ad:5c:43:12:6c:a1:cd:31:65:54:57:29:
         4e:79:fb:c5:c6:c5:a3:42:33:09:d0:14:ff:4b:5a:d9:b3:0c:
         c6:71:2d:f5:3c:e8:30:51:70:4a:70:78:93:34:ed:27:cd:23:
         35:a1:1b:9a:3f:25:ea:e5:f8:38:b0:be:a2:b5:b9:cd:03:68:
         08:3e:f7:da:89:0b:22:ea:ae:3f:2c:86:4b:da:f0:17:05:aa:
         9f:fe:83:08:43:22:fe:c9:7a:cf:0a:81:4e:86:63:54:24:08:
         fe:37:f4:e4:aa:80:09:82:77:75:ab:7f:41:6e:fa:8d:3b:27:
         14:69:69:f1:f2:22:a1:ca:0b:1a:65:91:87:c1:f7:70:6d:3f:
         49:d9:3b:f3:eb:62:bc:99:43:cf:fa:f7:06:c2:b0:16:81:61:
         b0:15:f0:5b:42:2b:9d:eb:96:1a:37:b1:a0:ce:ed:01:f7:f0:
         5a:ba:dd:36:75:d4:e1:34:d9:20:b9:58:7f:7d:71:07:bc:2e:
         d7:83:ec:cd:d8:2a:79:f3:90:bc:92:61:d7:37:ba:25:d3:6a:
         f3:b6:90:06
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAMvkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm
YmYzMTMwMzZjNWQ0ZmI2YWY4ZmQyNDFmYjQ0YjU4MDNiYzY0YjAwHhcNMjMwODI5
MTYxOTIxWhcNMjUwODMwMTYxOTIxWjAzMTEwLwYDVQQDEyhmNWI5ZjZiYmFkMDY2
OGMyYzY5MTZkZWZiM2MyYmU0NTMzYmQ1Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuMPsEQzPul/tfMIhZmatMF3io/WG0ZGvjx+B/FfDxkQAqCMg
LjCUnHIXonWylqReLU9dlJrlocdphtKlU8oZSoMNFWa+GbakXh9zlvbzgMJnFldu
emri5HQgxJaKaltEWe2Pz7iHp292ljQGHa1gRALnLFoMNZroh5evHs71wfGUXgmn
J3OVd/w7iVAmrsSWjK4ysAZ5vbxQLvbY+dJ8Poa/Ftj/pCSTBWkyj+oXDfmXOwaU
91HOt0CbecdLopuKzrCs3IHHefKSHPZ5GwKlcBpVfWvzqVGj7vP0Dx+JLnnRhsE1
RNZvbmj5pyPyIceIIp9KAblsAB6g/pLoZCPfvwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFA5cDQQGJJCvC1yevhR8SZxgqkwGMB8GA1UdIwQYMBaAFJvKt92OPM2IaC4f
Xw1ZfsChvEJAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2ZiZjMx
MzAzNmM1ZDRmYjZhZjhmZDI0MWZiNDRiNTgwM2JjNjRiMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGM1ZjFlMGYtYTUyNi00MmJiLWE5NjYtMDZkMGJj
ZTU1NTc4L2Y1YjlmNmJiYWQwNjY4YzJjNjkxNmRlZmIzYzJiZTQ1MzNiZDU2NzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYzVmMWUwZi1hNTI2LTQyYmItYTk2Ni0wNmQw
YmNlNTU1NzgvM2ZiZjMxMzAzNmM1ZDRmYjZhZjhmZDI0MWZiNDRiNTgwM2JjNjRi
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDW5AwDQYJKoZIhvcNAQELBQADggEBAMprrvBW3KcuSLTP
tZeRWj3cnvyvtHbu0nXAlv6vCYEB96qRU2LcczfR561cQxJsoc0xZVRXKU55+8XG
xaNCMwnQFP9LWtmzDMZxLfU86DBRcEpweJM07SfNIzWhG5o/Jerl+DiwvqK1uc0D
aAg+99qJCyLqrj8shkva8BcFqp/+gwhDIv7Jes8KgU6GY1QkCP439OSqgAmCd3Wr
f0Fu+o07JxRpafHyIqHKCxplkYfB93BtP0nZO/PrYryZQ8/69wbCsBaBYbAV8FtC
K53rlho3saDO7QH38Fq63TZ11OE02SC5WH99cQe8LteD7M3YKnnzkLySYdc3uiXT
avO2kAY=
-----END CERTIFICATE-----