Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/3095aa5e286bb4fafee896d1445a7e2332753c59.roa
File:                     3095aa5e286bb4fafee896d1445a7e2332753c59.roa (raw, json)
Hash identifier:          GXCVeGdo3dXqF+XUdsW/XnY55kOOoPK7nkD/ujnUNAc=
Subject key identifier:   E6:FC:1A:17:C5:28:2B:64:14:33:5E:19:01:7D:FE:7C:C4:3A:C6:1D
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       1D2473
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/3095aa5e286bb4fafee896d1445a7e2332753c59.roa
Signing time:             Wed 08 Mar 2023 20:01:00 +0000
ROA not before:           Tue 07 Mar 2023 19:59:07 +0000
ROA not after:            Sat 08 Mar 2025 19:59:07 +0000
asID:                     26619
IP address blocks:        2803:cb00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909875 (0x1d2473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: Mar  7 19:59:07 2023 GMT
            Not After : Mar  8 19:59:07 2025 GMT
        Subject: CN=3095aa5e286bb4fafee896d1445a7e2332753c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:78:da:fd:cf:06:b3:13:50:62:dd:d2:c9:
                    41:3a:77:12:1c:0f:2d:19:99:37:eb:80:c9:d2:ac:
                    95:76:5f:77:b2:97:bb:f3:01:6c:f1:e9:2b:bd:16:
                    0b:f5:3e:69:8f:5e:ed:13:f9:19:3e:44:0d:81:01:
                    d4:01:48:4a:98:c1:5b:9b:44:06:33:42:f0:e6:b4:
                    af:6a:ff:88:7f:6a:29:11:94:ee:ed:c4:07:a2:01:
                    3c:bf:23:b5:05:23:08:15:0c:5e:15:06:9d:6b:13:
                    e5:68:05:3f:e8:1d:bb:f7:cb:37:1a:4e:16:bc:07:
                    b0:e1:e9:0b:36:66:d0:57:61:1e:db:5b:85:3e:56:
                    c1:0c:83:4d:af:5e:01:2e:55:54:bf:14:a1:e0:11:
                    17:e4:6e:dd:52:d9:f5:bc:5f:0d:9e:71:a7:33:19:
                    16:63:67:49:fe:2f:f4:bb:cc:90:a2:27:23:ab:fc:
                    cb:90:3c:8e:0e:57:c8:c2:90:50:ee:bb:fb:99:09:
                    b6:f8:42:84:3a:b0:59:3e:51:88:c9:63:38:1f:a1:
                    c8:c3:eb:14:6a:d4:ca:de:ff:6f:a9:04:d1:d9:a9:
                    1b:5c:22:66:9f:e5:af:1c:e7:55:5b:ae:e2:60:f9:
                    bb:cc:06:e6:29:f7:bb:4e:b9:08:10:0d:e4:a2:f7:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FC:1A:17:C5:28:2B:64:14:33:5E:19:01:7D:FE:7C:C4:3A:C6:1D
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/3095aa5e286bb4fafee896d1445a7e2332753c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:87:2f:99:92:26:7e:f4:3b:8a:3c:9b:2f:57:d6:ea:d1:29:
         0a:5e:db:c9:41:cd:b0:c3:8a:45:27:59:67:e6:28:f5:69:9d:
         75:5e:f7:02:95:08:17:03:e2:5f:84:c0:a7:e2:b3:c4:d8:68:
         76:a4:1a:c6:dd:56:78:f9:b1:32:99:1a:84:5b:b1:44:c7:f2:
         54:e4:e1:bc:06:0e:a8:fb:27:2f:8f:05:da:04:e3:ad:b7:88:
         68:dc:aa:28:08:78:bd:56:71:04:9f:c6:35:83:ba:f5:b2:b5:
         ab:41:59:43:94:b3:62:47:6e:9d:84:9f:26:e3:e1:20:ff:a9:
         ca:b3:a8:4b:90:e2:6b:b5:cd:db:e2:dd:da:34:0b:b9:cc:67:
         e7:35:3d:c5:52:a5:af:df:bd:2f:d8:4d:9e:ea:aa:96:10:48:
         77:9f:b4:1d:ad:37:c2:d4:47:60:78:7e:3f:ed:19:e4:7f:c4:
         00:7c:88:37:6e:9e:3d:b0:14:da:d8:73:50:d4:5c:3e:10:8b:
         a9:f3:cc:07:35:12:64:2c:70:ec:a3:fd:2f:02:e0:c0:64:bb:
         36:7f:4d:56:85:23:12:29:a5:91:f4:29:8b:ee:a1:cf:7e:32:
         c7:c0:4c:40:fc:47:3a:87:50:ca:03:4c:40:e1:92:6a:b0:92:
         78:8a:02:8a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHSRzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
MTRhOGZjODkyNzc2MzRhZTU3Y2RhZjRkODE0NTE0Y2Q2MWY2NTYwHhcNMjMwMzA3
MTk1OTA3WhcNMjUwMzA4MTk1OTA3WjAzMTEwLwYDVQQDEygzMDk1YWE1ZTI4NmJi
NGZhZmVlODk2ZDE0NDVhN2UyMzMyNzUzYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6Al42v3PBrMTUGLd0slBOncSHA8tGZk364DJ0qyVdl93spe7
8wFs8ekrvRYL9T5pj17tE/kZPkQNgQHUAUhKmMFbm0QGM0Lw5rSvav+If2opEZTu
7cQHogE8vyO1BSMIFQxeFQadaxPlaAU/6B2798s3Gk4WvAew4ekLNmbQV2Ee21uF
PlbBDINNr14BLlVUvxSh4BEX5G7dUtn1vF8NnnGnMxkWY2dJ/i/0u8yQoicjq/zL
kDyODlfIwpBQ7rv7mQm2+EKEOrBZPlGIyWM4H6HIw+sUatTK3v9vqQTR2akbXCJm
n+WvHOdVW67iYPm7zAbmKfe7TrkIEA3kovfXNQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOb8GhfFKCtkFDNeGQF9/nzEOsYdMB8GA1UdIwQYMBaAFCXzb5L/MZGd6p3o
GO5Gg5oebhfvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDcxNGE4
ZmM4OTI3NzYzNGFlNTdjZGFmNGQ4MTQ1MTRjZDYxZjY1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjQxYjVlZGQtNjhlNS00ZWEwLWI1MzUtNTJlY2Y5
OWEwODkxLzMwOTVhYTVlMjg2YmI0ZmFmZWU4OTZkMTQ0NWE3ZTIzMzI3NTNjNTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNDFiNWVkZC02OGU1LTRlYTAtYjUzNS01MmVj
Zjk5YTA4OTEvNDcxNGE4ZmM4OTI3NzYzNGFlNTdjZGFmNGQ4MTQ1MTRjZDYxZjY1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDywAwDQYJKoZIhvcNAQELBQADggEBAEiHL5mSJn70O4o8
my9X1urRKQpe28lBzbDDikUnWWfmKPVpnXVe9wKVCBcD4l+EwKfis8TYaHakGsbd
Vnj5sTKZGoRbsUTH8lTk4bwGDqj7Jy+PBdoE4623iGjcqigIeL1WcQSfxjWDuvWy
tatBWUOUs2JHbp2Enybj4SD/qcqzqEuQ4mu1zdvi3do0C7nMZ+c1PcVSpa/fvS/Y
TZ7qqpYQSHeftB2tN8LUR2B4fj/tGeR/xAB8iDdunj2wFNrYc1DUXD4Qi6nzzAc1
EmQscOyj/S8C4MBkuzZ/TVaFIxIppZH0KYvuoc9+MsfATED8RzqHUMoDTEDhkmqw
kniKAoo=
-----END CERTIFICATE-----