Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/3b889223a77298ce34b54098d3cab20f3f72ff38.roa
File:                     3b889223a77298ce34b54098d3cab20f3f72ff38.roa (raw, json)
Hash identifier:          W35B7lFVGjAgF6zP5XbmCIbus4aivBBnYKHBY4s8O4E=
Subject key identifier:   6C:73:6D:0F:84:17:21:21:AC:B2:21:67:1F:B8:50:6D:6D:CE:0F:69
Certificate issuer:       /CN=346499a0d70b33b00e436c219a652ef2db03ca4c
Certificate serial:       206217
Authority key identifier: CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/3b889223a77298ce34b54098d3cab20f3f72ff38.roa
Signing time:             Fri 28 Apr 2023 08:30:01 +0000
ROA not before:           Thu 27 Apr 2023 08:30:01 +0000
ROA not after:            Sat 26 Apr 2025 08:30:01 +0000
asID:                     271804
IP address blocks:        2803:f780::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122263 (0x206217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346499a0d70b33b00e436c219a652ef2db03ca4c
        Validity
            Not Before: Apr 27 08:30:01 2023 GMT
            Not After : Apr 26 08:30:01 2025 GMT
        Subject: CN=3b889223a77298ce34b54098d3cab20f3f72ff38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:db:ca:f4:7f:16:cb:82:71:ef:66:61:b9:
                    96:91:20:ab:12:34:ec:45:a9:38:9c:69:3a:52:4a:
                    b3:7b:62:8b:93:e5:66:ea:09:5e:dc:27:cf:58:21:
                    70:d5:68:68:70:51:fa:20:d5:d7:7b:0c:90:15:c7:
                    57:e8:53:b0:bb:d2:1d:6b:1d:e1:4c:fa:14:e0:7c:
                    33:4c:40:e0:f7:a6:8b:7d:21:e8:d8:05:ea:8c:c6:
                    f2:82:25:52:ad:d0:14:d6:4e:0b:c6:da:5b:38:9d:
                    ac:68:33:e9:13:e1:db:25:3e:fd:7f:c9:27:01:82:
                    28:0a:1d:0f:0c:9f:85:59:a8:6c:eb:eb:8f:0c:37:
                    90:f9:85:f5:12:c1:ba:4c:f9:60:69:c7:3c:a7:47:
                    19:40:e3:b9:87:a0:1b:8a:3b:17:f3:91:de:6e:43:
                    fc:6f:83:49:3b:74:cd:76:e7:fe:52:20:49:ab:7a:
                    eb:e8:5a:07:cc:5b:86:0a:20:08:de:2d:68:b0:28:
                    cc:33:e5:c1:a5:da:b4:0f:51:66:f1:f9:15:35:ee:
                    b2:b0:2d:12:a6:bf:37:45:14:e4:13:70:fa:8a:d3:
                    e6:06:2f:58:3d:2b:5e:c5:23:bd:1e:40:16:9b:eb:
                    30:9a:ed:b0:72:3d:75:db:80:70:da:2c:e2:86:45:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:73:6D:0F:84:17:21:21:AC:B2:21:67:1F:B8:50:6D:6D:CE:0F:69
            X509v3 Authority Key Identifier:
                keyid:CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/3b889223a77298ce34b54098d3cab20f3f72ff38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/346499a0d70b33b00e436c219a652ef2db03ca4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:b7:a0:e0:70:03:dd:e6:8f:59:43:d3:b1:90:41:b9:fc:
         18:48:c0:4b:7d:bd:9f:97:8c:70:29:5a:a0:48:d3:02:07:33:
         3e:d2:28:9b:ac:c8:d9:b4:c0:bb:39:7f:66:08:91:df:47:8c:
         e0:8d:e7:dd:26:6b:50:6a:f3:05:3e:b2:32:27:3b:e4:bd:a5:
         3e:62:11:e5:b1:31:d2:45:4f:75:df:2e:ef:15:df:bb:ba:67:
         48:49:d1:c7:a7:51:03:58:3e:f8:7e:f1:ee:68:68:13:c6:25:
         c6:fe:18:fe:9f:30:5f:0b:d7:83:46:dc:c2:6f:32:eb:32:9b:
         01:eb:a1:70:83:4f:a1:49:d4:b9:fd:78:a9:d9:c7:84:b3:f2:
         03:51:07:47:86:0a:a6:d4:d5:4a:44:11:7f:01:d9:d8:f7:eb:
         6f:27:70:d2:52:fe:75:33:36:7b:dc:0e:78:72:b4:b4:b4:c4:
         be:cb:f1:07:9b:18:41:86:81:25:8e:1a:f4:8a:ca:53:71:0b:
         77:6f:6a:b8:d6:11:a6:df:0e:08:71:8a:c5:c5:5e:68:dd:a2:
         21:10:ed:3d:c7:13:d0:9b:7c:3c:4f:3e:6e:2d:a3:06:e1:49:
         ae:9c:60:8b:ef:0c:4b:22:d8:6b:03:af:05:f7:50:bd:19:4e:
         30:09:da:1e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIGIXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM0
NjQ5OWEwZDcwYjMzYjAwZTQzNmMyMTlhNjUyZWYyZGIwM2NhNGMwHhcNMjMwNDI3
MDgzMDAxWhcNMjUwNDI2MDgzMDAxWjAzMTEwLwYDVQQDEygzYjg4OTIyM2E3NzI5
OGNlMzRiNTQwOThkM2NhYjIwZjNmNzJmZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtYbbyvR/FsuCce9mYbmWkSCrEjTsRak4nGk6Ukqze2KLk+Vm
6gle3CfPWCFw1WhocFH6INXXewyQFcdX6FOwu9Idax3hTPoU4HwzTEDg96aLfSHo
2AXqjMbygiVSrdAU1k4LxtpbOJ2saDPpE+HbJT79f8knAYIoCh0PDJ+FWahs6+uP
DDeQ+YX1EsG6TPlgacc8p0cZQOO5h6AbijsX85HebkP8b4NJO3TNduf+UiBJq3rr
6FoHzFuGCiAI3i1osCjMM+XBpdq0D1Fm8fkVNe6ysC0Spr83RRTkE3D6itPmBi9Y
PStexSO9HkAWm+swmu2wcj1124Bw2izihkXLlQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGxzbQ+EFyEhrLIhZx+4UG1tzg9pMB8GA1UdIwQYMBaAFMwIi97tRM/RtxLN
cI8yWqDOcDqkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzQ2NDk5
YTBkNzBiMzNiMDBlNDM2YzIxOWE2NTJlZjJkYjAzY2E0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmUwYWUwOTUtYTgwOC00ODQzLWI2NTktYTEyYTRm
YWYxNWQwLzNiODg5MjIzYTc3Mjk4Y2UzNGI1NDA5OGQzY2FiMjBmM2Y3MmZmMzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZTBhZTA5NS1hODA4LTQ4NDMtYjY1OS1hMTJh
NGZhZjE1ZDAvMzQ2NDk5YTBkNzBiMzNiMDBlNDM2YzIxOWE2NTJlZjJkYjAzY2E0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD94AwDQYJKoZIhvcNAQELBQADggEBAFyut6DgcAPd5o9Z
Q9OxkEG5/BhIwEt9vZ+XjHApWqBI0wIHMz7SKJusyNm0wLs5f2YIkd9HjOCN590m
a1Bq8wU+sjInO+S9pT5iEeWxMdJFT3XfLu8V37u6Z0hJ0cenUQNYPvh+8e5oaBPG
Jcb+GP6fMF8L14NG3MJvMusymwHroXCDT6FJ1Ln9eKnZx4Sz8gNRB0eGCqbU1UpE
EX8B2dj3628ncNJS/nUzNnvcDnhytLS0xL7L8QebGEGGgSWOGvSKylNxC3dvarjW
EabfDghxisXFXmjdoiEQ7T3HE9CbfDxPPm4towbhSa6cYIvvDEsi2GsDrwX3UL0Z
TjAJ2h4=
-----END CERTIFICATE-----