Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/70992714bfaf65fb423c72d2a3d08403b22b93d4.roa
File:                     70992714bfaf65fb423c72d2a3d08403b22b93d4.roa (raw, json)
Hash identifier:          kI0/aW0/D22IUClb/obq3avfWXYy5mxQY2rsRkAVtFA=
Subject key identifier:   48:39:A1:31:39:95:7F:D7:DC:A0:CF:D3:C5:DE:AD:78:DE:BE:1D:91
Certificate issuer:       /CN=4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7
Certificate serial:       C312
Authority key identifier: C5:84:0F:7E:86:D5:0A:85:21:4B:2B:D0:AB:A8:4A:C6:91:F2:49:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/70992714bfaf65fb423c72d2a3d08403b22b93d4.roa
Signing time:             Tue 15 Aug 2023 21:56:18 +0000
ROA not before:           Mon 14 Aug 2023 21:56:18 +0000
ROA not after:            Fri 15 Aug 2025 21:56:18 +0000
asID:                     15830
IP address blocks:        2803:2790::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49938 (0xc312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7
        Validity
            Not Before: Aug 14 21:56:18 2023 GMT
            Not After : Aug 15 21:56:18 2025 GMT
        Subject: CN=70992714bfaf65fb423c72d2a3d08403b22b93d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:8b:73:4f:22:61:7d:55:51:76:cd:10:8e:
                    ca:1a:67:18:98:61:af:45:58:bb:46:89:40:0d:ae:
                    b4:01:05:34:06:bd:e4:f6:21:c2:d4:22:99:92:35:
                    e1:ce:26:4d:79:11:2d:90:08:d1:78:e1:ad:45:0e:
                    b8:82:9e:84:15:dd:c6:75:fb:b2:6c:4d:9d:17:20:
                    98:e2:40:43:0d:06:9a:7e:ef:3a:64:08:87:4b:7f:
                    0d:1a:e6:ed:ef:fd:29:cc:17:c1:68:c2:45:b1:1b:
                    12:10:ff:6d:cc:17:a3:5c:c3:05:f1:ff:49:ff:31:
                    45:31:a7:1b:ea:15:44:54:ca:cf:30:71:4e:a8:1d:
                    e4:60:99:90:5d:76:ae:8a:ff:45:2c:39:ee:86:a0:
                    74:43:10:0d:cc:9d:d1:c6:da:42:cb:45:8c:e8:7c:
                    71:47:97:5e:34:49:83:0e:e8:d4:0b:68:fd:0a:9c:
                    df:6a:23:0b:23:63:ab:b3:2b:a5:90:6c:f1:6c:f3:
                    b2:64:19:b1:6f:5b:fb:38:fe:2d:03:9e:0e:1c:40:
                    5e:d6:41:17:ad:d3:eb:cb:dd:fa:49:3c:18:16:0f:
                    ee:7a:e5:c6:15:3d:2f:6d:bf:78:5e:e2:71:80:b2:
                    e0:98:ba:38:b7:05:22:1b:14:99:b7:eb:96:df:bd:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:39:A1:31:39:95:7F:D7:DC:A0:CF:D3:C5:DE:AD:78:DE:BE:1D:91
            X509v3 Authority Key Identifier:
                keyid:C5:84:0F:7E:86:D5:0A:85:21:4B:2B:D0:AB:A8:4A:C6:91:F2:49:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/70992714bfaf65fb423c72d2a3d08403b22b93d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2790::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:4f:62:8c:05:ea:58:21:72:d5:5e:cd:62:bc:f0:95:90:
         50:0b:8c:31:58:33:a8:1e:23:25:25:51:dc:0d:c8:49:33:e0:
         8d:70:fd:73:b2:4e:2e:d9:1b:97:63:a7:37:09:e0:6f:23:d1:
         a6:b8:8c:74:86:6d:e9:6e:ae:18:ac:7b:49:2e:ee:71:ef:ba:
         2f:33:11:1b:cd:8b:bf:cd:f6:06:68:bc:5e:ef:70:16:f9:b8:
         6d:f1:fb:0b:67:1c:16:ab:51:de:5c:d6:e7:36:ec:f2:fe:89:
         c1:af:ce:fc:d8:a1:2b:d7:a1:12:c6:ee:7d:d7:9c:c9:8e:4b:
         e5:a0:53:c8:95:54:68:d1:43:0a:f1:b1:d0:94:e9:cf:13:64:
         77:68:3c:c2:60:0c:fb:bd:0c:02:20:2f:4f:13:86:ab:3a:d4:
         d4:1b:b9:f0:d2:e7:b6:b2:39:6f:1d:de:6d:35:cf:43:01:7f:
         eb:44:c9:01:ca:b0:8e:cf:87:ae:18:ac:a3:31:23:e9:c3:3b:
         68:d1:ed:03:7d:19:e0:35:80:2b:32:80:be:d2:0e:e5:b3:34:
         2c:8c:d1:b5:72:64:84:a0:6f:2d:cd:1f:d5:6f:c8:cf:5c:9f:
         3d:6c:6c:86:1b:d3:07:a9:d4:11:6f:a5:61:c9:0f:05:73:97:
         98:b1:75:99
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAMMSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
YjI2ZTdhMDJlNmZhMjVmMmU4ZDljODVkNWZlNjA4MDI1ODMzYzcwHhcNMjMwODE0
MjE1NjE4WhcNMjUwODE1MjE1NjE4WjAzMTEwLwYDVQQDEyg3MDk5MjcxNGJmYWY2
NWZiNDIzYzcyZDJhM2QwODQwM2IyMmI5M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh62Lc08iYX1VUXbNEI7KGmcYmGGvRVi7RolADa60AQU0Br3k
9iHC1CKZkjXhziZNeREtkAjReOGtRQ64gp6EFd3GdfuybE2dFyCY4kBDDQaafu86
ZAiHS38NGubt7/0pzBfBaMJFsRsSEP9tzBejXMMF8f9J/zFFMacb6hVEVMrPMHFO
qB3kYJmQXXauiv9FLDnuhqB0QxANzJ3RxtpCy0WM6HxxR5deNEmDDujUC2j9Cpzf
aiMLI2OrsyulkGzxbPOyZBmxb1v7OP4tA54OHEBe1kEXrdPry936STwYFg/ueuXG
FT0vbb94XuJxgLLgmLo4twUiGxSZt+uW371lpwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEg5oTE5lX/X3KDP08XerXjevh2RMB8GA1UdIwQYMBaAFMWED36G1QqFIUsr
0KuoSsaR8knDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGJiMjZl
N2EwMmU2ZmEyNWYyZThkOWM4NWQ1ZmU2MDgwMjU4MzNjNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzJmNDFjYzYtMDNiNi00MWIwLWFhN2ItMDg5YjYz
M2VlYWVlLzcwOTkyNzE0YmZhZjY1ZmI0MjNjNzJkMmEzZDA4NDAzYjIyYjkzZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMmY0MWNjNi0wM2I2LTQxYjAtYWE3Yi0wODli
NjMzZWVhZWUvNGJiMjZlN2EwMmU2ZmEyNWYyZThkOWM4NWQ1ZmU2MDgwMjU4MzNj
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDJ5AwDQYJKoZIhvcNAQELBQADggEBAGDuT2KMBepYIXLV
Xs1ivPCVkFALjDFYM6geIyUlUdwNyEkz4I1w/XOyTi7ZG5djpzcJ4G8j0aa4jHSG
belurhise0ku7nHvui8zERvNi7/N9gZovF7vcBb5uG3x+wtnHBarUd5c1uc27PL+
icGvzvzYoSvXoRLG7n3XnMmOS+WgU8iVVGjRQwrxsdCU6c8TZHdoPMJgDPu9DAIg
L08Thqs61NQbufDS57ayOW8d3m01z0MBf+tEyQHKsI7Ph64YrKMxI+nDO2jR7QN9
GeA1gCsygL7SDuWzNCyM0bVyZISgby3NH9VvyM9cnz1sbIYb0wep1BFvpWHJDwVz
l5ixdZk=
-----END CERTIFICATE-----