Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/5900127ebfcea83100113fbc39af4cedb3e685a6.roa
File:                     5900127ebfcea83100113fbc39af4cedb3e685a6.roa (raw, json)
Hash identifier:          /jcIbKipOPaOv0I7AJTFvF+i+/Ou/bKeFJoqZaVx1zg=
Subject key identifier:   86:23:71:48:ED:2C:48:55:1A:6F:CC:0A:9D:2E:31:BB:F6:E5:69:B3
Certificate issuer:       /CN=5af0c364da44e8d56630ca9491db8bba68bafdeb
Certificate serial:       2328D5
Authority key identifier: 3A:CD:EC:EC:0C:96:F1:25:C2:1A:2C:6B:E1:E0:D2:E7:78:1F:8A:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5af0c364da44e8d56630ca9491db8bba68bafdeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/5900127ebfcea83100113fbc39af4cedb3e685a6.roa
Signing time:             Sun 31 Mar 2024 03:23:59 +0000
ROA not before:           Sun 31 Mar 2024 03:23:59 +0000
ROA not after:            Tue 31 Mar 2026 03:23:59 +0000
asID:                     52369
IP address blocks:        2800:c50::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2304213 (0x2328d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af0c364da44e8d56630ca9491db8bba68bafdeb
        Validity
            Not Before: Mar 31 03:23:59 2024 GMT
            Not After : Mar 31 03:23:59 2026 GMT
        Subject: CN=5900127ebfcea83100113fbc39af4cedb3e685a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:b1:55:f6:66:8d:a2:b4:7f:f2:d7:77:8e:
                    7a:ef:00:12:be:62:15:82:32:99:0d:51:cb:45:c8:
                    0b:54:79:61:fe:eb:d1:2a:60:30:55:3f:e4:2e:25:
                    f1:2a:5a:f5:32:7a:5b:10:eb:2e:b7:4a:1e:ed:bf:
                    3b:e0:94:d3:ea:1d:b4:92:a2:82:29:09:58:3b:58:
                    d1:18:dc:a9:fb:7e:d7:3e:bd:55:7b:b9:ba:f2:76:
                    78:26:99:34:46:8a:6f:4a:b5:ec:b9:2d:2f:72:ed:
                    dc:b1:f5:9d:bf:b6:4e:a5:77:9d:de:bf:f1:97:aa:
                    7a:c9:21:74:4b:25:be:17:50:19:6c:38:df:70:8e:
                    89:29:09:6e:09:6f:ca:f5:6e:be:73:9a:4c:99:f3:
                    f0:a5:39:ce:dc:f9:49:d5:01:c5:e3:f8:7c:a5:95:
                    1b:b4:24:e0:91:6a:37:09:f1:78:58:c2:fa:3e:4d:
                    3c:24:7b:57:6a:00:f9:ed:c5:28:35:40:b7:fa:53:
                    25:e0:21:db:9d:7e:bf:54:b4:0c:f5:b7:bd:34:8b:
                    ef:7f:3a:a6:a6:f3:ec:7a:d7:ce:39:2f:0e:8d:fb:
                    b9:eb:52:e4:8a:4a:e2:af:dc:a3:54:eb:e2:f5:36:
                    72:42:26:5a:2e:ac:0c:4b:35:fc:37:7b:30:81:b9:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:23:71:48:ED:2C:48:55:1A:6F:CC:0A:9D:2E:31:BB:F6:E5:69:B3
            X509v3 Authority Key Identifier:
                keyid:3A:CD:EC:EC:0C:96:F1:25:C2:1A:2C:6B:E1:E0:D2:E7:78:1F:8A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5af0c364da44e8d56630ca9491db8bba68bafdeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/5900127ebfcea83100113fbc39af4cedb3e685a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37014f58-a454-467f-9887-90d8b47e5ee0/5af0c364da44e8d56630ca9491db8bba68bafdeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:22:1d:1e:0a:8a:6c:db:05:1a:33:f3:d4:e9:da:33:76:16:
         56:4f:df:67:74:10:56:ba:12:ec:5d:62:28:56:8f:c0:23:ae:
         53:ab:ef:b7:62:35:51:00:a8:e0:ce:37:86:a4:cc:d6:b5:dc:
         a7:a5:3d:4b:e7:b6:07:a2:12:11:8a:0b:44:be:0b:68:53:cf:
         36:4c:69:c2:e0:ad:e7:61:7d:bb:04:35:01:ea:a9:7b:4c:da:
         3c:3f:84:9f:c6:5e:42:34:b0:61:a7:0d:3a:3e:51:ad:0f:73:
         5e:db:0e:2d:75:a6:08:83:7e:5b:f1:b3:37:74:2a:0b:7f:74:
         fb:51:e8:8e:61:3e:54:46:c5:37:6b:e2:44:a7:f7:db:0b:b8:
         02:b3:a7:9f:58:eb:61:c9:2d:31:ef:63:c6:8d:e3:81:6a:be:
         0c:34:5e:9c:d1:c3:e1:a7:0b:1b:55:24:bf:96:2a:04:58:96:
         28:9f:4b:6f:e5:99:4e:ba:45:d5:2f:0f:5a:4f:bf:e3:67:2b:
         a9:3c:d5:73:2e:92:e5:00:e2:fd:66:9e:98:a4:f9:6f:e6:cc:
         6c:59:cd:9e:8e:17:7d:5e:73:46:23:46:da:03:ee:a2:8a:d5:
         02:fb:30:df:61:d5:38:a2:68:d1:bc:69:cb:45:a2:4f:c0:2f:
         14:a7:93:88
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIyjVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
ZjBjMzY0ZGE0NGU4ZDU2NjMwY2E5NDkxZGI4YmJhNjhiYWZkZWIwHhcNMjQwMzMx
MDMyMzU5WhcNMjYwMzMxMDMyMzU5WjAzMTEwLwYDVQQDEyg1OTAwMTI3ZWJmY2Vh
ODMxMDAxMTNmYmMzOWFmNGNlZGIzZTY4NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1A+xVfZmjaK0f/LXd4567wASvmIVgjKZDVHLRcgLVHlh/uvR
KmAwVT/kLiXxKlr1MnpbEOsut0oe7b874JTT6h20kqKCKQlYO1jRGNyp+37XPr1V
e7m68nZ4Jpk0RopvSrXsuS0vcu3csfWdv7ZOpXed3r/xl6p6ySF0SyW+F1AZbDjf
cI6JKQluCW/K9W6+c5pMmfPwpTnO3PlJ1QHF4/h8pZUbtCTgkWo3CfF4WML6Pk08
JHtXagD57cUoNUC3+lMl4CHbnX6/VLQM9be9NIvvfzqmpvPsetfOOS8Ojfu561Lk
ikrir9yjVOvi9TZyQiZaLqwMSzX8N3swgbn4owIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIYjcUjtLEhVGm/MCp0uMbv25WmzMB8GA1UdIwQYMBaAFDrN7OwMlvElwhos
a+Hg0ud4H4qmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWFmMGMz
NjRkYTQ0ZThkNTY2MzBjYTk0OTFkYjhiYmE2OGJhZmRlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzcwMTRmNTgtYTQ1NC00NjdmLTk4ODctOTBkOGI0
N2U1ZWUwLzU5MDAxMjdlYmZjZWE4MzEwMDExM2ZiYzM5YWY0Y2VkYjNlNjg1YTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNzAxNGY1OC1hNDU0LTQ2N2YtOTg4Ny05MGQ4
YjQ3ZTVlZTAvNWFmMGMzNjRkYTQ0ZThkNTY2MzBjYTk0OTFkYjhiYmE2OGJhZmRl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgADFAwDQYJKoZIhvcNAQELBQADggEBAIIiHR4KimzbBRoz
89Tp2jN2FlZP32d0EFa6EuxdYihWj8AjrlOr77diNVEAqODON4akzNa13KelPUvn
tgeiEhGKC0S+C2hTzzZMacLgredhfbsENQHqqXtM2jw/hJ/GXkI0sGGnDTo+Ua0P
c17bDi11pgiDflvxszd0Kgt/dPtR6I5hPlRGxTdr4kSn99sLuAKzp59Y62HJLTHv
Y8aN44Fqvgw0XpzRw+GnCxtVJL+WKgRYliifS2/lmU66RdUvD1pPv+NnK6k81XMu
kuUA4v1mnpik+W/mzGxZzZ6OF31ec0YjRtoD7qKK1QL7MN9h1TiiaNG8actFok/A
LxSnk4g=
-----END CERTIFICATE-----