Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/a801f0a7c572289ba87cc78da806d4537f10ecb6.roa
File:                     a801f0a7c572289ba87cc78da806d4537f10ecb6.roa (raw, json)
Hash identifier:          o88Fs+HcCzCOrWBO5Ip0NW0FXCRAopvsO6c5S93p62o=
Subject key identifier:   8E:8D:41:79:49:E6:1A:FE:46:D6:F1:16:39:A0:A5:DF:06:10:2D:F7
Certificate issuer:       /CN=33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c
Certificate serial:       012D
Authority key identifier: 4D:2B:87:C0:DD:BE:A7:17:F9:EC:65:91:46:F8:41:7D:3A:C3:8C:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/a801f0a7c572289ba87cc78da806d4537f10ecb6.roa
Signing time:             Thu 10 Nov 2022 19:01:57 +0000
ROA not before:           Wed 09 Nov 2022 19:01:15 +0000
ROA not after:            Sun 10 Nov 2024 19:01:15 +0000
asID:                     272903
IP address blocks:        2803:3690::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c
        Validity
            Not Before: Nov  9 19:01:15 2022 GMT
            Not After : Nov 10 19:01:15 2024 GMT
        Subject: CN=a801f0a7c572289ba87cc78da806d4537f10ecb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:70:9f:94:c9:0f:f4:e4:7d:bc:8e:b3:f3:
                    28:5d:7d:87:3e:2d:c2:c9:c7:eb:e7:6e:28:62:22:
                    66:1c:b4:13:18:99:c4:55:0b:a6:8a:96:70:45:27:
                    75:d8:76:7f:95:aa:94:28:fb:42:8c:8b:fe:e8:3d:
                    9a:48:bc:4f:05:9a:c3:6b:69:37:76:70:b9:77:9e:
                    aa:35:44:ef:a6:c7:d2:07:1a:6f:82:de:18:2d:16:
                    1e:24:43:07:6f:6e:98:1e:03:47:5c:be:8d:b9:c3:
                    bf:70:62:d0:f4:c6:2e:41:54:c2:3c:fd:f6:e9:25:
                    96:83:83:fd:5b:9a:5e:2c:34:e0:92:da:b3:22:65:
                    cb:50:71:07:aa:13:a2:c7:52:b1:d6:66:7c:d8:d0:
                    72:f0:44:b4:a9:60:f4:21:29:3c:a3:71:b2:b7:52:
                    91:b2:3f:79:c5:4f:99:0b:94:42:84:68:08:6e:74:
                    8d:fd:d1:f7:ef:eb:4c:b5:f5:52:5e:84:b4:5e:95:
                    6b:e9:0b:8e:9d:c3:cd:c1:37:7c:8d:d7:d4:d5:67:
                    42:0f:f0:4f:db:09:20:10:69:a7:23:86:aa:85:28:
                    7d:77:d1:d0:4d:8f:b3:f1:b0:1d:fe:92:21:a4:46:
                    cc:07:65:59:97:8b:87:26:db:fa:eb:88:81:b9:76:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:41:79:49:E6:1A:FE:46:D6:F1:16:39:A0:A5:DF:06:10:2D:F7
            X509v3 Authority Key Identifier:
                keyid:4D:2B:87:C0:DD:BE:A7:17:F9:EC:65:91:46:F8:41:7D:3A:C3:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/a801f0a7c572289ba87cc78da806d4537f10ecb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3690::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:fe:1c:ad:e4:51:86:a8:6c:7e:53:65:f1:86:a7:53:4d:
         84:83:9e:65:7f:c5:f2:f9:cb:6d:e0:11:3f:e2:4b:fd:47:c8:
         e9:ed:6c:47:2d:4d:59:65:55:c4:a0:85:bd:3b:c1:d7:b6:e1:
         f8:d8:9c:3e:6a:1f:ce:89:57:e7:ab:2d:6b:1f:25:e3:7a:12:
         89:b2:03:5b:94:fc:ad:cd:e6:c9:2a:60:20:df:f5:a3:32:78:
         a9:2f:a6:70:41:3c:e2:92:3d:a5:78:b9:58:80:72:8a:28:cd:
         22:43:af:31:78:f2:0f:9c:e8:47:e5:77:f0:11:f6:ae:10:59:
         72:13:3c:a8:2e:00:2f:03:a3:9f:53:14:0e:d1:19:02:1f:8d:
         62:34:cf:16:6f:78:bc:66:6b:98:a0:9d:52:97:92:dd:df:6c:
         4d:32:a3:e8:1f:f8:f8:55:ce:9b:db:ac:64:9b:7f:04:9f:40:
         3f:dd:eb:b2:c0:43:ee:11:0d:12:c6:14:5a:9a:2a:d3:63:c0:
         72:06:c4:a6:8a:97:e3:2b:12:5b:23:28:09:41:f9:f0:0d:ee:
         b6:f5:35:21:20:1b:90:ee:77:5f:46:75:5e:d5:4f:42:c9:15:
         c9:41:b9:df:ff:ef:9d:58:7e:3d:92:72:d0:78:e4:51:9d:b7:
         35:f0:0c:9b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNm
MDNiNjlkMWRjMDA0NjEzMjJhN2RhNGQ1ZmU4ZDliNmVlYmM4YzAeFw0yMjExMDkx
OTAxMTVaFw0yNDExMTAxOTAxMTVaMDMxMTAvBgNVBAMTKGE4MDFmMGE3YzU3MjI4
OWJhODdjYzc4ZGE4MDZkNDUzN2YxMGVjYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp23CflMkP9OR9vI6z8yhdfYc+LcLJx+vnbihiImYctBMYmcRV
C6aKlnBFJ3XYdn+VqpQo+0KMi/7oPZpIvE8FmsNraTd2cLl3nqo1RO+mx9IHGm+C
3hgtFh4kQwdvbpgeA0dcvo25w79wYtD0xi5BVMI8/fbpJZaDg/1bml4sNOCS2rMi
ZctQcQeqE6LHUrHWZnzY0HLwRLSpYPQhKTyjcbK3UpGyP3nFT5kLlEKEaAhudI39
0ffv60y19VJehLRelWvpC46dw83BN3yN19TVZ0IP8E/bCSAQaacjhqqFKH130dBN
j7PxsB3+kiGkRswHZVmXi4cm2/rriIG5dhBrAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUjo1BeUnmGv5G1vEWOaCl3wYQLfcwHwYDVR0jBBgwFoAUTSuHwN2+pxf57GWR
RvhBfTrDjHswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zM2YwM2I2
OWQxZGMwMDQ2MTMyMmE3ZGE0ZDVmZThkOWI2ZWViYzhjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zZjZkM2E5Ny03NjBiLTQwODctOTRiZC1lMWIzOGMz
YTRjYzgvYTgwMWYwYTdjNTcyMjg5YmE4N2NjNzhkYTgwNmQ0NTM3ZjEwZWNiNi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNmNmQzYTk3LTc2MGItNDA4Ny05NGJkLWUxYjM4
YzNhNGNjOC8zM2YwM2I2OWQxZGMwMDQ2MTMyMmE3ZGE0ZDVmZThkOWI2ZWViYzhj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAM2kDANBgkqhkiG9w0BAQsFAAOCAQEANuf+HK3kUYaobH5T
ZfGGp1NNhIOeZX/F8vnLbeARP+JL/UfI6e1sRy1NWWVVxKCFvTvB17bh+NicPmof
zolX56stax8l43oSibIDW5T8rc3mySpgIN/1ozJ4qS+mcEE84pI9pXi5WIByiijN
IkOvMXjyD5zoR+V38BH2rhBZchM8qC4ALwOjn1MUDtEZAh+NYjTPFm94vGZrmKCd
UpeS3d9sTTKj6B/4+FXOm9usZJt/BJ9AP93rssBD7hENEsYUWpoq02PAcgbEpoqX
4ysSWyMoCUH58A3utvU1ISAbkO53X0Z1XtVPQskVyUG53//vnVh+PZJy0HjkUZ23
NfAMmw==
-----END CERTIFICATE-----