Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/36781776caa9e95e6caa8232d395e08045a3e96c.roa
File:                     36781776caa9e95e6caa8232d395e08045a3e96c.roa (raw, json)
Hash identifier:          nAzxheiisMutf9GfB8T7UKuS1S3ewOdfnblzZjswJBo=
Subject key identifier:   EE:51:F3:1A:0D:7E:BD:E0:12:D1:75:41:2E:B9:73:88:59:FE:2B:CF
Certificate issuer:       /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial:       03E18D
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/36781776caa9e95e6caa8232d395e08045a3e96c.roa
Signing time:             Sat 11 Mar 2023 20:44:06 +0000
ROA not before:           Fri 10 Mar 2023 20:43:36 +0000
ROA not after:            Tue 11 Mar 2025 21:43:36 +0000
asID:                     272875
IP address blocks:        2803:4a90:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254349 (0x3e18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
        Validity
            Not Before: Mar 10 20:43:36 2023 GMT
            Not After : Mar 11 21:43:36 2025 GMT
        Subject: CN=36781776caa9e95e6caa8232d395e08045a3e96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:31:45:02:43:50:ce:a9:2e:ce:be:ef:75:
                    26:8d:44:e8:3f:a4:21:94:00:4e:46:a3:82:95:3c:
                    12:e3:98:4c:22:9c:99:8d:3d:59:57:8e:e7:f4:ec:
                    1f:07:c9:f1:5f:58:1f:0e:07:6d:70:6f:91:6a:16:
                    35:12:bb:b4:d5:87:76:f6:d0:50:bc:71:f5:a5:62:
                    66:1f:ad:72:9c:8b:41:ab:ad:4a:f7:62:a8:e1:f0:
                    69:90:e0:8d:0d:16:77:80:6a:07:48:be:8f:d7:3e:
                    00:83:48:7c:88:e8:89:2a:04:db:ce:43:31:9b:38:
                    25:be:cf:7c:a2:92:ad:78:84:36:51:45:40:33:5c:
                    64:60:fe:f6:15:71:fc:eb:5e:21:18:a4:de:08:6e:
                    e0:1f:5d:d7:31:c7:34:43:1c:64:b5:c3:59:1d:9d:
                    22:8c:1f:4e:a4:91:e2:f4:9c:fd:35:1e:d9:ec:e9:
                    65:6d:89:20:57:cb:38:6c:0f:b3:58:51:d8:64:3f:
                    8c:b2:c5:3a:2d:ed:8b:b3:0c:4f:d4:b0:f7:15:a8:
                    7d:46:b4:6a:64:7f:8e:d5:cc:1d:0b:25:6f:ec:60:
                    81:f0:45:b2:77:1c:02:76:3a:aa:96:f3:ee:4d:82:
                    95:77:60:ac:39:08:a3:23:54:83:37:ed:64:2a:4f:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:51:F3:1A:0D:7E:BD:E0:12:D1:75:41:2E:B9:73:88:59:FE:2B:CF
            X509v3 Authority Key Identifier:
                keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/36781776caa9e95e6caa8232d395e08045a3e96c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:fb:cc:0f:96:87:06:e1:d1:ba:08:f4:aa:82:af:1e:8f:
         e5:82:fc:98:23:e8:9a:42:ec:77:48:a8:38:58:4b:78:6a:1a:
         82:2e:d1:c1:9c:0f:5c:74:83:15:93:c8:2e:2f:a8:1e:6d:3a:
         ff:69:df:e2:9a:81:41:9f:e2:ed:02:1b:1a:ad:b7:24:69:9b:
         fd:e5:9c:13:e6:80:47:d2:98:02:7f:0f:3e:df:c4:92:b4:16:
         98:88:55:50:a7:ec:52:31:0b:a3:e0:a4:df:5e:e2:a8:74:46:
         78:27:b1:86:ab:26:4e:4e:e4:e6:a1:a2:ea:c8:54:5c:67:95:
         d9:8b:f3:ba:35:51:02:47:1d:bf:78:e9:ca:8d:28:38:41:09:
         a9:fa:d0:9e:5c:a9:70:7d:6e:ff:5a:14:7c:bc:d8:9b:de:6a:
         f6:a7:0f:db:c4:d8:ae:a6:d2:a0:a1:e5:83:6e:cb:a0:50:cf:
         af:30:fb:fa:0b:0a:0c:48:7a:cf:e2:50:f7:cd:cb:a5:6c:fa:
         3b:d3:e9:cb:fc:8b:65:91:0c:9d:56:6a:c0:12:f5:d6:52:69:
         b3:ad:85:3e:d5:48:d3:e1:ca:e5:54:cb:73:5e:50:df:5a:1c:
         29:66:01:24:3c:31:77:f7:f9:51:c3:bb:31:bb:66:7e:a3:01:
         d6:40:0d:20
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDA+GNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
ZDEzNTE2MTRlNjkzNzg4MjExZDRiN2FhYWY3ZjhmNWQ5MTlkM2QwHhcNMjMwMzEw
MjA0MzM2WhcNMjUwMzExMjE0MzM2WjAzMTEwLwYDVQQDEygzNjc4MTc3NmNhYTll
OTVlNmNhYTgyMzJkMzk1ZTA4MDQ1YTNlOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA154xRQJDUM6pLs6+73UmjUToP6QhlABORqOClTwS45hMIpyZ
jT1ZV47n9OwfB8nxX1gfDgdtcG+RahY1Eru01Yd29tBQvHH1pWJmH61ynItBq61K
92Ko4fBpkOCNDRZ3gGoHSL6P1z4Ag0h8iOiJKgTbzkMxmzglvs98opKteIQ2UUVA
M1xkYP72FXH8614hGKTeCG7gH13XMcc0QxxktcNZHZ0ijB9OpJHi9Jz9NR7Z7Oll
bYkgV8s4bA+zWFHYZD+MssU6Le2LswxP1LD3Fah9RrRqZH+O1cwdCyVv7GCB8EWy
dxwCdjqqlvPuTYKVd2CsOQijI1SDN+1kKk9R6QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFO5R8xoNfr3gEtF1QS65c4hZ/ivPMB8GA1UdIwQYMBaAFMtoXPeF8BIhN71/
v67T7/dcPScAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNkMTM1
MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQzZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNkOWNhMzUtN2ZjMS00Yzc5LTlhZWEtZTk2Yjc0
NjlkMzZiLzM2NzgxNzc2Y2FhOWU5NWU2Y2FhODIzMmQzOTVlMDgwNDVhM2U5NmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2Q5Y2EzNS03ZmMxLTRjNzktOWFlYS1lOTZi
NzQ2OWQzNmIvNDNkMTM1MTYxNGU2OTM3ODgyMTFkNGI3YWFhZjdmOGY1ZDkxOWQz
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDSpAAAjANBgkqhkiG9w0BAQsFAAOCAQEAZK77zA+Whwbh
0boI9KqCrx6P5YL8mCPomkLsd0ioOFhLeGoagi7RwZwPXHSDFZPILi+oHm06/2nf
4pqBQZ/i7QIbGq23JGmb/eWcE+aAR9KYAn8PPt/EkrQWmIhVUKfsUjELo+Ck317i
qHRGeCexhqsmTk7k5qGi6shUXGeV2YvzujVRAkcdv3jpyo0oOEEJqfrQnlypcH1u
/1oUfLzYm95q9qcP28TYrqbSoKHlg27LoFDPrzD7+gsKDEh6z+JQ983LpWz6O9Pp
y/yLZZEMnVZqwBL11lJps62FPtVI0+HK5VTLc15Q31ocKWYBJDwxd/f5UcO7Mbtm
fqMB1kANIA==
-----END CERTIFICATE-----