Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/20439e65d77af97f608ae1e2f7cc67fd3b6cdfb4.roa
File:                     20439e65d77af97f608ae1e2f7cc67fd3b6cdfb4.roa (raw, json)
Hash identifier:          DIRfHGnN2l0oIDOUYlBeFYWQFp5hvESLzv8CaPfYydg=
Subject key identifier:   85:2B:0C:C4:1E:C3:AC:9A:F4:43:8A:62:A7:A6:CC:36:8E:29:1D:0C
Certificate issuer:       /CN=5e53a4a121c18653f9cf4e1bc0246c1e1e322315
Certificate serial:       1996D5
Authority key identifier: 0D:C8:42:59:2F:E7:59:DD:93:BB:9F:D8:1D:AB:D9:FE:9C:AF:DD:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/20439e65d77af97f608ae1e2f7cc67fd3b6cdfb4.roa
Signing time:             Wed 24 May 2023 23:26:23 +0000
ROA not before:           Tue 23 May 2023 23:26:23 +0000
ROA not after:            Sat 24 May 2025 23:26:23 +0000
asID:                     272848
IP address blocks:        2803:cd60:6420::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677013 (0x1996d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e53a4a121c18653f9cf4e1bc0246c1e1e322315
        Validity
            Not Before: May 23 23:26:23 2023 GMT
            Not After : May 24 23:26:23 2025 GMT
        Subject: CN=20439e65d77af97f608ae1e2f7cc67fd3b6cdfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:51:9e:48:be:c9:a6:50:4f:30:96:89:8d:
                    55:da:84:03:a7:e7:57:10:c0:cf:b1:cf:17:fa:a9:
                    7f:56:97:ec:10:c2:39:d3:c2:e8:27:7b:28:0a:0f:
                    a1:82:50:82:03:0c:0c:c0:79:c8:04:3d:14:65:35:
                    1d:83:f8:8f:6d:a3:ae:58:4b:73:7a:3d:5e:af:f5:
                    53:05:34:ab:ec:b5:22:21:92:d9:51:46:b6:84:f4:
                    e8:aa:b4:c8:62:af:d9:54:52:09:5e:ae:75:1f:f0:
                    8d:5a:a1:3c:f2:65:78:e6:04:23:14:22:46:19:f4:
                    22:4e:a0:53:ef:88:fc:60:92:b3:a4:67:68:2d:fb:
                    c2:84:1b:52:88:7d:66:cc:17:b8:83:57:00:47:66:
                    ba:d7:48:a1:44:57:8e:25:ee:a1:bd:8a:ef:ec:75:
                    f6:d4:a4:31:76:51:83:7f:32:20:f6:6c:e3:70:cf:
                    ef:d6:61:f6:ee:82:9a:54:78:88:86:d2:e2:62:3c:
                    80:f8:c0:fc:f3:f0:c3:ce:1c:d6:58:55:2b:be:88:
                    6f:a5:04:0c:27:4f:35:c0:38:54:e8:6f:a5:1d:28:
                    75:7b:91:4b:6a:a2:8e:ae:41:df:fd:b0:8f:d9:ef:
                    61:27:9a:55:1a:a4:ee:fc:f8:45:6d:ae:33:07:bc:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:0C:C4:1E:C3:AC:9A:F4:43:8A:62:A7:A6:CC:36:8E:29:1D:0C
            X509v3 Authority Key Identifier:
                keyid:0D:C8:42:59:2F:E7:59:DD:93:BB:9F:D8:1D:AB:D9:FE:9C:AF:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/20439e65d77af97f608ae1e2f7cc67fd3b6cdfb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44774856-6168-45c3-adb2-b12b0c0c20f2/5e53a4a121c18653f9cf4e1bc0246c1e1e322315.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:6420::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:a0:74:40:e2:df:b8:e4:a1:c4:ae:1b:fa:95:b0:d3:54:
         62:75:7a:a6:b8:ac:32:e3:ad:ca:31:6a:40:78:45:ef:37:57:
         2d:a9:08:b3:09:0f:b0:31:5b:3c:cf:34:a3:7f:b2:df:d9:d1:
         ce:ee:89:eb:19:9f:4e:f8:35:8f:f0:31:20:62:21:55:d3:39:
         94:4c:a0:e1:a2:a2:63:3f:f2:51:c6:34:28:e9:fa:b1:84:7a:
         a9:57:58:93:4c:1b:4b:3c:72:06:ee:1c:70:e7:df:6f:6c:2f:
         2b:c8:1e:63:b8:da:26:40:e5:3d:5c:dd:48:73:0f:af:fb:46:
         66:f2:4d:8a:56:a0:1c:e6:5a:d9:99:6e:df:47:a6:fd:6f:28:
         0e:e6:82:d9:94:11:67:13:61:5d:17:ea:e4:94:0b:f6:38:6e:
         79:8d:22:9b:a5:9e:c9:66:73:fa:47:86:81:54:1b:23:29:de:
         31:69:52:d6:f5:4b:c3:7a:16:09:b9:b7:1a:69:d9:83:41:23:
         68:10:2d:0e:71:4d:a3:a3:4c:ce:0a:65:3d:87:4e:2d:08:1c:
         fd:c4:23:b0:05:2c:2d:30:75:f4:fd:1f:1d:84:91:70:7b:f6:
         34:fd:49:d3:fe:17:ca:91:33:ce:57:eb:e1:d7:07:2e:85:08:
         12:b5:0d:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDGZbVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
NTNhNGExMjFjMTg2NTNmOWNmNGUxYmMwMjQ2YzFlMWUzMjIzMTUwHhcNMjMwNTIz
MjMyNjIzWhcNMjUwNTI0MjMyNjIzWjAzMTEwLwYDVQQDEygyMDQzOWU2NWQ3N2Fm
OTdmNjA4YWUxZTJmN2NjNjdmZDNiNmNkZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiURRnki+yaZQTzCWiY1V2oQDp+dXEMDPsc8X+ql/VpfsEMI5
08LoJ3soCg+hglCCAwwMwHnIBD0UZTUdg/iPbaOuWEtzej1er/VTBTSr7LUiIZLZ
UUa2hPToqrTIYq/ZVFIJXq51H/CNWqE88mV45gQjFCJGGfQiTqBT74j8YJKzpGdo
LfvChBtSiH1mzBe4g1cAR2a610ihRFeOJe6hvYrv7HX21KQxdlGDfzIg9mzjcM/v
1mH27oKaVHiIhtLiYjyA+MD88/DDzhzWWFUrvohvpQQMJ081wDhU6G+lHSh1e5FL
aqKOrkHf/bCP2e9hJ5pVGqTu/PhFba4zB7wNtQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIUrDMQew6ya9EOKYqemzDaOKR0MMB8GA1UdIwQYMBaAFA3IQlkv51ndk7uf
2B2r2f6cr92YMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWU1M2E0
YTEyMWMxODY1M2Y5Y2Y0ZTFiYzAyNDZjMWUxZTMyMjMxNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQ3NzQ4NTYtNjE2OC00NWMzLWFkYjItYjEyYjBj
MGMyMGYyLzIwNDM5ZTY1ZDc3YWY5N2Y2MDhhZTFlMmY3Y2M2N2ZkM2I2Y2RmYjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDc3NDg1Ni02MTY4LTQ1YzMtYWRiMi1iMTJi
MGMwYzIwZjIvNWU1M2E0YTEyMWMxODY1M2Y5Y2Y0ZTFiYzAyNDZjMWUxZTMyMjMx
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDzWBkIDANBgkqhkiG9w0BAQsFAAOCAQEAecugdEDi37jk
ocSuG/qVsNNUYnV6prisMuOtyjFqQHhF7zdXLakIswkPsDFbPM80o3+y39nRzu6J
6xmfTvg1j/AxIGIhVdM5lEyg4aKiYz/yUcY0KOn6sYR6qVdYk0wbSzxyBu4ccOff
b2wvK8geY7jaJkDlPVzdSHMPr/tGZvJNilagHOZa2Zlu30em/W8oDuaC2ZQRZxNh
XRfq5JQL9jhueY0im6WeyWZz+keGgVQbIyneMWlS1vVLw3oWCbm3GmnZg0EjaBAt
DnFNo6NMzgplPYdOLQgc/cQjsAUsLTB19P0fHYSRcHv2NP1J0/4XypEzzlfr4dcH
LoUIErUN+Q==
-----END CERTIFICATE-----