Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/48b0bdbf40c8a9042b23a0030c4d82acbe054dfb.roa
File:                     48b0bdbf40c8a9042b23a0030c4d82acbe054dfb.roa (raw, json)
Hash identifier:          tV2+oVipf8YHPq4HD3Bs8XmkFgI6kvalsUaLO8ac85s=
Subject key identifier:   C0:F7:C7:0A:87:85:41:47:E5:56:B5:74:C7:02:34:C9:A5:82:A4:40
Certificate issuer:       /CN=44185224cf7ca78dbccca01419f06c7cc212b495
Certificate serial:       18F48C
Authority key identifier: DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/48b0bdbf40c8a9042b23a0030c4d82acbe054dfb.roa
Signing time:             Mon 20 Jun 2022 13:26:57 +0000
ROA not before:           Mon 20 Jun 2022 03:00:00 +0000
ROA not after:            Thu 20 Jun 2024 03:00:00 +0000
asID:                     47869
IP address blocks:        2803:8080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635468 (0x18f48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Validity
            Not Before: Jun 20 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2024 GMT
        Subject: CN=48b0bdbf40c8a9042b23a0030c4d82acbe054dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:6f:ef:cb:84:97:d9:e4:0b:ce:86:ba:a6:
                    5c:13:bb:96:be:a4:16:84:29:e9:89:78:09:d4:de:
                    e7:d0:3e:5e:c4:a1:d4:8c:8f:53:9c:c1:ad:d3:90:
                    eb:37:9d:43:b1:c8:8f:71:b2:77:14:eb:e9:0c:cf:
                    4e:fe:bd:69:70:93:2e:2d:8c:34:a1:3c:fb:11:98:
                    31:86:c8:b8:82:29:d2:4c:b0:15:5f:dc:6a:07:ad:
                    e7:4e:f6:2e:7f:1e:6e:a4:ea:02:f1:95:f4:cf:1f:
                    9d:48:fb:bd:48:be:a9:0a:67:e2:2d:26:f2:23:d3:
                    e9:9f:da:22:7c:fe:84:2f:8e:16:0e:85:de:52:c0:
                    91:0f:0d:07:15:cf:bf:41:7b:cc:e1:62:c3:bf:7b:
                    33:5f:08:f0:bc:61:b7:66:5a:aa:77:87:a8:5c:fe:
                    27:db:72:db:03:9f:be:8a:6c:67:49:d7:21:21:02:
                    d2:d4:a4:bd:90:4e:01:87:09:04:dc:20:77:8c:91:
                    f4:8b:a4:d8:9b:33:0f:d0:09:9a:24:d6:6b:38:76:
                    55:cb:27:39:d8:0a:14:43:82:96:4e:97:b9:1b:13:
                    98:fa:5b:dc:44:06:15:cc:62:85:b1:11:32:4d:9c:
                    a5:bd:8c:7c:15:1d:3b:94:52:07:1d:6a:14:fb:41:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:C7:0A:87:85:41:47:E5:56:B5:74:C7:02:34:C9:A5:82:A4:40
            X509v3 Authority Key Identifier:
                keyid:DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/48b0bdbf40c8a9042b23a0030c4d82acbe054dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:05:4b:df:ac:46:fc:81:9a:b8:11:0a:8d:98:79:35:c7:da:
         40:69:f4:65:54:b8:d6:8f:bb:e7:80:ea:a9:d6:f5:41:77:b7:
         6b:1f:01:db:87:2e:d4:de:0a:36:b1:12:a8:16:31:00:ee:2a:
         39:58:1b:c7:98:74:95:12:43:de:9f:a1:fc:21:3d:c4:43:c9:
         03:43:43:a3:03:cb:34:5e:f3:b3:a1:d9:e2:4e:e6:91:e2:6c:
         1b:38:6d:bb:c4:e8:0b:3e:13:9e:1f:80:33:3b:17:94:3b:cc:
         da:47:07:83:79:0c:21:d9:26:bc:44:08:a2:5f:d6:4c:65:c5:
         cb:db:c1:70:74:56:94:0d:91:3a:44:5a:68:f0:4b:89:f2:e7:
         53:85:15:a4:36:82:17:19:83:87:ed:97:c1:23:16:b1:28:4e:
         7f:d3:7a:f5:36:84:6d:be:fb:67:0b:07:a9:ff:dc:4a:72:38:
         ed:e7:d1:6d:71:dd:8e:7b:ed:3e:a8:39:6a:a5:6f:82:60:46:
         42:79:94:0b:30:83:c8:37:8a:d2:29:a5:59:c4:a7:5b:90:fd:
         35:2b:56:e4:df:76:0c:96:a7:9a:ae:23:69:a6:74:34:17:57:
         09:4f:2a:63:e2:43:13:81:de:f7:a5:ed:c9:1e:12:f0:27:4e:
         d6:c0:05:8a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGPSMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0
MTg1MjI0Y2Y3Y2E3OGRiY2NjYTAxNDE5ZjA2YzdjYzIxMmI0OTUwHhcNMjIwNjIw
MDMwMDAwWhcNMjQwNjIwMDMwMDAwWjAzMTEwLwYDVQQDEyg0OGIwYmRiZjQwYzhh
OTA0MmIyM2EwMDMwYzRkODJhY2JlMDU0ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApF1v78uEl9nkC86GuqZcE7uWvqQWhCnpiXgJ1N7n0D5exKHU
jI9TnMGt05DrN51DsciPcbJ3FOvpDM9O/r1pcJMuLYw0oTz7EZgxhsi4ginSTLAV
X9xqB63nTvYufx5upOoC8ZX0zx+dSPu9SL6pCmfiLSbyI9Ppn9oifP6EL44WDoXe
UsCRDw0HFc+/QXvM4WLDv3szXwjwvGG3Zlqqd4eoXP4n23LbA5++imxnSdchIQLS
1KS9kE4BhwkE3CB3jJH0i6TYmzMP0AmaJNZrOHZVyyc52AoUQ4KWTpe5GxOY+lvc
RAYVzGKFsREyTZylvYx8FR07lFIHHWoU+0E7vQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMD3xwqHhUFH5Va1dMcCNMmlgqRAMB8GA1UdIwQYMBaAFN9SiZLlNfTtcBIh
jjaYXzyQHjIgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDQxODUy
MjRjZjdjYTc4ZGJjY2NhMDE0MTlmMDZjN2NjMjEyYjQ5NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGExYTE2NTItNTQ5OS00ODdmLThiOTctMWExMmVm
MjdkOWQ2LzQ4YjBiZGJmNDBjOGE5MDQyYjIzYTAwMzBjNGQ4MmFjYmUwNTRkZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YTFhMTY1Mi01NDk5LTQ4N2YtOGI5Ny0xYTEy
ZWYyN2Q5ZDYvNDQxODUyMjRjZjdjYTc4ZGJjY2NhMDE0MTlmMDZjN2NjMjEyYjQ5
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDgIAwDQYJKoZIhvcNAQELBQADggEBAM4FS9+sRvyBmrgR
Co2YeTXH2kBp9GVUuNaPu+eA6qnW9UF3t2sfAduHLtTeCjaxEqgWMQDuKjlYG8eY
dJUSQ96fofwhPcRDyQNDQ6MDyzRe87Oh2eJO5pHibBs4bbvE6As+E54fgDM7F5Q7
zNpHB4N5DCHZJrxECKJf1kxlxcvbwXB0VpQNkTpEWmjwS4ny51OFFaQ2ghcZg4ft
l8EjFrEoTn/TevU2hG2++2cLB6n/3EpyOO3n0W1x3Y577T6oOWqlb4JgRkJ5lAsw
g8g3itIppVnEp1uQ/TUrVuTfdgyWp5quI2mmdDQXVwlPKmPiQxOB3vel7ckeEvAn
TtbABYo=
-----END CERTIFICATE-----