Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/01f8a42366ca5de29a530fdd1a2a3cb6a064ab09.roa
File:                     01f8a42366ca5de29a530fdd1a2a3cb6a064ab09.roa (raw, json)
Hash identifier:          pZ9mxjkoKMF2WXfxOoBmU4KEJwoTfzjToegnRifz6nI=
Subject key identifier:   19:4F:E3:8F:C8:31:6F:FD:7C:25:7A:5D:87:69:E9:43:DC:68:44:49
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       0E8657
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/01f8a42366ca5de29a530fdd1a2a3cb6a064ab09.roa
Signing time:             Thu 19 Jan 2023 12:34:59 +0000
ROA not before:           Wed 18 Jan 2023 12:34:20 +0000
ROA not after:            Sun 19 Jan 2025 12:34:20 +0000
asID:                     271927
IP address blocks:        2803:ea10:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951895 (0xe8657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jan 18 12:34:20 2023 GMT
            Not After : Jan 19 12:34:20 2025 GMT
        Subject: CN=01f8a42366ca5de29a530fdd1a2a3cb6a064ab09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:d5:c5:46:be:47:dc:b6:7a:a4:7c:bc:60:
                    5f:9e:18:bd:35:99:21:25:b8:cc:86:30:d7:13:e1:
                    b8:bf:58:3b:cc:fa:32:4b:25:96:c8:92:66:b0:0f:
                    74:e6:69:2e:eb:f0:91:a3:49:c8:58:9f:aa:81:92:
                    ca:a9:27:4d:02:86:87:8f:5b:9c:eb:7c:4d:f2:b0:
                    d0:76:fd:5a:b8:7d:0a:f4:52:43:57:69:4a:f8:a0:
                    0f:52:be:21:ce:47:5e:e1:f0:0a:3d:41:16:e7:da:
                    2a:8c:c3:20:0c:86:46:10:7a:91:25:ec:9f:ae:c9:
                    77:38:ab:e3:07:39:eb:1f:d9:84:d5:bd:f7:a3:0c:
                    46:e9:b5:b4:46:a5:0f:e7:57:25:d6:d1:94:45:23:
                    c1:09:4b:11:e6:3f:bc:fa:48:13:03:a8:17:ca:f9:
                    c1:14:6f:8d:c2:c7:f6:1f:03:42:58:19:a3:12:a3:
                    0e:2b:4f:01:92:21:30:4f:15:50:02:f9:4c:57:ea:
                    44:79:68:94:d3:34:6b:20:e0:1a:7c:05:ca:dd:df:
                    2f:ba:de:35:47:ac:ce:44:0d:bf:0b:85:fe:15:e6:
                    8a:0c:df:61:77:e1:16:03:fd:74:b7:81:6f:f6:98:
                    4d:b0:50:b2:e1:00:48:27:b4:df:79:9a:8b:f2:b9:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:E3:8F:C8:31:6F:FD:7C:25:7A:5D:87:69:E9:43:DC:68:44:49
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/01f8a42366ca5de29a530fdd1a2a3cb6a064ab09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:85:f8:52:dd:f4:fe:5e:f5:d9:84:b3:88:81:2f:12:ac:
         b2:78:5c:69:7c:e3:af:06:93:e1:54:ee:3f:43:01:0b:49:d7:
         02:37:6d:8c:a5:fc:a1:2e:65:19:79:6e:72:38:6c:e4:73:0f:
         d1:00:de:a8:f5:19:93:df:be:c4:ce:23:88:6a:aa:42:b5:b5:
         a3:04:da:79:fc:74:04:a8:b1:a1:bc:2a:1b:3c:b8:17:d1:f5:
         c3:21:5d:66:66:2b:f3:f1:7e:f0:ce:1f:dd:d7:09:10:35:65:
         3f:61:c2:df:ef:93:c1:65:e8:50:89:00:c3:5a:ea:b0:1c:54:
         a4:87:79:ac:8e:82:d0:52:c1:27:db:a2:10:12:39:34:f6:df:
         b3:de:18:6c:1d:a0:16:33:df:62:18:e9:3d:2c:32:4f:1f:8d:
         f7:d4:5e:0d:b4:83:31:11:c5:13:53:16:3f:b8:42:a0:52:42:
         71:50:9c:93:76:11:8d:9b:b4:b6:b0:f2:27:1f:2f:90:01:ee:
         e6:3c:82:ec:8b:2a:cc:c2:3c:0f:9f:95:3c:98:6e:4e:d1:2f:
         ad:13:d5:2f:b6:c5:be:13:7a:81:38:6c:7c:3f:d3:1e:4c:33:
         af:88:ee:69:39:88:d3:9a:a8:31:8a:98:46:20:13:37:f1:96:
         22:f1:f7:a9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDoZXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
NzI2M2FlOTk2MDIyYWI1NWUxNGI3ZGI2OWE4NTg1NTdhMWJhYzUwHhcNMjMwMTE4
MTIzNDIwWhcNMjUwMTE5MTIzNDIwWjAzMTEwLwYDVQQDEygwMWY4YTQyMzY2Y2E1
ZGUyOWE1MzBmZGQxYTJhM2NiNmEwNjRhYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtJPVxUa+R9y2eqR8vGBfnhi9NZkhJbjMhjDXE+G4v1g7zPoy
SyWWyJJmsA905mku6/CRo0nIWJ+qgZLKqSdNAoaHj1uc63xN8rDQdv1auH0K9FJD
V2lK+KAPUr4hzkde4fAKPUEW59oqjMMgDIZGEHqRJeyfrsl3OKvjBznrH9mE1b33
owxG6bW0RqUP51cl1tGURSPBCUsR5j+8+kgTA6gXyvnBFG+Nwsf2HwNCWBmjEqMO
K08BkiEwTxVQAvlMV+pEeWiU0zRrIOAafAXK3d8vut41R6zORA2/C4X+FeaKDN9h
d+EWA/10t4Fv9phNsFCy4QBIJ7TfeZqL8rlgZwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFBlP44/IMW/9fCV6XYdp6UPcaERJMB8GA1UdIwQYMBaAFJUCnDfzt53sfsgK
pfPiSArGdpYHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGI3MjYz
YWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGUyMzdhMWYtNWM3Zi00MjFmLWFmYzAtNTlmYjRm
MzMwNjk2LzAxZjhhNDIzNjZjYTVkZTI5YTUzMGZkZDFhMmEzY2I2YTA2NGFiMDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTIzN2ExZi01YzdmLTQyMWYtYWZjMC01OWZi
NGYzMzA2OTYvNGI3MjYzYWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD6hAABTANBgkqhkiG9w0BAQsFAAOCAQEAOuKF+FLd9P5e
9dmEs4iBLxKssnhcaXzjrwaT4VTuP0MBC0nXAjdtjKX8oS5lGXlucjhs5HMP0QDe
qPUZk9++xM4jiGqqQrW1owTaefx0BKixobwqGzy4F9H1wyFdZmYr8/F+8M4f3dcJ
EDVlP2HC3++TwWXoUIkAw1rqsBxUpId5rI6C0FLBJ9uiEBI5NPbfs94YbB2gFjPf
YhjpPSwyTx+N99ReDbSDMRHFE1MWP7hCoFJCcVCck3YRjZu0trDyJx8vkAHu5jyC
7IsqzMI8D5+VPJhuTtEvrRPVL7bFvhN6gThsfD/THkwzr4juaTmI05qoMYqYRiAT
N/GWIvH3qQ==
-----END CERTIFICATE-----