Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/455d0dc127dee0805ddc15fa85d29f6dec5446c4.roa
File:                     455d0dc127dee0805ddc15fa85d29f6dec5446c4.roa (raw, json)
Hash identifier:          bcPbqYDX13I3Wtzslo6lk8OZoAK/neXC6GbV1jcwq54=
Subject key identifier:   4B:60:AA:8F:AA:52:BD:9A:81:83:CE:21:D5:AD:53:26:5D:60:76:CD
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       0F64B6
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/455d0dc127dee0805ddc15fa85d29f6dec5446c4.roa
Signing time:             Thu 23 Feb 2023 15:57:02 +0000
ROA not before:           Tue 17 Jan 2023 12:34:20 +0000
ROA not after:            Sun 19 Jan 2025 12:34:20 +0000
asID:                     271927
IP address blocks:        2803:ea10:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008822 (0xf64b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jan 17 12:34:20 2023 GMT
            Not After : Jan 19 12:34:20 2025 GMT
        Subject: CN=455d0dc127dee0805ddc15fa85d29f6dec5446c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:2b:cc:db:e5:0e:77:94:7d:45:7c:5a:4b:
                    23:ca:13:99:93:8a:85:f0:36:e3:86:ed:2b:dc:49:
                    f3:59:5d:49:20:43:11:d2:eb:47:7f:88:f6:7d:83:
                    b6:ce:eb:d0:94:ad:a2:45:b5:26:e7:18:16:b3:02:
                    16:f3:21:0a:de:76:d1:2c:4f:38:a3:11:03:57:8e:
                    30:e6:cf:e7:a9:47:07:d5:a9:95:9c:eb:8f:9f:93:
                    0a:47:89:81:c7:32:32:e6:ae:aa:43:7c:fa:c5:93:
                    0a:d9:86:c0:3f:5d:de:9c:13:33:f5:55:cb:32:85:
                    85:53:3a:b0:f3:f5:c1:23:5e:9d:fe:13:7e:9f:14:
                    c8:09:3a:3e:3a:1d:d6:20:f2:7f:50:0c:9c:57:d7:
                    1b:fc:f5:9f:e2:e7:de:cd:f6:df:4e:a4:51:00:ad:
                    7e:01:5c:b6:17:dd:c1:c0:f0:b0:c7:5f:06:44:4c:
                    13:1f:7d:3d:d2:67:f7:f2:56:cb:95:fb:4e:b5:96:
                    1c:bb:a2:40:2a:8a:11:45:e6:02:f2:33:41:3f:7c:
                    7b:99:34:b7:b1:11:27:43:e2:d4:cc:37:e8:b4:77:
                    10:52:de:b0:f4:cd:10:86:55:76:7d:d5:ca:1a:a3:
                    38:30:c3:b5:84:86:c8:4a:40:29:c1:07:6d:2a:8c:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:AA:8F:AA:52:BD:9A:81:83:CE:21:D5:AD:53:26:5D:60:76:CD
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/455d0dc127dee0805ddc15fa85d29f6dec5446c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:bb:39:3d:be:5c:65:64:5c:d7:45:47:e1:af:e6:02:1b:20:
         1c:f0:30:97:70:71:7e:6b:18:ec:80:7e:a1:59:ee:5a:6e:8f:
         4f:d3:0f:b0:54:e7:2c:15:c7:8f:5f:cd:c9:d1:97:92:40:53:
         b5:9e:04:ae:0b:11:52:33:79:15:28:e2:6c:ea:dd:59:3b:47:
         73:17:79:b9:b7:19:61:9e:a9:31:e7:b4:a6:85:13:4a:96:0c:
         07:81:b1:32:26:c2:da:e3:12:c3:ce:50:84:c2:bb:c5:f9:2a:
         d1:2a:52:37:0e:cf:1e:23:a3:dd:ea:55:81:f2:3f:1e:1a:13:
         27:12:91:23:8b:1e:ba:c8:94:fd:0c:58:96:56:00:70:ad:ba:
         6f:53:c0:db:54:d5:7f:7f:ed:c1:ca:0b:20:57:dc:2a:4c:8e:
         f8:1a:45:9f:f0:73:ea:6e:81:5c:4a:cb:1e:65:09:c0:52:07:
         70:92:77:cc:8b:67:83:fe:e4:90:f9:b0:b5:60:80:74:a7:17:
         b7:6e:ee:cf:f0:0b:44:39:be:1b:74:c6:f9:09:a6:ce:e0:1b:
         a6:6f:87:1f:77:72:7a:cf:2f:07:f4:1d:1b:85:b6:7b:66:cb:
         6b:97:90:6c:02:e7:52:fc:a7:15:12:28:08:d5:a7:83:82:af:
         83:e7:9b:be
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDD2S2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
NzI2M2FlOTk2MDIyYWI1NWUxNGI3ZGI2OWE4NTg1NTdhMWJhYzUwHhcNMjMwMTE3
MTIzNDIwWhcNMjUwMTE5MTIzNDIwWjAzMTEwLwYDVQQDEyg0NTVkMGRjMTI3ZGVl
MDgwNWRkYzE1ZmE4NWQyOWY2ZGVjNTQ0NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxB8rzNvlDneUfUV8WksjyhOZk4qF8Dbjhu0r3EnzWV1JIEMR
0utHf4j2fYO2zuvQlK2iRbUm5xgWswIW8yEK3nbRLE84oxEDV44w5s/nqUcH1amV
nOuPn5MKR4mBxzIy5q6qQ3z6xZMK2YbAP13enBMz9VXLMoWFUzqw8/XBI16d/hN+
nxTICTo+Oh3WIPJ/UAycV9cb/PWf4ufezfbfTqRRAK1+AVy2F93BwPCwx18GREwT
H3090mf38lbLlftOtZYcu6JAKooRReYC8jNBP3x7mTS3sREnQ+LUzDfotHcQUt6w
9M0QhlV2fdXKGqM4MMO1hIbISkApwQdtKowhSwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEtgqo+qUr2agYPOIdWtUyZdYHbNMB8GA1UdIwQYMBaAFJUCnDfzt53sfsgK
pfPiSArGdpYHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGI3MjYz
YWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGUyMzdhMWYtNWM3Zi00MjFmLWFmYzAtNTlmYjRm
MzMwNjk2LzQ1NWQwZGMxMjdkZWUwODA1ZGRjMTVmYTg1ZDI5ZjZkZWM1NDQ2YzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTIzN2ExZi01YzdmLTQyMWYtYWZjMC01OWZi
NGYzMzA2OTYvNGI3MjYzYWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD6hAABTANBgkqhkiG9w0BAQsFAAOCAQEAjLs5Pb5cZWRc
10VH4a/mAhsgHPAwl3BxfmsY7IB+oVnuWm6PT9MPsFTnLBXHj1/NydGXkkBTtZ4E
rgsRUjN5FSjibOrdWTtHcxd5ubcZYZ6pMee0poUTSpYMB4GxMibC2uMSw85QhMK7
xfkq0SpSNw7PHiOj3epVgfI/HhoTJxKRI4seusiU/QxYllYAcK26b1PA21TVf3/t
wcoLIFfcKkyO+BpFn/Bz6m6BXErLHmUJwFIHcJJ3zItng/7kkPmwtWCAdKcXt27u
z/ALRDm+G3TG+QmmzuAbpm+HH3dyes8vB/QdG4W2e2bLa5eQbALnUvynFRIoCNWn
g4Kvg+ebvg==
-----END CERTIFICATE-----