Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/5859e775512849fb9ab5370ab314d817e4e6e82a.roa
File:                     5859e775512849fb9ab5370ab314d817e4e6e82a.roa (raw, json)
Hash identifier:          kGoPdf4hNd32qTdkyu7u/ANLnpprgRZ7GDjn6+k9O3w=
Subject key identifier:   19:FE:61:A0:E5:3D:E6:90:30:0B:0B:8B:30:CA:4D:78:12:80:4C:7B
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       1710D3
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/5859e775512849fb9ab5370ab314d817e4e6e82a.roa
Signing time:             Fri 05 Jan 2024 13:06:01 +0000
ROA not before:           Fri 05 Jan 2024 13:06:01 +0000
ROA not after:            Mon 05 Jan 2026 13:06:01 +0000
asID:                     271927
IP address blocks:        2803:ea10:1aa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511635 (0x1710d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jan  5 13:06:01 2024 GMT
            Not After : Jan  5 13:06:01 2026 GMT
        Subject: CN=5859e775512849fb9ab5370ab314d817e4e6e82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:72:0e:c6:7f:71:2d:ae:ac:ef:14:12:ff:
                    f5:a8:2b:3b:20:4d:d1:75:99:1d:6e:a4:50:72:5e:
                    b0:eb:b0:0e:9d:47:e1:75:a7:f8:78:a6:2b:41:e8:
                    3a:5d:61:de:be:4e:f7:75:26:6b:1c:1f:50:cb:3e:
                    0c:d1:7e:05:41:41:75:65:13:d2:fa:88:85:36:3d:
                    a3:f4:72:5b:c6:01:f4:57:53:88:ca:e2:b6:9c:53:
                    8d:6a:9b:2f:5f:d8:39:33:c6:4b:56:01:00:54:4e:
                    80:b8:2d:14:9e:a9:1c:22:e2:35:c5:ab:13:55:80:
                    79:31:01:69:1b:fa:f0:05:f0:bf:01:44:80:b6:ee:
                    f1:7c:55:54:71:19:5c:68:49:15:26:af:5f:05:87:
                    90:63:7c:4e:e9:6d:2c:da:95:e8:ae:08:2f:31:af:
                    4a:71:14:03:d7:c7:e0:88:6b:c9:08:80:c2:2a:c7:
                    2c:9d:0d:f1:ee:d5:e7:3a:36:22:82:be:01:e1:13:
                    3d:c1:14:60:32:76:b9:51:96:b6:dd:46:44:9e:98:
                    e2:0a:de:d8:3a:e8:e4:46:f8:95:89:a9:38:38:46:
                    a7:b9:3c:ce:21:b9:0c:8b:f3:6d:f9:21:bd:e1:1f:
                    3b:09:2e:04:cb:29:7f:4c:e1:a0:c0:91:6e:ff:a7:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FE:61:A0:E5:3D:E6:90:30:0B:0B:8B:30:CA:4D:78:12:80:4C:7B
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/5859e775512849fb9ab5370ab314d817e4e6e82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:1aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:48:fb:65:d3:b5:f4:55:bf:bc:a2:0e:5b:3a:e5:4c:e2:
         ef:e0:5c:cd:c8:00:b0:c0:85:8c:07:ed:29:2c:76:12:2e:c1:
         5a:ce:cf:cc:9a:86:58:96:5f:0e:5d:1c:d3:14:40:fc:1e:8a:
         cb:84:e0:c7:5d:8a:a7:d9:e2:4e:fe:70:43:b4:6c:87:d7:c7:
         ab:ee:ea:a6:55:a2:fc:25:3e:73:1e:e1:30:33:c9:ff:26:09:
         71:c8:86:19:c2:82:7f:12:93:2b:5d:02:9e:4a:cb:1a:50:85:
         ca:bf:0b:de:2f:bc:99:95:fd:ab:d4:8d:a7:97:45:80:b6:97:
         27:c9:1a:c3:93:8c:45:42:6c:c2:3f:0c:8e:3d:e5:61:3f:a4:
         99:0d:c7:92:69:c4:06:20:c6:d0:37:b6:74:0e:58:46:9b:d7:
         fa:5c:76:d0:43:0e:60:0e:94:fb:46:0e:4f:40:34:d4:02:be:
         2a:da:ec:10:3b:8c:ff:b1:3e:5c:4f:59:89:47:86:d4:56:45:
         9a:5f:31:43:19:94:4c:fe:9c:72:a1:52:f5:95:ed:66:ae:e1:
         5e:a8:42:8f:69:d5:ab:bf:c4:98:fa:7c:c3:65:6a:4a:05:a6:
         36:1a:2a:4d:6a:f3:4e:eb:fd:72:59:27:33:98:cb:1f:2c:fb:
         01:b1:60:b5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFxDTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
NzI2M2FlOTk2MDIyYWI1NWUxNGI3ZGI2OWE4NTg1NTdhMWJhYzUwHhcNMjQwMTA1
MTMwNjAxWhcNMjYwMTA1MTMwNjAxWjAzMTEwLwYDVQQDEyg1ODU5ZTc3NTUxMjg0
OWZiOWFiNTM3MGFiMzE0ZDgxN2U0ZTZlODJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnWNyDsZ/cS2urO8UEv/1qCs7IE3RdZkdbqRQcl6w67AOnUfh
daf4eKYrQeg6XWHevk73dSZrHB9Qyz4M0X4FQUF1ZRPS+oiFNj2j9HJbxgH0V1OI
yuK2nFONapsvX9g5M8ZLVgEAVE6AuC0UnqkcIuI1xasTVYB5MQFpG/rwBfC/AUSA
tu7xfFVUcRlcaEkVJq9fBYeQY3xO6W0s2pXorggvMa9KcRQD18fgiGvJCIDCKscs
nQ3x7tXnOjYigr4B4RM9wRRgMna5UZa23UZEnpjiCt7YOujkRviViak4OEanuTzO
IbkMi/Nt+SG94R87CS4Eyyl/TOGgwJFu/6cKtQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFBn+YaDlPeaQMAsLizDKTXgSgEx7MB8GA1UdIwQYMBaAFJUCnDfzt53sfsgK
pfPiSArGdpYHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGI3MjYz
YWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGUyMzdhMWYtNWM3Zi00MjFmLWFmYzAtNTlmYjRm
MzMwNjk2LzU4NTllNzc1NTEyODQ5ZmI5YWI1MzcwYWIzMTRkODE3ZTRlNmU4MmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTIzN2ExZi01YzdmLTQyMWYtYWZjMC01OWZi
NGYzMzA2OTYvNGI3MjYzYWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD6hABqjANBgkqhkiG9w0BAQsFAAOCAQEAQapI+2XTtfRV
v7yiDls65Uzi7+BczcgAsMCFjAftKSx2Ei7BWs7PzJqGWJZfDl0c0xRA/B6Ky4Tg
x12Kp9niTv5wQ7Rsh9fHq+7qplWi/CU+cx7hMDPJ/yYJcciGGcKCfxKTK10CnkrL
GlCFyr8L3i+8mZX9q9SNp5dFgLaXJ8kaw5OMRUJswj8Mjj3lYT+kmQ3HkmnEBiDG
0De2dA5YRpvX+lx20EMOYA6U+0YOT0A01AK+KtrsEDuM/7E+XE9ZiUeG1FZFml8x
QxmUTP6ccqFS9ZXtZq7hXqhCj2nVq7/EmPp8w2VqSgWmNhoqTWrzTuv9clknM5jL
Hyz7AbFgtQ==
-----END CERTIFICATE-----