Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/e885a651331f0c7f2e2a1ea99460b5730f17fa23.roa
File:                     e885a651331f0c7f2e2a1ea99460b5730f17fa23.roa (raw, json)
Hash identifier:          iVfqVhy6eS0Ov1uMPRJHn/h4HIHskEozBr6gnk1rZ3o=
Subject key identifier:   51:B1:96:DF:0A:0C:86:33:49:CA:30:B5:BA:7B:0C:A6:15:06:2D:96
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       12134A
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/e885a651331f0c7f2e2a1ea99460b5730f17fa23.roa
Signing time:             Wed 14 Jun 2023 12:22:43 +0000
ROA not before:           Tue 13 Jun 2023 12:22:43 +0000
ROA not after:            Sat 14 Jun 2025 12:22:43 +0000
asID:                     271927
IP address blocks:        2803:ea10:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184586 (0x12134a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jun 13 12:22:43 2023 GMT
            Not After : Jun 14 12:22:43 2025 GMT
        Subject: CN=e885a651331f0c7f2e2a1ea99460b5730f17fa23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:e3:3b:54:b5:4f:b9:aa:47:bb:04:20:63:
                    73:2c:ea:e1:67:2f:a1:e2:f8:4b:f1:46:99:c3:89:
                    36:ba:ff:6a:71:e4:ef:bf:a9:de:46:f7:99:75:73:
                    c6:85:e3:21:e3:92:22:6d:21:aa:65:1a:94:89:75:
                    b7:d8:eb:77:09:bc:0e:69:67:bc:36:02:f2:27:7b:
                    a5:51:01:56:9e:7f:fa:fa:bc:87:6f:72:af:48:34:
                    e4:73:f0:03:f5:f8:07:c7:90:c4:f5:92:d5:37:7f:
                    32:8e:d9:32:01:3f:7b:40:2d:78:7f:c4:6d:4c:bd:
                    9b:ce:e6:23:e8:17:b6:16:35:16:dd:b5:55:28:db:
                    96:02:92:da:6f:b0:c4:5b:0f:f4:cd:06:79:ca:d9:
                    20:ae:4f:9a:b4:6c:f1:c4:52:5e:87:86:58:24:e6:
                    e9:51:71:44:68:72:42:fa:12:1f:07:7d:bd:e0:4a:
                    a5:62:7d:10:41:84:b0:4c:8c:57:b8:01:05:14:ef:
                    05:16:69:02:d4:ad:5d:a7:ff:cf:d2:23:d5:d6:1e:
                    7b:ef:61:22:ca:4a:8b:54:65:7f:83:54:99:4c:90:
                    90:85:31:6c:58:87:53:83:15:c7:b0:c2:59:8e:18:
                    4d:34:94:a7:0d:dc:a4:dc:36:60:26:30:f6:db:2d:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B1:96:DF:0A:0C:86:33:49:CA:30:B5:BA:7B:0C:A6:15:06:2D:96
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/e885a651331f0c7f2e2a1ea99460b5730f17fa23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:f0:e8:5d:cb:aa:17:09:bb:5b:bd:e8:af:ab:5c:ba:98:
         da:d3:07:35:f9:7c:46:3e:29:ec:0f:65:8e:59:9b:41:a7:c6:
         a8:1f:bd:ea:0d:28:2c:47:cb:fa:f4:3d:61:64:15:e5:2a:58:
         2a:75:7a:d7:6e:52:44:56:19:2f:b8:56:1b:31:62:15:73:4f:
         65:10:e2:76:6e:10:ff:8e:f3:b8:4a:26:70:f9:b7:85:25:74:
         68:78:5f:cd:92:d0:3c:5d:56:a2:1a:c1:e8:8a:11:54:eb:0c:
         e1:ca:03:32:48:85:26:9c:d9:1c:6d:5b:e7:41:5f:a1:cf:0d:
         d7:ed:22:77:31:b1:17:90:ca:3b:86:05:6f:71:8a:03:4c:c5:
         2f:30:f4:47:84:33:f0:d1:65:ed:2f:3c:72:04:ac:70:fd:8c:
         94:c2:1b:77:10:51:e8:69:5f:71:8c:6a:09:48:00:2c:d3:5e:
         b7:aa:59:29:34:ad:65:3a:a0:8d:35:ed:2d:dd:4e:8c:85:02:
         ac:ec:06:75:93:4c:4d:35:52:bc:3d:54:d1:9d:ee:35:81:87:
         b2:23:10:9b:62:72:13:2c:b6:8a:35:40:ac:be:53:20:0c:61:
         fc:3e:ef:98:50:1f:2a:4f:c3:08:54:87:1b:75:a3:77:a7:31:
         d3:3b:96:be
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDEhNKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
NzI2M2FlOTk2MDIyYWI1NWUxNGI3ZGI2OWE4NTg1NTdhMWJhYzUwHhcNMjMwNjEz
MTIyMjQzWhcNMjUwNjE0MTIyMjQzWjAzMTEwLwYDVQQDEyhlODg1YTY1MTMzMWYw
YzdmMmUyYTFlYTk5NDYwYjU3MzBmMTdmYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtSPjO1S1T7mqR7sEIGNzLOrhZy+h4vhL8UaZw4k2uv9qceTv
v6neRveZdXPGheMh45IibSGqZRqUiXW32Ot3CbwOaWe8NgLyJ3ulUQFWnn/6+ryH
b3KvSDTkc/AD9fgHx5DE9ZLVN38yjtkyAT97QC14f8RtTL2bzuYj6Be2FjUW3bVV
KNuWApLab7DEWw/0zQZ5ytkgrk+atGzxxFJeh4ZYJObpUXFEaHJC+hIfB3294Eql
Yn0QQYSwTIxXuAEFFO8FFmkC1K1dp//P0iPV1h5772EiykqLVGV/g1SZTJCQhTFs
WIdTgxXHsMJZjhhNNJSnDdyk3DZgJjD22y2VMwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFGxlt8KDIYzScowtbp7DKYVBi2WMB8GA1UdIwQYMBaAFJUCnDfzt53sfsgK
pfPiSArGdpYHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGI3MjYz
YWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGUyMzdhMWYtNWM3Zi00MjFmLWFmYzAtNTlmYjRm
MzMwNjk2L2U4ODVhNjUxMzMxZjBjN2YyZTJhMWVhOTk0NjBiNTczMGYxN2ZhMjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTIzN2ExZi01YzdmLTQyMWYtYWZjMC01OWZi
NGYzMzA2OTYvNGI3MjYzYWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD6hAACDANBgkqhkiG9w0BAQsFAAOCAQEAleTw6F3LqhcJ
u1u96K+rXLqY2tMHNfl8Rj4p7A9ljlmbQafGqB+96g0oLEfL+vQ9YWQV5SpYKnV6
125SRFYZL7hWGzFiFXNPZRDidm4Q/47zuEomcPm3hSV0aHhfzZLQPF1WohrB6IoR
VOsM4coDMkiFJpzZHG1b50Ffoc8N1+0idzGxF5DKO4YFb3GKA0zFLzD0R4Qz8NFl
7S88cgSscP2MlMIbdxBR6GlfcYxqCUgALNNet6pZKTStZTqgjTXtLd1OjIUCrOwG
dZNMTTVSvD1U0Z3uNYGHsiMQm2JyEyy2ijVArL5TIAxh/D7vmFAfKk/DCFSHG3Wj
d6cx0zuWvg==
-----END CERTIFICATE-----