Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/49d9199ae7b294472aa5788dff50a48566f5b8aa.roa
File:                     49d9199ae7b294472aa5788dff50a48566f5b8aa.roa (raw, json)
Hash identifier:          iD0GhtwSXIdkC0mTFZ4z+xhrBaE2bl6jhZSFanSQTPw=
Subject key identifier:   76:89:8E:D8:C4:65:6D:97:C0:6C:33:89:B9:87:C9:4F:AB:76:D2:CC
Certificate issuer:       /CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
Certificate serial:       04BF89
Authority key identifier: 3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/49d9199ae7b294472aa5788dff50a48566f5b8aa.roa
Signing time:             Wed 31 May 2023 14:39:36 +0000
ROA not before:           Tue 30 May 2023 14:39:35 +0000
ROA not after:            Sat 31 May 2025 14:39:35 +0000
asID:                     270037
IP address blocks:        2803:15e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311177 (0x4bf89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
        Validity
            Not Before: May 30 14:39:35 2023 GMT
            Not After : May 31 14:39:35 2025 GMT
        Subject: CN=49d9199ae7b294472aa5788dff50a48566f5b8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:cd:c5:cb:87:0e:d1:57:72:7e:ce:d3:0d:
                    66:20:35:08:54:4b:6e:a3:72:ab:eb:5b:32:01:74:
                    09:c8:a6:62:a7:53:48:01:14:44:e6:cd:dd:7d:e0:
                    90:a8:06:df:41:ff:d8:26:f6:a2:9b:0c:1e:75:25:
                    2c:a8:ce:b1:50:56:18:40:05:f1:b9:12:9f:a3:74:
                    83:19:b7:51:86:c5:53:f7:60:2c:42:10:8c:d7:85:
                    3f:89:6b:0e:bf:ec:44:89:f4:da:a6:8a:3a:16:e6:
                    aa:54:f9:14:ff:d5:f9:9b:f6:d6:3d:4c:ad:61:24:
                    19:cc:a7:d4:81:97:94:39:63:c1:9a:04:2a:ed:2c:
                    55:45:d7:30:9a:ea:9d:9e:d1:9f:1f:6b:50:20:50:
                    c6:0c:16:99:15:73:8d:cb:2e:08:03:5e:a1:a4:fd:
                    4c:38:99:24:2e:79:55:c9:60:83:20:6c:81:c1:14:
                    3c:11:42:56:43:8e:79:c5:0e:dd:24:d2:71:c5:65:
                    9a:9d:af:ef:1f:fe:71:8e:d5:a9:6f:5c:9a:3c:84:
                    1e:b8:92:9c:99:6f:fd:7e:e3:09:4f:fa:75:cf:25:
                    44:03:1f:5e:50:d3:7e:95:98:f2:b2:47:40:f7:75:
                    58:65:e4:ef:22:7b:5f:1f:7f:79:e4:81:35:48:a2:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:89:8E:D8:C4:65:6D:97:C0:6C:33:89:B9:87:C9:4F:AB:76:D2:CC
            X509v3 Authority Key Identifier:
                keyid:3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/49d9199ae7b294472aa5788dff50a48566f5b8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:75:a6:36:96:b6:10:4c:50:09:33:a0:06:ba:0b:8a:11:
         a5:74:e0:1d:fe:50:0f:1b:c7:40:e4:f8:ea:f3:7b:bf:97:da:
         19:f1:2b:53:91:45:20:e3:38:4b:2c:4c:83:db:1f:1d:f8:20:
         b9:a3:9e:fd:e7:8f:35:b9:89:c8:79:a0:6d:64:ca:61:76:5e:
         31:43:a3:96:7e:78:af:d8:c3:63:6f:4a:65:53:8f:c4:7c:e6:
         3b:2d:35:19:d7:55:f9:ff:60:4b:f2:7c:cc:53:27:3e:68:c3:
         77:14:76:58:7b:0d:37:4f:22:58:6f:bf:b4:6d:12:f9:84:9c:
         72:2a:0a:a2:63:f9:dc:ca:56:d7:6d:ad:fb:7a:15:61:a1:80:
         d9:97:66:7f:fd:83:c3:5f:6c:a5:37:87:56:06:3c:c4:96:6c:
         46:11:88:cb:e0:8c:2a:01:5e:36:6d:74:2e:90:59:31:67:a3:
         22:40:9b:e6:7a:76:e8:c1:d9:4c:11:32:39:6a:d1:4b:fe:e0:
         11:05:8f:2e:fe:73:99:3a:2f:56:41:e2:ed:3b:ca:cb:d5:1f:
         69:78:78:12:a4:4e:de:e1:f7:54:d2:53:27:90:aa:e9:be:a5:
         78:41:52:a0:c1:f3:33:43:78:95:1d:b9:9e:c0:4e:2a:d3:48:
         e6:96:66:09
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBL+JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
MzY2MzQ3YmUzNTUxYTkwMGVlMjJhOGY4ZTllMWRlOGZmYTFkMzEwHhcNMjMwNTMw
MTQzOTM1WhcNMjUwNTMxMTQzOTM1WjAzMTEwLwYDVQQDEyg0OWQ5MTk5YWU3YjI5
NDQ3MmFhNTc4OGRmZjUwYTQ4NTY2ZjViOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo2TNxcuHDtFXcn7O0w1mIDUIVEtuo3Kr61syAXQJyKZip1NI
ARRE5s3dfeCQqAbfQf/YJvaimwwedSUsqM6xUFYYQAXxuRKfo3SDGbdRhsVT92As
QhCM14U/iWsOv+xEifTapoo6FuaqVPkU/9X5m/bWPUytYSQZzKfUgZeUOWPBmgQq
7SxVRdcwmuqdntGfH2tQIFDGDBaZFXONyy4IA16hpP1MOJkkLnlVyWCDIGyBwRQ8
EUJWQ455xQ7dJNJxxWWana/vH/5xjtWpb1yaPIQeuJKcmW/9fuMJT/p1zyVEAx9e
UNN+lZjyskdA93VYZeTvIntfH3955IE1SKIcNwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHaJjtjEZW2XwGwzibmHyU+rdtLMMB8GA1UdIwQYMBaAFDqE0zAXzTCje5xD
sofiLyMytiYCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWYzNjYz
NDdiZTM1NTFhOTAwZWUyMmE4ZjhlOWUxZGU4ZmZhMWQzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGZhMDE2OWQtZjgyZi00MjBjLWI2ODktMGE2NjQw
NjE4ZmUxLzQ5ZDkxOTlhZTdiMjk0NDcyYWE1Nzg4ZGZmNTBhNDg1NjZmNWI4YWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZmEwMTY5ZC1mODJmLTQyMGMtYjY4OS0wYTY2
NDA2MThmZTEvMWYzNjYzNDdiZTM1NTFhOTAwZWUyMmE4ZjhlOWUxZGU4ZmZhMWQz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDFeAwDQYJKoZIhvcNAQELBQADggEBABvEdaY2lrYQTFAJ
M6AGuguKEaV04B3+UA8bx0Dk+Orze7+X2hnxK1ORRSDjOEssTIPbHx34ILmjnv3n
jzW5ich5oG1kymF2XjFDo5Z+eK/Yw2NvSmVTj8R85jstNRnXVfn/YEvyfMxTJz5o
w3cUdlh7DTdPIlhvv7RtEvmEnHIqCqJj+dzKVtdtrft6FWGhgNmXZn/9g8NfbKU3
h1YGPMSWbEYRiMvgjCoBXjZtdC6QWTFnoyJAm+Z6dujB2UwRMjlq0Uv+4BEFjy7+
c5k6L1ZB4u07ysvVH2l4eBKkTt7h91TSUyeQqum+pXhBUqDB8zNDeJUduZ7ATirT
SOaWZgk=
-----END CERTIFICATE-----