Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/1e05c89fb22ca912680eb63ebcc26d5ce1d08c52.roa
File:                     1e05c89fb22ca912680eb63ebcc26d5ce1d08c52.roa (raw, json)
Hash identifier:          K00I39IB+Qb1AbLVnn3xEwHu+V1GZKKVOSgeoTfnJMg=
Subject key identifier:   46:40:2C:BC:63:3F:DA:B8:D8:4A:E2:14:01:A2:6E:56:D8:DE:2A:93
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       10785B
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/1e05c89fb22ca912680eb63ebcc26d5ce1d08c52.roa
Signing time:             Tue 24 Oct 2023 15:53:00 +0000
ROA not before:           Tue 18 Jan 2022 02:00:00 +0000
ROA not after:            Thu 18 Jan 2024 02:00:00 +0000
asID:                     22927
IP address blocks:        2800:380::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079387 (0x10785b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 02:00:00 2022 GMT
            Not After : Jan 18 02:00:00 2024 GMT
        Subject: CN=1e05c89fb22ca912680eb63ebcc26d5ce1d08c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:45:00:94:ef:cc:41:ad:19:3e:98:73:ae:
                    ba:f5:e5:80:06:32:48:9a:9d:95:6a:ae:03:7c:7b:
                    f5:96:47:d1:ff:0f:de:0d:81:cc:f4:99:1a:d4:88:
                    4f:e6:3e:62:b5:04:51:92:36:ef:c9:c7:b6:cc:e4:
                    f4:06:74:19:be:e4:c0:c3:82:18:ac:56:a7:c8:03:
                    e1:a8:c5:bf:c1:f6:b5:1a:d3:2c:a5:5b:51:36:1a:
                    00:1d:38:62:ce:42:a8:30:ee:4d:ce:d4:0b:d2:22:
                    a1:95:c7:b4:4e:57:a6:33:c5:e7:63:90:a9:6d:37:
                    67:a4:af:c5:82:3f:69:75:66:fe:3c:7d:6b:24:3e:
                    83:f3:a4:5a:13:e3:5e:fd:32:b6:3a:51:77:ec:c3:
                    98:84:73:17:1d:ce:84:10:45:23:cf:0d:ae:96:0f:
                    fd:b2:3a:8d:c0:69:2f:24:24:ee:e8:37:17:d6:14:
                    a0:ea:ca:dd:b1:40:3e:fa:66:b8:36:24:ca:c6:63:
                    8d:72:23:7d:4d:0d:7b:17:3c:37:82:46:5c:17:db:
                    8c:d1:4a:5a:9a:6c:80:2c:6e:19:4e:0f:d2:7f:8f:
                    72:f7:68:24:95:fb:c1:64:63:bb:bb:0a:a7:d9:1c:
                    c6:9b:30:8c:1f:5a:56:7c:46:bc:e3:bc:ad:7c:9e:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:2C:BC:63:3F:DA:B8:D8:4A:E2:14:01:A2:6E:56:D8:DE:2A:93
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/1e05c89fb22ca912680eb63ebcc26d5ce1d08c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:2b:71:c1:30:d1:75:8d:df:0f:65:40:3b:b8:50:b5:16:
         de:67:07:94:9c:c7:40:d2:bb:e4:c4:59:12:8b:90:b1:04:19:
         2a:5c:a1:e8:54:e8:ee:16:2e:63:ec:51:6f:e8:22:da:aa:f7:
         09:b1:c2:df:f0:55:83:6e:91:c2:19:4d:44:d5:e1:c9:58:27:
         11:d6:27:e1:87:60:32:1b:2d:ca:e8:5c:0a:7c:1f:93:d8:d3:
         c8:c4:63:89:08:6b:ce:8c:ec:4f:2f:a6:73:96:51:39:06:65:
         87:9e:27:ec:d9:9e:64:1b:5d:82:a4:d9:51:ee:a9:6e:f2:58:
         e1:36:9a:b5:38:e2:16:1c:7f:93:21:d1:69:7d:7e:51:d5:75:
         6c:d1:25:2a:67:0e:9a:de:c9:bf:2c:ce:f6:33:e8:ba:90:26:
         ce:7f:b0:f4:d6:2a:83:19:b3:79:6f:cb:42:d8:50:61:a9:b9:
         4b:7d:08:3d:fc:cf:71:96:85:2d:c3:12:b3:ba:04:82:d0:18:
         e1:f4:5f:9b:b9:bf:5e:8e:ac:8e:48:93:fd:9e:7f:59:db:87:
         83:0d:4d:22:22:5f:07:b4:9f:df:10:3d:b3:cd:fc:66:e6:87:
         f5:5c:c6:83:19:e5:5e:34:1d:98:d8:ef:6c:b7:bf:78:a8:32:
         2c:15:6c:f2
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEHhbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
N2Q5ZGQ5NWVjZmQ2NzExM2RkY2Q0Y2ZmNGNlZDVkODE3N2NmNjUwHhcNMjIwMTE4
MDIwMDAwWhcNMjQwMTE4MDIwMDAwWjAzMTEwLwYDVQQDEygxZTA1Yzg5ZmIyMmNh
OTEyNjgwZWI2M2ViY2MyNmQ1Y2UxZDA4YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsOtFAJTvzEGtGT6Yc6669eWABjJImp2Vaq4DfHv1lkfR/w/e
DYHM9Jka1IhP5j5itQRRkjbvyce2zOT0BnQZvuTAw4IYrFanyAPhqMW/wfa1GtMs
pVtRNhoAHThizkKoMO5NztQL0iKhlce0TlemM8XnY5CpbTdnpK/Fgj9pdWb+PH1r
JD6D86RaE+Ne/TK2OlF37MOYhHMXHc6EEEUjzw2ulg/9sjqNwGkvJCTu6DcX1hSg
6srdsUA++ma4NiTKxmONciN9TQ17Fzw3gkZcF9uM0UpammyALG4ZTg/Sf49y92gk
lfvBZGO7uwqn2RzGmzCMH1pWfEa847ytfJ4xhwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEZALLxjP9q42EriFAGiblbY3iqTMB8GA1UdIwQYMBaAFFiL0np42Y1jk4OV
6eGAfXXGE9EdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjU3ZDlk
ZDk1ZWNmZDY3MTEzZGRjZDRjZmY0Y2VkNWQ4MTc3Y2Y2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzFlMDVjODlmYjIyY2E5MTI2ODBlYjYzZWJjYzI2ZDVjZTFkMDhjNTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvNjU3ZDlkZDk1ZWNmZDY3MTEzZGRjZDRjZmY0Y2VkNWQ4MTc3Y2Y2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgAA4AwDQYJKoZIhvcNAQELBQADggEBAGz1K3HBMNF1jd8P
ZUA7uFC1Ft5nB5Scx0DSu+TEWRKLkLEEGSpcoehU6O4WLmPsUW/oItqq9wmxwt/w
VYNukcIZTUTV4clYJxHWJ+GHYDIbLcroXAp8H5PY08jEY4kIa86M7E8vpnOWUTkG
ZYeeJ+zZnmQbXYKk2VHuqW7yWOE2mrU44hYcf5Mh0Wl9flHVdWzRJSpnDpreyb8s
zvYz6LqQJs5/sPTWKoMZs3lvy0LYUGGpuUt9CD38z3GWhS3DErO6BILQGOH0X5u5
v16OrI5Ik/2ef1nbh4MNTSIiXwe0n98QPbPN/Gbmh/VcxoMZ5V40HZjY72y3v3io
MiwVbPI=
-----END CERTIFICATE-----