Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/20ca6e220fa88632230bc78d92c8830ff1d7c617.roa
File:                     20ca6e220fa88632230bc78d92c8830ff1d7c617.roa (raw, json)
Hash identifier:          p2lreirHeUNW5L6w2LFvTqLzXyE3kYav648hzXRLAdM=
Subject key identifier:   AA:3A:F6:E3:86:59:66:02:71:19:B7:E6:AB:CE:FB:9C:E4:66:3B:E4
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       194DDD
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/20ca6e220fa88632230bc78d92c8830ff1d7c617.roa
Signing time:             Mon 17 Apr 2023 23:17:57 +0000
ROA not before:           Sun 16 Apr 2023 23:17:57 +0000
ROA not after:            Thu 17 Apr 2025 23:17:57 +0000
asID:                     272978
IP address blocks:        2803:b0e0:99c8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658333 (0x194ddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Apr 16 23:17:57 2023 GMT
            Not After : Apr 17 23:17:57 2025 GMT
        Subject: CN=20ca6e220fa88632230bc78d92c8830ff1d7c617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:09:ab:45:8c:cd:e5:57:40:c1:66:9d:f2:
                    78:78:52:10:c5:c1:6c:eb:f7:e7:71:17:3b:48:dc:
                    e7:a3:95:b6:de:1f:da:17:1f:d8:bc:db:07:73:31:
                    b1:78:b8:57:ca:84:74:27:c4:c8:60:a4:72:c0:f6:
                    a5:79:65:08:f6:11:7d:4e:13:49:15:84:ca:85:44:
                    1d:98:85:4b:06:34:e4:bf:74:b6:0e:e7:ff:ab:a1:
                    84:6b:6e:46:13:a0:5b:19:2f:76:f7:29:dd:c7:c2:
                    b9:e3:f3:29:f3:03:88:c6:ec:66:bc:01:da:35:cf:
                    d0:30:ca:85:7d:47:b5:ce:4e:a2:21:53:40:e9:49:
                    b3:09:ae:0c:59:c9:be:24:6e:d6:b9:8f:5f:fd:12:
                    d4:1f:0c:61:e8:a5:cc:4c:23:84:f5:1a:4c:7a:fe:
                    0d:da:ad:6b:d9:ca:89:d4:c2:48:47:13:e6:f9:dc:
                    34:d9:e6:c3:60:55:ba:84:ff:86:c8:98:3f:6f:5d:
                    fd:ab:da:e4:20:8f:e6:51:0b:43:57:6c:29:df:0c:
                    4a:fc:30:22:81:f0:d2:7f:6b:27:85:92:25:44:19:
                    46:7a:21:60:8c:1a:c3:53:c8:a5:5a:b0:84:76:5d:
                    7e:fb:6d:1f:6b:d7:fa:10:77:ce:fb:1f:72:90:bd:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3A:F6:E3:86:59:66:02:71:19:B7:E6:AB:CE:FB:9C:E4:66:3B:E4
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/20ca6e220fa88632230bc78d92c8830ff1d7c617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:3e:c6:68:88:3b:0b:6c:85:79:53:8c:0e:43:7c:30:54:
         f2:ea:be:5f:55:83:99:3f:4b:1d:2b:c3:2a:39:2e:4e:2e:c1:
         d7:88:23:86:c7:a5:b8:cd:61:4f:46:f5:e1:db:56:00:5c:0f:
         57:40:3a:f1:ff:fd:29:05:81:af:b3:8c:08:ef:68:7e:48:c3:
         eb:ce:f7:b3:db:ca:4c:44:7e:fb:23:09:85:37:31:41:92:96:
         2a:8b:b7:07:4b:82:8f:d8:c9:04:64:18:3a:ec:a5:51:77:df:
         be:f9:1e:f8:89:00:db:15:2b:fd:ab:d7:e5:17:1d:d7:6d:7d:
         7e:6c:9b:78:b8:f0:7e:23:c1:5c:1b:2d:c6:fe:a3:3b:03:bf:
         11:2e:06:29:fe:00:f1:b1:c1:17:5e:56:ba:f1:86:54:c3:1a:
         7a:30:9a:62:48:cf:41:f3:60:a2:35:83:f4:8c:df:e5:f0:b3:
         6e:46:73:af:b7:cb:9d:6f:a8:bf:f8:c9:31:4b:da:02:b2:72:
         02:37:b8:a1:6a:c7:40:9d:7f:70:a3:1b:83:78:6d:39:e1:b6:
         3a:e5:d0:1c:33:61:81:95:c1:33:d3:fd:d2:2a:b3:22:f9:2a:
         37:c2:e0:53:ea:3b:79:75:64:52:7c:14:4b:22:29:9e:95:4e:
         63:29:48:2c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDGU3dMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OTVlZDczM2JmNTRmNDMwZDE3NGJiMWYwYmY4OTVkNmJjNzBiNjQwHhcNMjMwNDE2
MjMxNzU3WhcNMjUwNDE3MjMxNzU3WjAzMTEwLwYDVQQDEygyMGNhNmUyMjBmYTg4
NjMyMjMwYmM3OGQ5MmM4ODMwZmYxZDdjNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuHoJq0WMzeVXQMFmnfJ4eFIQxcFs6/fncRc7SNzno5W23h/a
Fx/YvNsHczGxeLhXyoR0J8TIYKRywPaleWUI9hF9ThNJFYTKhUQdmIVLBjTkv3S2
Duf/q6GEa25GE6BbGS929yndx8K54/Mp8wOIxuxmvAHaNc/QMMqFfUe1zk6iIVNA
6UmzCa4MWcm+JG7WuY9f/RLUHwxh6KXMTCOE9RpMev4N2q1r2cqJ1MJIRxPm+dw0
2ebDYFW6hP+GyJg/b139q9rkII/mUQtDV2wp3wxK/DAigfDSf2snhZIlRBlGeiFg
jBrDU8ilWrCEdl1++20fa9f6EHfO+x9ykL0y5wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFKo69uOGWWYCcRm35qvO+5zkZjvkMB8GA1UdIwQYMBaAFDTRdQ2EHmBaoLgJ
i5fx9hw2EA6XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU5NWVk
NzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWIxZTE1MmYtZmM1MC00MzViLWJlZWItOGIzODY2
ZTFiMGZlLzIwY2E2ZTIyMGZhODg2MzIyMzBiYzc4ZDkyYzg4MzBmZjFkN2M2MTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YjFlMTUyZi1mYzUwLTQzNWItYmVlYi04YjM4
NjZlMWIwZmUvZjU5NWVkNzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDsOCZyDANBgkqhkiG9w0BAQsFAAOCAQEAWeA+xmiIOwts
hXlTjA5DfDBU8uq+X1WDmT9LHSvDKjkuTi7B14gjhseluM1hT0b14dtWAFwPV0A6
8f/9KQWBr7OMCO9ofkjD6873s9vKTER++yMJhTcxQZKWKou3B0uCj9jJBGQYOuyl
UXffvvke+IkA2xUr/avX5Rcd1219fmybeLjwfiPBXBstxv6jOwO/ES4GKf4A8bHB
F15WuvGGVMMaejCaYkjPQfNgojWD9Izf5fCzbkZzr7fLnW+ov/jJMUvaArJyAje4
oWrHQJ1/cKMbg3htOeG2OuXQHDNhgZXBM9P90iqzIvkqN8LgU+o7eXVkUnwUSyIp
npVOYylILA==
-----END CERTIFICATE-----