Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/4e4d8e5a537d784cbe75d4fc2166fd3f3a9f7775.roa
File:                     4e4d8e5a537d784cbe75d4fc2166fd3f3a9f7775.roa (raw, json)
Hash identifier:          3gcQh8WEemYciq72BvZAoDnZOcAyCL6ZbXOwCUukwOU=
Subject key identifier:   44:D6:4E:F8:FA:9E:08:FC:7A:46:B7:EF:BB:7F:26:5B:DA:33:99:2B
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       1A3CA7
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/4e4d8e5a537d784cbe75d4fc2166fd3f3a9f7775.roa
Signing time:             Thu 25 May 2023 14:37:12 +0000
ROA not before:           Wed 24 May 2023 14:37:12 +0000
ROA not after:            Sun 25 May 2025 14:37:12 +0000
asID:                     399382
IP address blocks:        2803:b0e0:9991::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719463 (0x1a3ca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: May 24 14:37:12 2023 GMT
            Not After : May 25 14:37:12 2025 GMT
        Subject: CN=4e4d8e5a537d784cbe75d4fc2166fd3f3a9f7775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:b8:9b:7a:c9:6b:62:bb:9d:ad:93:52:99:
                    2a:73:d2:d1:dc:c4:94:6e:2b:65:3a:32:ad:0b:93:
                    c7:54:10:9e:54:2d:6b:9a:82:10:01:86:71:cb:23:
                    14:36:29:67:00:79:2c:dc:d6:e6:03:df:02:5d:52:
                    20:00:2d:77:96:5a:7f:ef:d0:e6:fc:58:08:98:c7:
                    3e:5b:34:96:f8:31:7a:12:e3:e5:32:b0:cf:f3:5f:
                    32:7c:8b:2d:aa:8a:a6:1c:3c:44:55:da:37:f2:05:
                    49:be:fd:1e:b5:b9:c8:d7:f1:ec:7e:ae:60:f9:a5:
                    36:6f:ac:ce:77:29:d4:84:b4:03:af:5a:37:cf:90:
                    fa:13:fb:c2:7c:31:99:eb:90:89:41:98:0b:8c:68:
                    4c:ef:2f:69:25:c5:f6:67:a4:9c:73:c8:07:b0:46:
                    eb:56:37:f6:f6:45:6a:2b:80:83:7c:28:c0:a2:cb:
                    d8:26:ca:d4:94:7e:95:bc:b9:c1:3e:9f:f1:f5:d4:
                    e8:a6:35:f0:84:d1:0d:50:75:22:86:c7:19:4c:e5:
                    77:74:83:e7:9f:dd:8d:0f:27:51:38:c6:98:f8:68:
                    85:b7:80:80:cf:f6:6c:6a:d3:7c:42:53:0f:f8:2a:
                    d5:14:67:bd:e9:2f:d4:07:1b:fb:50:db:d6:a2:2a:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:4E:F8:FA:9E:08:FC:7A:46:B7:EF:BB:7F:26:5B:DA:33:99:2B
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/4e4d8e5a537d784cbe75d4fc2166fd3f3a9f7775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9991::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:e2:98:01:19:01:27:06:31:d9:b0:55:5c:00:b4:d1:35:
         a8:2a:e1:c5:f7:18:28:67:d7:34:fb:a5:c1:d7:e5:78:d8:0b:
         2b:26:99:c2:7d:ea:fe:83:f8:99:5a:f0:be:6a:e5:76:78:53:
         52:1b:3d:61:28:9a:b4:82:14:16:5d:da:77:5f:bd:a4:55:65:
         fe:72:af:a9:34:08:47:4e:11:87:a5:52:98:cb:07:ad:95:2a:
         0a:79:6a:01:de:ad:42:da:4f:74:0b:fe:1a:fc:fb:f7:8b:ae:
         17:7e:b1:4f:b4:d9:9d:a6:66:83:a5:20:52:2e:2b:bb:d6:65:
         5b:7e:20:94:46:02:4b:fb:42:95:56:63:4b:e1:7b:30:38:09:
         d6:3b:53:bb:3e:83:05:62:15:e7:7d:1a:dc:51:bf:6a:60:93:
         bc:f0:a6:bb:40:de:c5:29:b6:39:19:25:ab:70:66:30:8b:7e:
         7c:6b:66:1f:2a:df:d9:43:2a:3f:74:95:93:18:d3:78:f2:46:
         45:6e:25:4d:4c:59:e4:94:51:9f:96:8b:69:f8:be:41:86:19:
         8e:bc:10:e1:f4:36:ed:af:8a:1a:65:88:0d:64:d9:14:9e:99:
         0b:f8:9d:c9:bb:76:99:07:9a:2e:63:4c:90:58:fe:03:3f:64:
         3f:8e:d5:0a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDGjynMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OTVlZDczM2JmNTRmNDMwZDE3NGJiMWYwYmY4OTVkNmJjNzBiNjQwHhcNMjMwNTI0
MTQzNzEyWhcNMjUwNTI1MTQzNzEyWjAzMTEwLwYDVQQDEyg0ZTRkOGU1YTUzN2Q3
ODRjYmU3NWQ0ZmMyMTY2ZmQzZjNhOWY3Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmP64m3rJa2K7na2TUpkqc9LR3MSUbitlOjKtC5PHVBCeVC1r
moIQAYZxyyMUNilnAHks3NbmA98CXVIgAC13llp/79Dm/FgImMc+WzSW+DF6EuPl
MrDP818yfIstqoqmHDxEVdo38gVJvv0etbnI1/Hsfq5g+aU2b6zOdynUhLQDr1o3
z5D6E/vCfDGZ65CJQZgLjGhM7y9pJcX2Z6Scc8gHsEbrVjf29kVqK4CDfCjAosvY
JsrUlH6VvLnBPp/x9dTopjXwhNENUHUihscZTOV3dIPnn92NDydROMaY+GiFt4CA
z/ZsatN8QlMP+CrVFGe96S/UBxv7UNvWoiqVsQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFETWTvj6ngj8eka377t/JlvaM5krMB8GA1UdIwQYMBaAFDTRdQ2EHmBaoLgJ
i5fx9hw2EA6XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU5NWVk
NzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWIxZTE1MmYtZmM1MC00MzViLWJlZWItOGIzODY2
ZTFiMGZlLzRlNGQ4ZTVhNTM3ZDc4NGNiZTc1ZDRmYzIxNjZmZDNmM2E5Zjc3NzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YjFlMTUyZi1mYzUwLTQzNWItYmVlYi04YjM4
NjZlMWIwZmUvZjU5NWVkNzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDsOCZkTANBgkqhkiG9w0BAQsFAAOCAQEAJqjimAEZAScG
MdmwVVwAtNE1qCrhxfcYKGfXNPulwdfleNgLKyaZwn3q/oP4mVrwvmrldnhTUhs9
YSiatIIUFl3ad1+9pFVl/nKvqTQIR04Rh6VSmMsHrZUqCnlqAd6tQtpPdAv+Gvz7
94uuF36xT7TZnaZmg6UgUi4ru9ZlW34glEYCS/tClVZjS+F7MDgJ1jtTuz6DBWIV
530a3FG/amCTvPCmu0DexSm2ORklq3BmMIt+fGtmHyrf2UMqP3SVkxjTePJGRW4l
TUxZ5JRRn5aLafi+QYYZjrwQ4fQ27a+KGmWIDWTZFJ6ZC/idybt2mQeaLmNMkFj+
Az9kP47VCg==
-----END CERTIFICATE-----