Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/3b1a839acfd54462d218f0b996b59a3c124e3011.roa
File:                     3b1a839acfd54462d218f0b996b59a3c124e3011.roa (raw, json)
Hash identifier:          8Q7QqkrsSKr0naQdrvk01MmlIitwRZIPhNFeBrXOORg=
Subject key identifier:   07:07:34:06:8C:DF:17:C2:0A:18:D0:13:C9:FB:CF:E8:3A:6D:A9:BF
Certificate issuer:       /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial:       211643
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/3b1a839acfd54462d218f0b996b59a3c124e3011.roa
Signing time:             Sun 09 Jul 2023 16:11:53 +0000
ROA not before:           Sat 08 Jul 2023 16:11:52 +0000
ROA not after:            Wed 09 Jul 2025 16:11:52 +0000
asID:                     269782
IP address blocks:        2803:2360::/32 maxlen: 32
                          2803:2360::/34 maxlen: 34
                          2803:2360::/36 maxlen: 36
                          2803:2360:1000::/36 maxlen: 36
                          2803:2360:2000::/36 maxlen: 36
                          2803:2360:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168387 (0x211643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
        Validity
            Not Before: Jul  8 16:11:52 2023 GMT
            Not After : Jul  9 16:11:52 2025 GMT
        Subject: CN=3b1a839acfd54462d218f0b996b59a3c124e3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:3b:79:82:2d:19:0c:ec:d3:50:fc:cd:f9:
                    b2:42:e2:5b:d0:5c:ac:f0:68:39:5c:e9:8b:ab:95:
                    b7:17:7c:ed:cc:11:a9:5d:4f:c5:ee:9f:db:07:c4:
                    cc:a4:f1:4d:14:fe:45:af:cd:87:13:54:4b:72:e5:
                    a6:47:c6:0e:dd:22:2f:44:4b:cf:c3:9f:d8:48:d7:
                    4a:bc:d5:78:75:c2:c4:c5:da:8d:cb:99:57:f1:21:
                    3f:51:fc:56:2b:28:bf:71:a9:79:3c:8b:8d:40:ca:
                    03:6d:28:5f:bc:66:d9:71:c3:08:e3:4a:08:1b:20:
                    60:49:53:a5:75:36:65:79:f6:89:c3:8c:51:2c:00:
                    98:cc:62:9e:11:d1:2f:0a:82:d8:cf:3b:83:fb:df:
                    ac:e5:8f:b7:25:13:0a:7d:87:78:8f:8a:f9:6c:3a:
                    63:91:1d:fa:67:ed:ca:18:aa:23:91:66:2a:d8:30:
                    92:25:e8:db:ba:3b:f0:72:ca:53:08:60:8d:95:49:
                    75:c1:6b:03:43:40:e3:b0:ce:64:61:ad:9a:29:3d:
                    87:89:27:ba:20:44:9f:0b:1e:f8:fa:31:84:ee:d3:
                    f2:bf:81:55:cd:39:99:32:6e:ec:5e:ad:71:c8:56:
                    5a:52:53:eb:15:17:0e:b2:f6:29:7a:ff:0c:74:af:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:34:06:8C:DF:17:C2:0A:18:D0:13:C9:FB:CF:E8:3A:6D:A9:BF
            X509v3 Authority Key Identifier:
                keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/3b1a839acfd54462d218f0b996b59a3c124e3011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:15:43:c1:f4:4d:e8:6e:03:01:e8:48:23:5a:4d:03:4d:
         d1:c7:e7:cc:53:f5:b5:0c:6e:aa:1a:32:b6:32:89:c7:8e:bd:
         07:05:83:6d:41:ac:30:32:79:38:60:8b:71:83:90:43:e9:5f:
         50:ef:cb:ca:1e:25:aa:38:89:76:e0:12:55:f2:e1:e8:79:b0:
         6c:e3:31:73:3e:e4:f8:8d:68:5e:09:eb:49:24:c0:38:cd:d3:
         e2:e5:31:e9:0a:4b:2a:a2:ef:21:4a:c9:a3:86:73:99:ab:87:
         7a:9c:1e:e8:17:42:ca:8b:f1:c7:1f:05:99:9a:11:7e:ca:ba:
         32:5c:f5:96:43:b1:8c:6a:50:60:ff:ff:ea:d0:73:cc:4c:28:
         c3:de:ca:57:6e:06:27:a5:52:88:df:d3:5d:19:dd:1b:80:c2:
         14:ba:cc:d1:e8:4d:24:b5:04:f1:f4:d9:78:86:5f:b7:e3:8f:
         d1:1b:1c:cc:e0:d0:32:af:05:cf:05:61:0f:bd:f9:70:16:1c:
         a0:01:cb:65:f5:13:64:33:8a:7a:7f:f9:de:9b:e9:4c:b5:f1:
         fe:cb:f7:aa:cd:4b:e2:dd:d7:32:92:af:27:ab:c5:15:64:8c:
         0d:49:0b:2f:37:81:03:02:db:99:ff:6e:09:03:4b:c5:f3:a2:
         f7:57:20:23
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIRZDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
ZGUxMWQxNTkyZjVmYzhkZDk5NzIyODMyMTA0OWUxZmIzYWZhODYwHhcNMjMwNzA4
MTYxMTUyWhcNMjUwNzA5MTYxMTUyWjAzMTEwLwYDVQQDEygzYjFhODM5YWNmZDU0
NDYyZDIxOGYwYjk5NmI1OWEzYzEyNGUzMDExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkXo7eYItGQzs01D8zfmyQuJb0Fys8Gg5XOmLq5W3F3ztzBGp
XU/F7p/bB8TMpPFNFP5Fr82HE1RLcuWmR8YO3SIvREvPw5/YSNdKvNV4dcLExdqN
y5lX8SE/UfxWKyi/cal5PIuNQMoDbShfvGbZccMI40oIGyBgSVOldTZlefaJw4xR
LACYzGKeEdEvCoLYzzuD+9+s5Y+3JRMKfYd4j4r5bDpjkR36Z+3KGKojkWYq2DCS
JejbujvwcspTCGCNlUl1wWsDQ0DjsM5kYa2aKT2HiSe6IESfCx74+jGE7tPyv4FV
zTmZMm7sXq1xyFZaUlPrFRcOsvYpev8MdK+M+wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFAcHNAaM3xfCChjQE8n7z+g6bam/MB8GA1UdIwQYMBaAFHyoHD4L1N2JL/ES
JfkzyXZFzpfTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjVkZTEx
ZDE1OTJmNWZjOGRkOTk3MjI4MzIxMDQ5ZTFmYjNhZmE4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQyMWY2OTktNDEzMy00NmI0LTkyZmYtNmZlZGM2
NWYzNWVkLzNiMWE4MzlhY2ZkNTQ0NjJkMjE4ZjBiOTk2YjU5YTNjMTI0ZTMwMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDIxZjY5OS00MTMzLTQ2YjQtOTJmZi02ZmVk
YzY1ZjM1ZWQvNjVkZTExZDE1OTJmNWZjOGRkOTk3MjI4MzIxMDQ5ZTFmYjNhZmE4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDI2AwDQYJKoZIhvcNAQELBQADggEBAEENFUPB9E3obgMB
6EgjWk0DTdHH58xT9bUMbqoaMrYyiceOvQcFg21BrDAyeThgi3GDkEPpX1Dvy8oe
Jao4iXbgElXy4eh5sGzjMXM+5PiNaF4J60kkwDjN0+LlMekKSyqi7yFKyaOGc5mr
h3qcHugXQsqL8ccfBZmaEX7KujJc9ZZDsYxqUGD//+rQc8xMKMPeylduBielUojf
010Z3RuAwhS6zNHoTSS1BPH02XiGX7fjj9EbHMzg0DKvBc8FYQ+9+XAWHKABy2X1
E2Qzinp/+d6b6Uy18f7L96rNS+Ld1zKSryerxRVkjA1JCy83gQMC25n/bgkDS8Xz
ovdXICM=
-----END CERTIFICATE-----