Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/7b495cf764d09cae83009e866f377abe49ffdb27.roa
File:                     7b495cf764d09cae83009e866f377abe49ffdb27.roa (raw, json)
Hash identifier:          M6IAPSMhsulixGu7/SWT9mEIjRzXRHi9CPeoUUf/iig=
Subject key identifier:   C2:F4:12:9E:65:28:6E:C4:2E:32:F7:FF:54:D4:1D:48:5E:81:B3:82
Certificate issuer:       /CN=7c048592d36e70d9897ab1b5d210b9deda4621c5
Certificate serial:       025A05
Authority key identifier: 00:53:0C:2C:42:3F:10:C4:D2:32:EB:5E:63:FF:8B:1E:97:E1:AE:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c048592d36e70d9897ab1b5d210b9deda4621c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/7b495cf764d09cae83009e866f377abe49ffdb27.roa
Signing time:             Mon 03 Jul 2023 20:24:49 +0000
ROA not before:           Sun 02 Jul 2023 20:24:49 +0000
ROA not after:            Thu 03 Jul 2025 20:24:49 +0000
asID:                     264631
IP address blocks:        2803:e140::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154117 (0x25a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c048592d36e70d9897ab1b5d210b9deda4621c5
        Validity
            Not Before: Jul  2 20:24:49 2023 GMT
            Not After : Jul  3 20:24:49 2025 GMT
        Subject: CN=7b495cf764d09cae83009e866f377abe49ffdb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:1a:fa:0d:3a:fe:13:4f:ab:ad:23:2f:50:
                    ce:c3:05:55:81:5b:47:e9:7e:f8:d7:cd:f0:f6:f9:
                    b0:48:40:90:74:ff:07:d7:84:bd:7c:8f:f5:4a:91:
                    08:15:0f:3a:12:a7:39:7b:02:5d:14:44:d0:bd:01:
                    e1:a9:32:e6:6a:dd:bc:88:42:ab:cc:09:4f:ea:2b:
                    bd:47:9a:ea:d1:8d:86:2d:af:49:ae:1e:cc:8d:4e:
                    8a:72:bd:d6:18:d3:55:9c:fa:87:6a:1e:06:a8:61:
                    a9:fa:de:21:45:01:ad:80:82:a3:26:2a:78:02:19:
                    80:c4:56:f0:b1:4c:3e:e6:20:b9:b7:63:f5:71:68:
                    e1:bb:5a:d9:67:80:c4:32:d5:b0:0f:d2:ba:29:90:
                    e4:2f:02:a3:ab:6d:1f:03:c8:b1:fe:80:91:62:55:
                    ab:82:e5:e6:45:5c:2c:e1:9e:fb:5b:01:9f:b6:1a:
                    16:d2:75:1f:c1:08:5a:94:f4:45:58:1c:ec:b0:c1:
                    75:e2:21:21:44:87:00:29:ed:4a:97:f5:70:1a:de:
                    95:34:fb:ea:7e:de:d1:7d:f2:54:04:a5:e6:14:a0:
                    80:63:e3:b4:c8:fc:35:96:84:b7:65:74:c5:e7:6a:
                    d0:ba:28:a7:d6:ee:af:85:77:94:3e:b0:f2:d4:35:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:12:9E:65:28:6E:C4:2E:32:F7:FF:54:D4:1D:48:5E:81:B3:82
            X509v3 Authority Key Identifier:
                keyid:00:53:0C:2C:42:3F:10:C4:D2:32:EB:5E:63:FF:8B:1E:97:E1:AE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c048592d36e70d9897ab1b5d210b9deda4621c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/7b495cf764d09cae83009e866f377abe49ffdb27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/7c048592d36e70d9897ab1b5d210b9deda4621c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e140::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:1f:54:e7:d3:b8:dc:5f:a3:77:f8:88:e3:f7:46:51:c6:d3:
         4e:e5:3d:02:6b:41:9e:eb:7d:67:f6:dd:37:91:91:fd:9a:ee:
         d6:36:a8:5d:07:eb:aa:06:94:1a:ba:b9:ee:d7:a1:5a:18:ae:
         11:db:d3:e8:2f:ea:82:a0:f2:7f:3a:03:6a:40:51:41:69:66:
         6a:83:08:d4:f2:4e:a5:d9:4e:a4:e1:5e:7b:fa:45:8b:17:af:
         ca:3a:a6:24:6c:c4:74:4f:8b:8e:c8:6f:bf:f4:f8:9f:bd:97:
         1c:ea:65:34:40:fa:82:f6:b0:e4:c5:ff:0d:10:c4:8e:b0:08:
         79:b6:f0:65:80:80:69:f6:79:42:43:ec:27:cb:49:8e:ac:93:
         ae:03:49:ad:8f:41:51:c2:50:68:ca:fb:37:cf:8c:fb:da:f2:
         05:c0:12:b4:15:df:7a:91:e8:a4:45:27:d4:b7:4e:a6:2e:01:
         8d:ea:3c:d3:98:0c:18:2e:ca:8d:7d:8d:47:30:80:00:24:95:
         fe:35:25:51:0a:9d:2c:90:4f:f9:1a:99:ae:71:cf:78:b0:1d:
         bd:0b:01:f4:fa:99:1b:b7:b7:01:d0:4f:db:23:86:93:f9:8c:
         27:76:f3:78:0a:3c:dc:ad:c2:88:01:61:73:4f:20:28:de:52:
         fa:6d:f7:3e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAloFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
MDQ4NTkyZDM2ZTcwZDk4OTdhYjFiNWQyMTBiOWRlZGE0NjIxYzUwHhcNMjMwNzAy
MjAyNDQ5WhcNMjUwNzAzMjAyNDQ5WjAzMTEwLwYDVQQDEyg3YjQ5NWNmNzY0ZDA5
Y2FlODMwMDllODY2ZjM3N2FiZTQ5ZmZkYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn4ga+g06/hNPq60jL1DOwwVVgVtH6X74183w9vmwSECQdP8H
14S9fI/1SpEIFQ86Eqc5ewJdFETQvQHhqTLmat28iEKrzAlP6iu9R5rq0Y2GLa9J
rh7MjU6Kcr3WGNNVnPqHah4GqGGp+t4hRQGtgIKjJip4AhmAxFbwsUw+5iC5t2P1
cWjhu1rZZ4DEMtWwD9K6KZDkLwKjq20fA8ix/oCRYlWrguXmRVws4Z77WwGfthoW
0nUfwQhalPRFWBzssMF14iEhRIcAKe1Kl/VwGt6VNPvqft7RffJUBKXmFKCAY+O0
yPw1loS3ZXTF52rQuiin1u6vhXeUPrDy1DW12QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFML0Ep5lKG7ELjL3/1TUHUhegbOCMB8GA1UdIwQYMBaAFABTDCxCPxDE0jLr
XmP/ix6X4a7uMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2MwNDg1
OTJkMzZlNzBkOTg5N2FiMWI1ZDIxMGI5ZGVkYTQ2MjFjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjM4OTQ3ZDQtNmVkYi00MjBlLTljYzAtODM4YThm
MjQ0NDgxLzdiNDk1Y2Y3NjRkMDljYWU4MzAwOWU4NjZmMzc3YWJlNDlmZmRiMjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Mzg5NDdkNC02ZWRiLTQyMGUtOWNjMC04Mzhh
OGYyNDQ0ODEvN2MwNDg1OTJkMzZlNzBkOTg5N2FiMWI1ZDIxMGI5ZGVkYTQ2MjFj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD4UAwDQYJKoZIhvcNAQELBQADggEBADAfVOfTuNxfo3f4
iOP3RlHG007lPQJrQZ7rfWf23TeRkf2a7tY2qF0H66oGlBq6ue7XoVoYrhHb0+gv
6oKg8n86A2pAUUFpZmqDCNTyTqXZTqThXnv6RYsXr8o6piRsxHRPi47Ib7/0+J+9
lxzqZTRA+oL2sOTF/w0QxI6wCHm28GWAgGn2eUJD7CfLSY6sk64DSa2PQVHCUGjK
+zfPjPva8gXAErQV33qR6KRFJ9S3TqYuAY3qPNOYDBguyo19jUcwgAAklf41JVEK
nSyQT/kama5xz3iwHb0LAfT6mRu3twHQT9sjhpP5jCd283gKPNytwogBYXNPICje
Uvpt9z4=
-----END CERTIFICATE-----