Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/fdd1ab34cda7a05ce86ae3936dbd291589a94dd2.roa
File:                     fdd1ab34cda7a05ce86ae3936dbd291589a94dd2.roa (raw, json)
Hash identifier:          YzPBGKOAOJPrXvNpv/eExNRTJuxAtsQiRd+H+64qy10=
Subject key identifier:   05:E4:8B:81:00:9F:22:21:FB:36:69:2E:AD:41:0E:52:71:0A:1D:09
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       23F69C
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/fdd1ab34cda7a05ce86ae3936dbd291589a94dd2.roa
Signing time:             Wed 04 Oct 2023 16:57:11 +0000
ROA not before:           Tue 03 Oct 2023 16:57:11 +0000
ROA not after:            Sat 04 Oct 2025 17:57:11 +0000
asID:                     52458
IP address blocks:        2803:480:19::/64 maxlen: 64
                          2803:480:20::/64 maxlen: 64
                          2803:480:21::/64 maxlen: 64
                          2803:480:5::/64 maxlen: 64
                          2803:480:4::/64 maxlen: 64
                          2803:480:3::/64 maxlen: 64
                          2803:480:2::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356892 (0x23f69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Oct  3 16:57:11 2023 GMT
            Not After : Oct  4 17:57:11 2025 GMT
        Subject: CN=fdd1ab34cda7a05ce86ae3936dbd291589a94dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d6:9d:23:2e:4e:c6:ce:de:78:a6:a2:cf:bb:
                    45:31:f6:de:59:66:32:a4:13:4a:9c:f9:9e:46:24:
                    af:45:c6:8f:fc:ee:f0:7f:d6:11:49:6f:a6:54:1f:
                    14:da:01:4e:1c:22:bb:c4:a6:af:60:0d:06:bd:74:
                    dd:35:e4:6d:2b:af:4a:97:bc:8d:06:10:c7:b3:fc:
                    75:3f:81:e4:8e:de:b6:0e:5a:73:ca:52:fd:8f:39:
                    d5:5c:c3:f6:06:bf:0e:52:76:30:b5:cd:c4:8f:e5:
                    7e:e1:a4:3b:d8:0b:1d:64:2a:4d:86:e3:de:3b:6a:
                    d4:63:6c:cf:74:75:6a:07:4a:8d:a0:80:4e:5f:8b:
                    61:ec:18:d2:00:0c:44:c6:3f:0e:b3:7f:ad:9d:5b:
                    00:75:bf:6b:4b:92:c6:3a:a2:34:de:30:ec:5a:ae:
                    26:7e:01:58:ff:ac:79:80:e9:47:f6:25:8e:d4:ef:
                    b5:4e:a9:3b:47:11:54:48:55:c0:5a:e6:11:5b:0d:
                    e6:d5:1b:55:e0:d3:e0:7d:6b:7a:fa:21:ae:33:6e:
                    b1:7a:55:c5:1b:d4:b9:3a:a8:35:ed:8a:41:8a:92:
                    10:55:4f:fd:10:4a:69:ff:20:cb:b2:f7:ab:5a:f6:
                    eb:a1:48:9f:ce:50:ac:d2:56:66:35:b1:a1:d8:0f:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:8B:81:00:9F:22:21:FB:36:69:2E:AD:41:0E:52:71:0A:1D:09
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/fdd1ab34cda7a05ce86ae3936dbd291589a94dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:2::/64
                  2803:480:3::/64
                  2803:480:4::/64
                  2803:480:5::/64
                  2803:480:19::/64
                  2803:480:20::/64
                  2803:480:21::/64

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:bd:02:86:2b:47:04:19:ec:db:dc:b9:1a:87:2a:c6:d9:
         7d:ae:40:d1:77:2a:cd:22:74:fc:b2:3b:fd:0a:39:92:a3:36:
         2d:f4:28:a2:5f:4a:f8:81:60:22:67:22:93:fd:e4:70:ae:27:
         26:d7:cc:db:75:1d:6f:24:2b:d6:5e:5e:77:8f:1f:23:ca:87:
         fc:84:b2:2f:b2:73:28:f5:56:e3:f4:62:19:e6:4a:a2:34:ad:
         23:c8:23:e3:72:f7:55:c6:4a:b7:65:fd:b2:fb:77:a9:ee:2b:
         97:f1:2f:73:1a:29:41:3a:d0:12:ff:c0:1d:36:fe:28:65:81:
         f0:49:dd:dc:2f:88:41:e4:7c:bf:0d:ee:97:32:36:b8:5c:5c:
         40:17:e9:3a:e2:8b:1f:b7:d8:4f:a7:0a:19:c2:05:6d:df:5f:
         36:5d:1f:4a:29:a6:b4:a2:5b:69:ad:73:03:fa:b2:29:af:b5:
         14:7c:2e:3b:ce:41:99:2e:3e:a1:80:c3:92:9f:b0:57:a8:0d:
         35:a9:0e:82:47:d1:1a:a1:14:3e:17:32:81:fa:41:f0:82:c5:
         00:c7:96:68:23:63:3a:05:8c:e0:ff:72:54:08:db:9d:28:c4:
         01:7a:90:a5:8a:69:1f:c7:6a:a1:0e:52:43:5d:16:34:7f:da:
         a3:28:04:22
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDI/acMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
YmNjNjVkYjY3NWZmYzMxODU0NDljMThiZDQzMzc5NGVhOGNhNWEwHhcNMjMxMDAz
MTY1NzExWhcNMjUxMDA0MTc1NzExWjAzMTEwLwYDVQQDEyhmZGQxYWIzNGNkYTdh
MDVjZTg2YWUzOTM2ZGJkMjkxNTg5YTk0ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg9adIy5Oxs7eeKaiz7tFMfbeWWYypBNKnPmeRiSvRcaP/O7w
f9YRSW+mVB8U2gFOHCK7xKavYA0GvXTdNeRtK69Kl7yNBhDHs/x1P4Hkjt62Dlpz
ylL9jznVXMP2Br8OUnYwtc3Ej+V+4aQ72AsdZCpNhuPeO2rUY2zPdHVqB0qNoIBO
X4th7BjSAAxExj8Os3+tnVsAdb9rS5LGOqI03jDsWq4mfgFY/6x5gOlH9iWO1O+1
Tqk7RxFUSFXAWuYRWw3m1RtV4NPgfWt6+iGuM26xelXFG9S5Oqg17YpBipIQVU/9
EEpp/yDLsverWvbroUifzlCs0lZmNbGh2A/KiQIDAQABo4ICojCCAp4wHQYDVR0O
BBYEFAXki4EAnyIh+zZpLq1BDlJxCh0JMB8GA1UdIwQYMBaAFKt2GDAsMjVTVynb
ciWrLHZclf4cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ViY2M2
NWRiNjc1ZmZjMzE4NTQ0OWMxOGJkNDMzNzk0ZWE4Y2E1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdkYzU4Y2ItMTg0ZC00NTgwLWI4NTAtMGQ4ZjFm
M2I4NzI4L2ZkZDFhYjM0Y2RhN2EwNWNlODZhZTM5MzZkYmQyOTE1ODlhOTRkZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2RjNThjYi0xODRkLTQ1ODAtYjg1MC0wZDhm
MWYzYjg3MjgvY2ViY2M2NWRiNjc1ZmZjMzE4NTQ0OWMxOGJkNDMzNzk0ZWE4Y2E1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBggrBgEFBQcBBwEB/wRX
MFUwUwQCAAIwTQMJACgDBIAAAgAAAwkAKAMEgAADAAADCQAoAwSAAAQAAAMJACgD
BIAABQAAAwkAKAMEgAAZAAADCQAoAwSAACAAAAMJACgDBIAAIQAAMA0GCSqGSIb3
DQEBCwUAA4IBAQA0+L0ChitHBBns29y5Gocqxtl9rkDRdyrNInT8sjv9CjmSozYt
9CiiX0r4gWAiZyKT/eRwricm18zbdR1vJCvWXl53jx8jyof8hLIvsnMo9Vbj9GIZ
5kqiNK0jyCPjcvdVxkq3Zf2y+3ep7iuX8S9zGilBOtAS/8AdNv4oZYHwSd3cL4hB
5Hy/De6XMja4XFxAF+k64osft9hPpwoZwgVt3182XR9KKaa0oltprXMD+rIpr7UU
fC47zkGZLj6hgMOSn7BXqA01qQ6CR9EaoRQ+FzKB+kHwgsUAx5ZoI2M6BYzg/3JU
CNudKMQBepClimkfx2qhDlJDXRY0f9qjKAQi
-----END CERTIFICATE-----