Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/e7953a58646b75bfd100b7b13269387d2717e753.roa
File:                     e7953a58646b75bfd100b7b13269387d2717e753.roa (raw, json)
Hash identifier:          ZiJVbo7QtEhfGY49KiECxaMwGwSuhubZXOJ177ZQX5s=
Subject key identifier:   47:DE:6C:6E:D8:BE:C1:9F:F3:AC:AB:7E:26:3B:C8:82:34:71:15:6E
Certificate issuer:       /CN=598b97879dbe469735c547a94e3b8220402f1cd0
Certificate serial:       030FD4
Authority key identifier: 22:40:AB:32:6C:85:48:AC:B6:46:BB:96:F2:FC:75:C4:B1:07:30:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598b97879dbe469735c547a94e3b8220402f1cd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/e7953a58646b75bfd100b7b13269387d2717e753.roa
Signing time:             Tue 08 Aug 2023 16:47:45 +0000
ROA not before:           Mon 07 Aug 2023 16:47:45 +0000
ROA not after:            Fri 08 Aug 2025 16:47:45 +0000
asID:                     272932
IP address blocks:        2803:a190::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200660 (0x30fd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598b97879dbe469735c547a94e3b8220402f1cd0
        Validity
            Not Before: Aug  7 16:47:45 2023 GMT
            Not After : Aug  8 16:47:45 2025 GMT
        Subject: CN=e7953a58646b75bfd100b7b13269387d2717e753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:90:5d:04:3b:6c:09:99:c9:da:3f:69:83:
                    7d:28:63:c4:f6:36:f8:a4:67:00:70:3d:ea:96:e2:
                    bf:93:bf:bf:f6:30:4a:ee:7c:c9:27:a8:7a:0d:31:
                    88:93:a2:7f:63:a5:2b:b0:88:67:2b:aa:cf:6f:1d:
                    c9:08:83:c0:e8:49:d1:6e:04:cd:80:4f:2e:f4:11:
                    ec:44:2c:fa:f1:ee:a3:b2:56:87:26:7d:ff:bf:29:
                    18:5a:33:75:78:11:42:b3:d5:83:ac:77:9c:80:4a:
                    a0:04:ad:2d:5b:36:c1:62:eb:ed:19:eb:87:91:de:
                    9d:db:15:78:4d:92:e0:5f:be:5d:86:87:ef:19:16:
                    30:3d:f0:0c:e0:fb:35:a0:7b:e0:e7:69:73:37:9b:
                    bb:d7:49:f1:5d:05:54:6e:46:2f:31:f8:c8:49:a2:
                    c0:a7:4c:11:13:0b:65:fe:0c:c5:f4:c9:04:8f:cc:
                    af:f6:2b:ae:ea:99:6c:44:bc:06:50:86:b2:55:e7:
                    7e:47:c5:af:63:0a:82:2f:9c:6b:6b:7a:25:d1:ec:
                    24:4a:ab:8b:bf:6b:da:16:b6:57:f5:ae:31:bf:80:
                    6c:d2:59:6c:82:fa:f7:20:2d:9b:f9:8b:25:45:65:
                    87:4f:4a:4b:ed:5d:d9:95:c2:99:e9:cb:1c:39:1b:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DE:6C:6E:D8:BE:C1:9F:F3:AC:AB:7E:26:3B:C8:82:34:71:15:6E
            X509v3 Authority Key Identifier:
                keyid:22:40:AB:32:6C:85:48:AC:B6:46:BB:96:F2:FC:75:C4:B1:07:30:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598b97879dbe469735c547a94e3b8220402f1cd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/e7953a58646b75bfd100b7b13269387d2717e753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/598b97879dbe469735c547a94e3b8220402f1cd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a190::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:d8:ea:fc:8b:f1:17:60:c5:cb:20:72:4b:81:24:e5:5c:
         2f:a6:c2:9b:07:2d:ae:d0:8f:48:aa:07:8b:a2:41:76:a8:8b:
         94:90:73:94:a1:aa:98:83:98:32:b1:9a:96:e6:8e:f6:27:2c:
         6f:64:7b:4c:9b:0c:a2:16:49:83:7d:a7:e9:5a:dd:06:f7:2d:
         cc:4f:1c:1c:67:98:0e:37:4d:45:17:ed:45:03:81:78:09:73:
         3a:33:27:2e:76:15:24:f9:68:53:2c:57:42:f2:c7:e4:fb:3b:
         c5:97:aa:08:0e:8a:24:8c:b4:32:3b:70:09:e5:10:8a:c2:f9:
         bf:ff:70:a2:f3:48:4d:44:89:bd:2a:40:fc:f1:65:2d:55:b9:
         cc:af:c0:24:4e:90:e7:e8:f6:de:b8:f7:88:ec:12:d1:64:12:
         7b:52:22:6a:ba:be:e6:b2:52:1a:be:2e:9d:8c:f6:8a:58:24:
         b2:34:5a:fe:65:4e:2b:f7:0a:6b:48:48:45:06:b4:52:9c:72:
         97:5d:fc:2c:f3:9c:83:35:c3:7f:b4:50:4b:eb:b9:8c:92:e2:
         a5:65:88:48:c8:77:a3:82:dc:41:02:db:d1:f8:60:e1:86:29:
         12:e1:ca:aa:61:8c:d0:d4:73:44:8c:f2:d7:ba:a4:25:0e:fb:
         f8:09:19:2a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAw/UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
OGI5Nzg3OWRiZTQ2OTczNWM1NDdhOTRlM2I4MjIwNDAyZjFjZDAwHhcNMjMwODA3
MTY0NzQ1WhcNMjUwODA4MTY0NzQ1WjAzMTEwLwYDVQQDEyhlNzk1M2E1ODY0NmI3
NWJmZDEwMGI3YjEzMjY5Mzg3ZDI3MTdlNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnW6QXQQ7bAmZydo/aYN9KGPE9jb4pGcAcD3qluK/k7+/9jBK
7nzJJ6h6DTGIk6J/Y6UrsIhnK6rPbx3JCIPA6EnRbgTNgE8u9BHsRCz68e6jslaH
Jn3/vykYWjN1eBFCs9WDrHecgEqgBK0tWzbBYuvtGeuHkd6d2xV4TZLgX75dhofv
GRYwPfAM4Ps1oHvg52lzN5u710nxXQVUbkYvMfjISaLAp0wREwtl/gzF9MkEj8yv
9iuu6plsRLwGUIayVed+R8WvYwqCL5xra3ol0ewkSquLv2vaFrZX9a4xv4Bs0lls
gvr3IC2b+YslRWWHT0pL7V3ZlcKZ6cscORs1KQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEfebG7YvsGf86yrfiY7yII0cRVuMB8GA1UdIwQYMBaAFCJAqzJshUistka7
lvL8dcSxBzAmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTk4Yjk3
ODc5ZGJlNDY5NzM1YzU0N2E5NGUzYjgyMjA0MDJmMWNkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzkyZDNlMzktNDQ3My00MmUyLWFiYmQtZDZjNTBm
NjIyMDdhL2U3OTUzYTU4NjQ2Yjc1YmZkMTAwYjdiMTMyNjkzODdkMjcxN2U3NTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83OTJkM2UzOS00NDczLTQyZTItYWJiZC1kNmM1
MGY2MjIwN2EvNTk4Yjk3ODc5ZGJlNDY5NzM1YzU0N2E5NGUzYjgyMjA0MDJmMWNk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDoZAwDQYJKoZIhvcNAQELBQADggEBAD512Or8i/EXYMXL
IHJLgSTlXC+mwpsHLa7Qj0iqB4uiQXaoi5SQc5ShqpiDmDKxmpbmjvYnLG9ke0yb
DKIWSYN9p+la3Qb3LcxPHBxnmA43TUUX7UUDgXgJczozJy52FST5aFMsV0Lyx+T7
O8WXqggOiiSMtDI7cAnlEIrC+b//cKLzSE1Eib0qQPzxZS1VucyvwCROkOfo9t64
94jsEtFkEntSImq6vuayUhq+Lp2M9opYJLI0Wv5lTiv3CmtISEUGtFKccpdd/Czz
nIM1w3+0UEvruYyS4qVliEjId6OC3EEC29H4YOGGKRLhyqphjNDUc0SM8te6pCUO
+/gJGSo=
-----END CERTIFICATE-----