Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8882dff0-40d9-4325-bcad-62b41983e743/e81fc672fc7bcd27a19575a78213178241f6b788.roa
File:                     e81fc672fc7bcd27a19575a78213178241f6b788.roa (raw, json)
Hash identifier:          gJJ6yCQLKgUd7Oj8BJpCxIvYK9/GPFj22U4KWJLPx6U=
Subject key identifier:   B5:85:37:50:B6:1C:F0:14:C5:11:AB:D0:35:C8:38:0E:3B:F5:9D:9A
Certificate issuer:       /CN=4693daee0cc50e8bf80165faef0b5c77a8305c82
Certificate serial:       044E28
Authority key identifier: 86:C9:69:2F:22:5C:79:8F:7A:C8:B0:C8:DC:D7:45:CB:3A:9C:55:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4693daee0cc50e8bf80165faef0b5c77a8305c82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8882dff0-40d9-4325-bcad-62b41983e743/e81fc672fc7bcd27a19575a78213178241f6b788.roa
Signing time:             Wed 04 Oct 2023 21:29:32 +0000
ROA not before:           Tue 03 Oct 2023 21:29:32 +0000
ROA not after:            Sat 04 Oct 2025 22:29:32 +0000
asID:                     272942
IP address blocks:        2803:990::/32 maxlen: 48
                          2803:990::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282152 (0x44e28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4693daee0cc50e8bf80165faef0b5c77a8305c82
        Validity
            Not Before: Oct  3 21:29:32 2023 GMT
            Not After : Oct  4 22:29:32 2025 GMT
        Subject: CN=e81fc672fc7bcd27a19575a78213178241f6b788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:04:56:5f:50:38:21:46:71:98:74:e3:8c:
                    58:ca:a3:11:7a:8f:8a:ac:29:7b:af:e2:c9:f5:df:
                    03:9d:ea:5b:65:1f:a4:5a:d5:80:18:f3:10:d1:78:
                    c7:6b:c1:88:c2:00:ba:5d:fa:72:f2:b8:fa:33:a9:
                    0b:48:c5:cc:e8:ed:95:f5:c3:06:64:19:c3:16:b9:
                    d3:eb:74:04:a5:52:d9:92:05:9d:c6:55:d8:db:05:
                    1a:e1:c1:b8:aa:33:55:0f:ca:87:35:4c:80:a5:b7:
                    42:35:bb:82:9a:7b:2d:c6:06:05:99:91:df:85:38:
                    b8:54:b2:7d:91:1d:3d:cc:5e:3f:7a:a5:18:d6:cc:
                    3d:2a:f3:b6:ab:84:12:b7:8f:79:46:8e:a8:b8:15:
                    45:8e:a7:8c:73:6d:45:53:3b:c8:1f:19:13:8f:9b:
                    28:47:62:11:c5:ae:85:5d:3d:f5:7f:d1:5a:28:10:
                    20:52:eb:17:84:b9:db:d2:66:d7:e5:3d:48:e3:3a:
                    f8:61:2d:de:a5:01:26:43:b9:74:b1:1d:23:e8:5e:
                    44:ea:b8:d0:32:81:88:85:23:64:33:ff:9c:0e:a4:
                    d2:cf:be:0b:53:d4:eb:47:9f:ed:8c:38:d2:56:d6:
                    d7:92:6e:ee:8d:69:50:e4:de:5d:43:be:2b:bf:9b:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:37:50:B6:1C:F0:14:C5:11:AB:D0:35:C8:38:0E:3B:F5:9D:9A
            X509v3 Authority Key Identifier:
                keyid:86:C9:69:2F:22:5C:79:8F:7A:C8:B0:C8:DC:D7:45:CB:3A:9C:55:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4693daee0cc50e8bf80165faef0b5c77a8305c82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8882dff0-40d9-4325-bcad-62b41983e743/e81fc672fc7bcd27a19575a78213178241f6b788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8882dff0-40d9-4325-bcad-62b41983e743/4693daee0cc50e8bf80165faef0b5c77a8305c82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:990::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:6a:a2:fb:29:de:09:9d:84:7b:18:fe:25:e4:fc:20:42:e7:
         2b:4c:7e:ce:6c:d3:c3:49:fe:b4:1f:58:df:da:ff:4a:b4:e3:
         4a:c9:b6:21:ea:56:78:53:59:3a:8c:02:4a:df:93:2a:35:ff:
         53:1a:ca:fe:44:5d:77:45:e9:37:35:0a:0c:8d:9f:80:31:26:
         7c:30:2d:d9:eb:aa:b2:8b:a9:db:c4:ef:3d:e1:3b:f5:d9:27:
         b4:50:3e:2e:f5:bd:3b:71:33:9f:cf:ca:93:7c:19:09:a4:7c:
         bb:45:71:8c:0b:27:29:ac:b2:53:15:53:7b:fa:92:d7:f0:b6:
         29:cb:80:ef:6f:ed:d1:bc:33:28:72:73:79:de:70:28:78:eb:
         d0:d1:74:80:23:ff:50:2e:9f:9d:2b:47:6a:0c:ec:b1:a6:a2:
         88:7c:9f:f4:3b:66:49:e1:c5:fb:59:d8:c6:ce:fb:ac:b8:7a:
         4d:db:c7:be:b7:4b:1b:81:7c:30:31:de:87:ea:76:64:43:35:
         52:78:cb:6a:cd:16:07:ac:e1:b4:77:2a:ad:a4:c3:9f:36:46:
         f0:b2:2e:6a:7e:09:68:10:cf:f3:66:30:49:4b:dc:b0:93:c3:
         32:5e:50:38:0c:d5:19:11:df:6f:36:e6:a8:6f:97:20:6a:9f:
         31:65:47:e0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBE4oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
OTNkYWVlMGNjNTBlOGJmODAxNjVmYWVmMGI1Yzc3YTgzMDVjODIwHhcNMjMxMDAz
MjEyOTMyWhcNMjUxMDA0MjIyOTMyWjAzMTEwLwYDVQQDEyhlODFmYzY3MmZjN2Jj
ZDI3YTE5NTc1YTc4MjEzMTc4MjQxZjZiNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmgoEVl9QOCFGcZh044xYyqMReo+KrCl7r+LJ9d8DnepbZR+k
WtWAGPMQ0XjHa8GIwgC6Xfpy8rj6M6kLSMXM6O2V9cMGZBnDFrnT63QEpVLZkgWd
xlXY2wUa4cG4qjNVD8qHNUyApbdCNbuCmnstxgYFmZHfhTi4VLJ9kR09zF4/eqUY
1sw9KvO2q4QSt495Ro6ouBVFjqeMc21FUzvIHxkTj5soR2IRxa6FXT31f9FaKBAg
UusXhLnb0mbX5T1I4zr4YS3epQEmQ7l0sR0j6F5E6rjQMoGIhSNkM/+cDqTSz74L
U9TrR5/tjDjSVtbXkm7ujWlQ5N5dQ74rv5sU7QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFLWFN1C2HPAUxRGr0DXIOA479Z2aMB8GA1UdIwQYMBaAFIbJaS8iXHmPesiw
yNzXRcs6nFU0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY5M2Rh
ZWUwY2M1MGU4YmY4MDE2NWZhZWYwYjVjNzdhODMwNWM4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODg4MmRmZjAtNDBkOS00MzI1LWJjYWQtNjJiNDE5
ODNlNzQzL2U4MWZjNjcyZmM3YmNkMjdhMTk1NzVhNzgyMTMxNzgyNDFmNmI3ODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ODgyZGZmMC00MGQ5LTQzMjUtYmNhZC02MmI0
MTk4M2U3NDMvNDY5M2RhZWUwY2M1MGU4YmY4MDE2NWZhZWYwYjVjNzdhODMwNWM4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDCZAwDQYJKoZIhvcNAQELBQADggEBAMFqovsp3gmdhHsY
/iXk/CBC5ytMfs5s08NJ/rQfWN/a/0q040rJtiHqVnhTWTqMAkrfkyo1/1Mayv5E
XXdF6Tc1CgyNn4AxJnwwLdnrqrKLqdvE7z3hO/XZJ7RQPi71vTtxM5/PypN8GQmk
fLtFcYwLJymsslMVU3v6ktfwtinLgO9v7dG8Myhyc3necCh469DRdIAj/1Aun50r
R2oM7LGmooh8n/Q7ZknhxftZ2MbO+6y4ek3bx763SxuBfDAx3ofqdmRDNVJ4y2rN
Fges4bR3Kq2kw582RvCyLmp+CWgQz/NmMElL3LCTwzJeUDgM1RkR32825qhvlyBq
nzFlR+A=
-----END CERTIFICATE-----