Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/90337a667922f7baa313ac75c07af4fc04b2f5f3.roa
File:                     90337a667922f7baa313ac75c07af4fc04b2f5f3.roa (raw, json)
Hash identifier:          pa0iR82Fl4tvJ3Gh6+svQy93Bjfc01rFKWPndUvMWeg=
Subject key identifier:   E8:14:E3:FA:1C:C6:B4:FE:11:CB:91:78:51:FB:E1:38:5E:D7:A6:10
Certificate issuer:       /CN=50b342d0318aade2e11dbe4798c7733532e7ee94
Certificate serial:       0999
Authority key identifier: 05:A3:C3:43:C5:18:68:BD:78:57:F9:E2:4A:7E:F7:E9:01:12:DD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b342d0318aade2e11dbe4798c7733532e7ee94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/90337a667922f7baa313ac75c07af4fc04b2f5f3.roa
Signing time:             Mon 11 Apr 2022 20:10:54 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     272031
IP address blocks:        2803:3510::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b342d0318aade2e11dbe4798c7733532e7ee94
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=90337a667922f7baa313ac75c07af4fc04b2f5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:5a:aa:70:a6:e9:28:60:0a:3b:8a:51:9a:
                    1b:f8:1d:c7:0b:d0:18:7d:64:91:da:b3:3b:61:27:
                    ca:d5:36:4d:e3:0d:c6:da:6f:42:2b:37:5a:7f:0e:
                    9a:fa:be:1b:06:87:ac:64:2b:2b:6d:59:7e:58:69:
                    b5:23:59:de:2f:ab:77:e2:78:c4:e4:8c:18:c5:15:
                    02:c8:8b:e9:25:3b:fa:cc:31:58:83:02:db:f1:38:
                    4e:6c:cb:78:5f:2e:a7:15:bf:6b:0f:d0:e9:c9:a5:
                    ea:ef:b2:43:77:18:c4:02:a7:ea:06:fa:9d:ee:36:
                    44:cd:4f:39:fe:4f:55:04:04:c6:6f:67:48:71:68:
                    2c:f7:59:3e:d7:82:a0:3c:88:3f:59:f8:3c:c5:10:
                    f5:f1:ec:69:64:7b:cf:d5:f2:2a:ed:1b:7e:af:21:
                    e5:85:4b:de:48:b6:9d:f0:dd:a4:c7:f8:d5:3c:b0:
                    b0:7f:7b:4a:d8:fc:62:d9:4d:98:3b:94:dc:e3:b2:
                    87:2e:01:eb:3e:c8:80:d2:ac:68:3f:c0:e9:b4:8e:
                    d9:72:13:72:57:e5:85:c9:56:ad:c4:51:54:08:74:
                    4e:49:ae:37:3c:09:23:55:f2:28:89:45:a2:6c:b8:
                    3c:06:9e:6e:f4:6e:d6:eb:7b:c4:07:84:4e:75:25:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:E3:FA:1C:C6:B4:FE:11:CB:91:78:51:FB:E1:38:5E:D7:A6:10
            X509v3 Authority Key Identifier:
                keyid:05:A3:C3:43:C5:18:68:BD:78:57:F9:E2:4A:7E:F7:E9:01:12:DD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b342d0318aade2e11dbe4798c7733532e7ee94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/90337a667922f7baa313ac75c07af4fc04b2f5f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/50b342d0318aade2e11dbe4798c7733532e7ee94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3510::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:71:e2:5b:4d:b9:c9:54:ac:4c:e0:ad:2f:ab:f3:37:b6:
         ba:0a:1f:73:23:d3:70:d8:f3:74:69:aa:c5:6e:e7:35:de:38:
         a0:be:a6:ed:af:e4:26:3c:16:dc:0e:13:6d:54:a1:25:73:6d:
         4f:49:ac:27:c3:30:f9:a8:8b:ab:22:2c:f9:3a:3d:01:7a:96:
         5a:39:14:19:31:fc:7f:3f:5b:5a:c7:58:0b:ad:06:b6:48:de:
         3c:91:93:7e:ca:e4:e0:d7:92:c2:bf:9d:ab:e6:27:71:f4:7a:
         92:35:ea:03:8b:36:d3:a8:2a:3e:25:20:f6:39:fa:10:f6:31:
         c6:c0:ac:3c:41:9d:e2:6a:ca:57:f5:b8:e1:99:46:c2:bd:7f:
         ae:72:4b:94:69:49:c6:02:16:9d:78:8a:be:24:e7:7a:73:b6:
         8c:34:e8:fe:5f:4b:e9:f5:da:6f:45:e2:d3:6d:96:81:76:51:
         98:72:ae:76:e3:05:e1:7b:35:f7:9a:8e:2a:ad:58:96:4a:74:
         e4:f2:8c:b0:cb:ba:74:54:00:f2:48:45:83:51:d8:8f:1b:b6:
         e5:df:bc:3d:27:5f:16:95:17:61:2c:b0:8c:c8:4d:a6:bd:23:
         b5:5f:ee:f0:d9:12:5a:c6:63:54:78:ca:3e:51:c9:a7:e1:06:
         5b:60:6a:98
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICCZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTBi
MzQyZDAzMThhYWRlMmUxMWRiZTQ3OThjNzczMzUzMmU3ZWU5NDAeFw0yMjA0MTEw
MzAwMDBaFw0yNDA0MTEwMzAwMDBaMDMxMTAvBgNVBAMTKDkwMzM3YTY2NzkyMmY3
YmFhMzEzYWM3NWMwN2FmNGZjMDRiMmY1ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpiFqqcKbpKGAKO4pRmhv4HccL0Bh9ZJHaszthJ8rVNk3jDcba
b0IrN1p/Dpr6vhsGh6xkKyttWX5YabUjWd4vq3fieMTkjBjFFQLIi+klO/rMMViD
AtvxOE5sy3hfLqcVv2sP0OnJpervskN3GMQCp+oG+p3uNkTNTzn+T1UEBMZvZ0hx
aCz3WT7XgqA8iD9Z+DzFEPXx7Glke8/V8irtG36vIeWFS95Itp3w3aTH+NU8sLB/
e0rY/GLZTZg7lNzjsocuAes+yIDSrGg/wOm0jtlyE3JX5YXJVq3EUVQIdE5Jrjc8
CSNV8iiJRaJsuDwGnm70btbre8QHhE51JftNAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQU6BTj+hzGtP4Ry5F4UfvhOF7XphAwHwYDVR0jBBgwFoAUBaPDQ8UYaL14V/ni
Sn736QES3a0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81MGIzNDJk
MDMxOGFhZGUyZTExZGJlNDc5OGM3NzMzNTMyZTdlZTk0LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84OWRiYTMwZS1mMWE1LTQxNzItYjlmMi1lNDkyNGEx
OGRhNzgvOTAzMzdhNjY3OTIyZjdiYWEzMTNhYzc1YzA3YWY0ZmMwNGIyZjVmMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzg5ZGJhMzBlLWYxYTUtNDE3Mi1iOWYyLWU0OTI0
YTE4ZGE3OC81MGIzNDJkMDMxOGFhZGUyZTExZGJlNDc5OGM3NzMzNTMyZTdlZTk0
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAM1EDANBgkqhkiG9w0BAQsFAAOCAQEAUg1x4ltNuclUrEzg
rS+r8ze2ugofcyPTcNjzdGmqxW7nNd44oL6m7a/kJjwW3A4TbVShJXNtT0msJ8Mw
+aiLqyIs+To9AXqWWjkUGTH8fz9bWsdYC60GtkjePJGTfsrk4NeSwr+dq+YncfR6
kjXqA4s206gqPiUg9jn6EPYxxsCsPEGd4mrKV/W44ZlGwr1/rnJLlGlJxgIWnXiK
viTnenO2jDTo/l9L6fXab0Xi022WgXZRmHKuduMF4Xs195qOKq1Ylkp05PKMsMu6
dFQA8khFg1HYjxu25d+8PSdfFpUXYSywjMhNpr0jtV/u8NkSWsZjVHjKPlHJp+EG
W2BqmA==
-----END CERTIFICATE-----