Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/7e209cbecfc5b42344000a297ad4b374ce688a04.roa
File:                     7e209cbecfc5b42344000a297ad4b374ce688a04.roa (raw, json)
Hash identifier:          x5NoCLceGkjIU92TU9249IVaOOc4bah9VG+AQ8F1JWM=
Subject key identifier:   F5:4B:D1:A9:1A:CB:80:89:C4:E5:FE:2B:78:C6:C4:80:63:1F:BB:BB
Certificate issuer:       /CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
Certificate serial:       1F01CD
Authority key identifier: 0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/7e209cbecfc5b42344000a297ad4b374ce688a04.roa
Signing time:             Mon 08 May 2023 22:00:24 +0000
ROA not before:           Sun 07 May 2023 22:00:24 +0000
ROA not after:            Thu 08 May 2025 22:00:24 +0000
asID:                     269749
IP address blocks:        2803:f960::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2032077 (0x1f01cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7
        Validity
            Not Before: May  7 22:00:24 2023 GMT
            Not After : May  8 22:00:24 2025 GMT
        Subject: CN=7e209cbecfc5b42344000a297ad4b374ce688a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:84:af:ea:4c:e7:75:46:7f:96:be:cc:d9:
                    37:c4:d2:62:d0:f1:f0:59:fb:d0:c8:07:05:a5:3b:
                    25:fd:bb:b8:c9:41:5b:64:3b:ee:67:61:71:f5:aa:
                    48:93:16:e9:93:59:d0:a5:d7:19:2a:6d:3a:fc:8c:
                    e2:ad:ac:e0:30:6d:a7:39:62:3c:2c:00:e5:db:8e:
                    af:06:26:f5:aa:55:bd:f0:bf:e0:ac:5f:4e:2e:3f:
                    f6:25:ad:ad:cc:6e:7e:73:a5:4b:ab:0a:88:ee:dd:
                    ec:f7:8b:40:82:ee:29:8c:6b:98:b3:98:07:6c:5f:
                    e2:d1:18:0c:59:1f:7d:26:af:8b:da:d4:37:60:02:
                    05:cc:26:b8:8a:19:26:7b:20:98:3d:db:ed:d4:3f:
                    48:0e:42:6b:aa:09:30:01:e8:89:03:1c:9d:f7:d1:
                    78:4b:6c:d4:c4:21:44:31:7d:6a:d2:24:84:20:6e:
                    78:99:fa:c3:97:34:4b:fb:92:f3:0b:23:8c:9d:dd:
                    79:c5:45:02:e9:ef:48:0c:f4:da:d5:9d:41:07:f4:
                    cf:37:d9:3e:e8:c2:61:09:6c:55:5c:9f:f5:79:9e:
                    8a:29:3a:6e:95:06:f4:4f:4c:e8:8d:1a:f3:12:0f:
                    d2:dc:aa:ce:8c:c0:f3:f9:b8:ac:26:11:c3:20:3a:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4B:D1:A9:1A:CB:80:89:C4:E5:FE:2B:78:C6:C4:80:63:1F:BB:BB
            X509v3 Authority Key Identifier:
                keyid:0D:FB:6E:FB:13:28:1B:AA:C1:19:FD:C7:C9:50:91:48:87:0C:02:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/7e209cbecfc5b42344000a297ad4b374ce688a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/901eb55c-e24b-4030-b7b8-fa4b8e3a6a30/0ce734ab5bcb4d2ab5fe5de4290e5746296d58b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:67:46:4e:65:48:4b:26:9c:57:c4:4f:46:89:09:e8:3c:7b:
         30:25:29:71:f0:4e:b7:e3:c0:6b:3b:1e:f4:71:fc:e6:50:f4:
         f1:d1:da:38:a6:40:2a:83:2a:c1:02:fe:24:9c:39:bf:47:12:
         b6:b9:65:ed:e3:7a:c3:03:dd:0c:dc:9d:06:f0:a6:c5:78:6d:
         83:d2:2f:9c:a2:23:d6:84:65:96:ae:8f:6d:8c:64:63:47:4c:
         ea:f5:07:1d:e1:c9:c6:dd:08:f8:14:c5:e3:67:aa:48:fc:b3:
         0c:20:81:e9:8b:19:bc:3c:e7:30:7f:56:3f:80:04:5b:e5:1f:
         b5:fa:8d:ab:72:09:af:ec:bb:85:72:15:c7:ca:18:3d:7f:b8:
         ce:ac:f8:c2:26:ca:88:5d:6a:39:1f:67:24:73:8b:d8:84:05:
         38:46:f6:17:74:c3:55:ad:9f:04:be:e2:0f:18:a2:07:4a:9a:
         e6:a4:f1:a4:cd:95:7a:ee:31:42:a5:2a:33:c5:e7:5d:98:39:
         5b:25:ee:37:2d:c8:b1:73:91:fc:ca:b9:f2:5e:2b:01:c4:dc:
         59:f1:53:65:97:68:15:c3:bc:c8:3c:35:4b:bd:74:ec:66:0a:
         fb:96:db:ed:d7:c5:44:3e:ea:56:17:33:e4:94:7a:51:52:ac:
         7e:66:cd:e5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHwHNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
ZTczNGFiNWJjYjRkMmFiNWZlNWRlNDI5MGU1NzQ2Mjk2ZDU4YjcwHhcNMjMwNTA3
MjIwMDI0WhcNMjUwNTA4MjIwMDI0WjAzMTEwLwYDVQQDEyg3ZTIwOWNiZWNmYzVi
NDIzNDQwMDBhMjk3YWQ0YjM3NGNlNjg4YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqCuEr+pM53VGf5a+zNk3xNJi0PHwWfvQyAcFpTsl/bu4yUFb
ZDvuZ2Fx9apIkxbpk1nQpdcZKm06/IzirazgMG2nOWI8LADl246vBib1qlW98L/g
rF9OLj/2Ja2tzG5+c6VLqwqI7t3s94tAgu4pjGuYs5gHbF/i0RgMWR99Jq+L2tQ3
YAIFzCa4ihkmeyCYPdvt1D9IDkJrqgkwAeiJAxyd99F4S2zUxCFEMX1q0iSEIG54
mfrDlzRL+5LzCyOMnd15xUUC6e9IDPTa1Z1BB/TPN9k+6MJhCWxVXJ/1eZ6KKTpu
lQb0T0zojRrzEg/S3KrOjMDz+bisJhHDIDpZcwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPVL0akay4CJxOX+K3jGxIBjH7u7MB8GA1UdIwQYMBaAFA37bvsTKBuqwRn9
x8lQkUiHDAKJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGNlNzM0
YWI1YmNiNGQyYWI1ZmU1ZGU0MjkwZTU3NDYyOTZkNThiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTAxZWI1NWMtZTI0Yi00MDMwLWI3YjgtZmE0Yjhl
M2E2YTMwLzdlMjA5Y2JlY2ZjNWI0MjM0NDAwMGEyOTdhZDRiMzc0Y2U2ODhhMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MDFlYjU1Yy1lMjRiLTQwMzAtYjdiOC1mYTRi
OGUzYTZhMzAvMGNlNzM0YWI1YmNiNGQyYWI1ZmU1ZGU0MjkwZTU3NDYyOTZkNThi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD+WAwDQYJKoZIhvcNAQELBQADggEBABdnRk5lSEsmnFfE
T0aJCeg8ezAlKXHwTrfjwGs7HvRx/OZQ9PHR2jimQCqDKsEC/iScOb9HEra5Ze3j
esMD3QzcnQbwpsV4bYPSL5yiI9aEZZauj22MZGNHTOr1Bx3hycbdCPgUxeNnqkj8
swwggemLGbw85zB/Vj+ABFvlH7X6jatyCa/su4VyFcfKGD1/uM6s+MImyohdajkf
ZyRzi9iEBThG9hd0w1WtnwS+4g8YogdKmuak8aTNlXruMUKlKjPF512YOVsl7jct
yLFzkfzKufJeKwHE3FnxU2WXaBXDvMg8NUu9dOxmCvuW2+3XxUQ+6lYXM+SUelFS
rH5mzeU=
-----END CERTIFICATE-----