Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/3e42143eb8b4508a2a8ebe7395c2cc5107908719.roa
File:                     3e42143eb8b4508a2a8ebe7395c2cc5107908719.roa (raw, json)
Hash identifier:          czriL7P3wXrvmyZB038Z5FAoNfvk+kT7vzpgh+Y/2ak=
Subject key identifier:   94:E6:53:29:B9:E8:3C:FB:0E:2F:52:52:DC:A6:B4:CA:6F:9D:D3:92
Certificate issuer:       /CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
Certificate serial:       2005C2
Authority key identifier: F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/3e42143eb8b4508a2a8ebe7395c2cc5107908719.roa
Signing time:             Sat 06 May 2023 08:30:01 +0000
ROA not before:           Fri 05 May 2023 08:30:01 +0000
ROA not after:            Sun 04 May 2025 08:30:01 +0000
asID:                     52330
IP address blocks:        2803:8340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098626 (0x2005c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
        Validity
            Not Before: May  5 08:30:01 2023 GMT
            Not After : May  4 08:30:01 2025 GMT
        Subject: CN=3e42143eb8b4508a2a8ebe7395c2cc5107908719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:5e:12:49:80:55:1c:ae:2b:f1:e2:e0:10:
                    72:a2:7b:62:be:db:a8:91:5b:1d:ad:9b:5d:94:fe:
                    b1:1c:ea:2f:76:65:c7:36:98:df:7c:d3:15:9a:d9:
                    75:a0:e6:d4:f1:53:52:c0:98:20:57:94:d8:b4:7f:
                    fb:2a:2f:bd:4a:a8:20:f4:3c:8f:b0:74:3d:4b:58:
                    ca:2e:02:e9:ea:bd:bb:67:71:db:54:12:f1:98:9b:
                    b5:76:0f:47:d3:49:e6:a0:d0:20:4e:d5:08:29:7a:
                    be:fa:4d:43:39:40:ca:da:b0:59:d7:25:57:12:cb:
                    cf:72:ba:20:57:b9:1b:3f:de:a1:e4:7d:f4:c6:8d:
                    19:ee:8f:96:d9:b7:7c:8f:c4:1b:1e:5f:98:0e:20:
                    93:e8:1d:c0:83:3e:f3:7f:9c:ef:c8:b8:fe:5f:f9:
                    7e:2c:ac:f4:81:d6:7b:9c:5b:5e:25:d5:23:ff:44:
                    ec:8e:2c:cb:4f:a4:b7:51:64:2a:0d:e1:39:f7:dd:
                    de:03:86:56:d3:ca:df:91:fb:d5:b5:1b:24:8e:1d:
                    6b:bb:78:2b:c2:50:60:f6:c2:1b:8e:85:43:ec:29:
                    b4:60:d8:94:d6:43:c9:25:9e:12:32:e1:fe:51:56:
                    87:34:26:23:94:41:2f:92:4a:08:96:9e:5e:45:8f:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E6:53:29:B9:E8:3C:FB:0E:2F:52:52:DC:A6:B4:CA:6F:9D:D3:92
            X509v3 Authority Key Identifier:
                keyid:F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/3e42143eb8b4508a2a8ebe7395c2cc5107908719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8340::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:23:c1:7d:ae:41:8c:58:7f:16:0e:37:6b:24:7b:ac:2a:42:
         9e:66:a8:79:dc:b2:9c:b0:78:07:99:dd:28:90:b0:56:ba:12:
         9b:c5:cf:61:89:dd:dd:6a:6f:de:15:9c:be:5a:de:d8:24:b9:
         aa:75:f7:c1:fa:82:ec:2a:36:16:22:cb:8e:fa:e0:bd:92:23:
         7d:ce:ee:b7:aa:96:8a:4c:91:43:c5:6b:9f:9e:71:8d:b6:76:
         a5:ad:52:11:fd:1a:9e:db:77:a1:41:54:0d:1b:6b:e6:bc:2b:
         11:66:8d:f4:f5:c8:14:be:71:c7:c3:d9:00:9c:9e:6d:7b:90:
         1f:ad:aa:ea:11:80:0c:b1:e8:c5:24:57:1e:6b:ce:fd:35:eb:
         ce:7d:e3:7c:94:58:5a:f4:a3:7e:7e:25:4a:fd:e7:d6:c6:f5:
         48:64:b8:37:49:71:ee:16:40:29:28:56:c0:b6:5a:90:23:5f:
         23:cb:a7:cf:d7:54:46:86:6e:83:d4:b1:04:c7:ca:8a:1e:d6:
         fc:21:3e:80:30:08:a1:e0:ad:ff:a1:69:09:c6:44:8d:90:1d:
         3f:7b:0e:1c:5b:56:dd:17:f8:ac:99:e1:56:e7:d8:d7:f7:39:
         02:a0:5b:68:31:d0:8e:18:d4:8a:51:9d:3b:83:3b:2d:1b:82:
         af:89:03:37
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIAXCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
MWNjYTlmNzdmMjc3NDJiNDg1YWFlMzgxMDA2MGZhODY5ZTFmYTkwHhcNMjMwNTA1
MDgzMDAxWhcNMjUwNTA0MDgzMDAxWjAzMTEwLwYDVQQDEygzZTQyMTQzZWI4YjQ1
MDhhMmE4ZWJlNzM5NWMyY2M1MTA3OTA4NzE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnRxeEkmAVRyuK/Hi4BByontivtuokVsdrZtdlP6xHOovdmXH
NpjffNMVmtl1oObU8VNSwJggV5TYtH/7Ki+9Sqgg9DyPsHQ9S1jKLgLp6r27Z3Hb
VBLxmJu1dg9H00nmoNAgTtUIKXq++k1DOUDK2rBZ1yVXEsvPcrogV7kbP96h5H30
xo0Z7o+W2bd8j8QbHl+YDiCT6B3Agz7zf5zvyLj+X/l+LKz0gdZ7nFteJdUj/0Ts
jizLT6S3UWQqDeE5993eA4ZW08rfkfvVtRskjh1ru3grwlBg9sIbjoVD7Cm0YNiU
1kPJJZ4SMuH+UVaHNCYjlEEvkkoIlp5eRY+VoQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJTmUym56Dz7Di9SUtymtMpvndOSMB8GA1UdIwQYMBaAFPLeArkpTNXdBf4O
JdfnHRb7vkX+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxY2Nh
OWY3N2YyNzc0MmI0ODVhYWUzODEwMDYwZmE4NjllMWZhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjNjY3NjAtZjk2Mi00NTc4LThmMDUtMmU2OTAy
Y2NjMmQ3LzNlNDIxNDNlYjhiNDUwOGEyYThlYmU3Mzk1YzJjYzUxMDc5MDg3MTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM2Njc2MC1mOTYyLTQ1NzgtOGYwNS0yZTY5
MDJjY2MyZDcvZmYxY2NhOWY3N2YyNzc0MmI0ODVhYWUzODEwMDYwZmE4NjllMWZh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDg0AwDQYJKoZIhvcNAQELBQADggEBAHcjwX2uQYxYfxYO
N2ske6wqQp5mqHncspyweAeZ3SiQsFa6EpvFz2GJ3d1qb94VnL5a3tgkuap198H6
guwqNhYiy4764L2SI33O7reqlopMkUPFa5+ecY22dqWtUhH9Gp7bd6FBVA0ba+a8
KxFmjfT1yBS+ccfD2QCcnm17kB+tquoRgAyx6MUkVx5rzv01685943yUWFr0o35+
JUr959bG9UhkuDdJce4WQCkoVsC2WpAjXyPLp8/XVEaGboPUsQTHyooe1vwhPoAw
CKHgrf+haQnGRI2QHT97DhxbVt0X+KyZ4Vbn2Nf3OQKgW2gx0I4Y1IpRnTuDOy0b
gq+JAzc=
-----END CERTIFICATE-----