Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/0ed2796756a5b47d8ea76034c4a417981a013370.roa
File:                     0ed2796756a5b47d8ea76034c4a417981a013370.roa (raw, json)
Hash identifier:          U2K9tWhJUjXs12Zcgli4EDevUzQi1TRGs6KR6PCdMho=
Subject key identifier:   45:63:33:7C:B6:0C:15:D8:5B:BB:AF:7D:3A:E7:8C:EE:C3:C9:4E:A3
Certificate issuer:       /CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab
Certificate serial:       1B5201
Authority key identifier: 03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/0ed2796756a5b47d8ea76034c4a417981a013370.roa
Signing time:             Mon 31 Oct 2022 20:21:09 +0000
ROA not before:           Sun 30 Oct 2022 20:20:59 +0000
ROA not after:            Thu 31 Oct 2024 20:20:59 +0000
asID:                     61497
IP address blocks:        2803:d040:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790465 (0x1b5201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab
        Validity
            Not Before: Oct 30 20:20:59 2022 GMT
            Not After : Oct 31 20:20:59 2024 GMT
        Subject: CN=0ed2796756a5b47d8ea76034c4a417981a013370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:89:91:41:7b:d8:29:e2:b0:c7:fd:f1:c0:
                    8d:39:58:39:51:fd:ac:12:c9:88:cc:4f:9d:05:94:
                    d5:a6:bb:6b:65:db:11:94:00:6e:63:07:d5:32:4e:
                    e9:64:24:20:52:49:b8:d5:38:7f:22:93:bf:a9:ef:
                    c1:0e:c8:45:43:c8:3c:2e:4e:9b:f8:6c:de:5c:34:
                    93:03:36:be:64:12:9c:3e:7c:1f:c3:63:94:bf:24:
                    d9:45:3d:7c:4b:c6:8c:f0:4c:e4:85:8e:cf:54:d5:
                    47:b8:62:8c:45:64:a4:38:b7:04:ce:11:96:19:e5:
                    ed:cc:bf:9a:bc:a0:c3:d0:62:cf:6c:4a:31:f3:a4:
                    b1:80:5b:58:3e:57:16:39:93:86:6f:dc:6c:38:e2:
                    f4:05:a0:20:95:96:1c:92:ca:cc:35:78:b7:41:bc:
                    40:f2:22:4e:40:bf:a7:66:b0:91:a4:27:15:c9:13:
                    b4:93:90:a0:d9:98:54:f8:a3:9b:fb:aa:75:e3:25:
                    87:75:b9:06:47:ca:db:2c:71:47:eb:4b:c3:79:7a:
                    46:50:57:62:a6:66:a9:33:03:77:87:ba:41:f6:2b:
                    ad:67:d7:9e:56:ca:94:cb:8d:f9:70:06:3c:4a:3a:
                    43:c1:72:7d:fa:e0:a7:26:d6:ab:63:b5:0a:05:ab:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:63:33:7C:B6:0C:15:D8:5B:BB:AF:7D:3A:E7:8C:EE:C3:C9:4E:A3
            X509v3 Authority Key Identifier:
                keyid:03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/0ed2796756a5b47d8ea76034c4a417981a013370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d040:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:54:56:11:20:a9:fd:98:05:8f:58:96:53:a2:06:b1:9f:30:
         01:f4:a8:ec:07:c9:b6:d2:54:70:66:2c:07:47:f5:aa:18:62:
         1b:58:af:b3:01:f2:bc:f3:a1:3e:58:5c:58:2d:25:fb:16:ad:
         1c:9c:23:28:ee:94:20:2d:1a:ca:46:d8:87:53:81:b3:11:9c:
         bc:35:83:f1:9d:8a:a7:24:43:3f:a1:50:8b:a7:ae:7a:3a:4e:
         51:47:0c:25:1a:2e:3f:40:bd:25:96:1a:75:cd:65:dc:61:c8:
         8b:1b:28:4e:3d:19:f6:62:a8:07:00:de:d1:aa:02:9a:37:0a:
         fb:70:4b:ef:ed:44:03:52:42:87:f1:68:00:f2:65:75:92:68:
         07:51:29:22:12:16:14:59:fb:e0:d7:68:10:de:d3:58:9f:36:
         57:d3:f9:43:4b:c3:36:2a:4e:33:d3:5c:0b:64:e0:7a:cf:59:
         38:97:8f:2d:ca:47:81:29:d1:ab:29:81:06:8c:d0:25:53:5c:
         c0:74:c9:4e:37:e5:45:d2:4c:35:ec:f1:2b:58:09:53:d2:ac:
         ec:17:f1:e3:b2:3e:89:ea:37:95:2a:0d:46:58:79:c2:a4:1e:
         0f:63:3e:b3:e1:92:b5:c5:30:58:ca:d3:86:67:e6:d2:65:78:
         0a:06:4f:50
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDG1IBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0
ZTY1ZDljZmEwNGQ3NDdiODhlYTI4ZmQ5YWQ5NzhlN2M3NjhmYWIwHhcNMjIxMDMw
MjAyMDU5WhcNMjQxMDMxMjAyMDU5WjAzMTEwLwYDVQQDEygwZWQyNzk2NzU2YTVi
NDdkOGVhNzYwMzRjNGE0MTc5ODFhMDEzMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp8iJkUF72CnisMf98cCNOVg5Uf2sEsmIzE+dBZTVprtrZdsR
lABuYwfVMk7pZCQgUkm41Th/IpO/qe/BDshFQ8g8Lk6b+GzeXDSTAza+ZBKcPnwf
w2OUvyTZRT18S8aM8EzkhY7PVNVHuGKMRWSkOLcEzhGWGeXtzL+avKDD0GLPbEox
86SxgFtYPlcWOZOGb9xsOOL0BaAglZYcksrMNXi3QbxA8iJOQL+nZrCRpCcVyRO0
k5Cg2ZhU+KOb+6p14yWHdbkGR8rbLHFH60vDeXpGUFdipmapMwN3h7pB9iutZ9ee
VsqUy435cAY8SjpDwXJ9+uCnJtarY7UKBasCJQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEVjM3y2DBXYW7uvfTrnjO7DyU6jMB8GA1UdIwQYMBaAFAPVabhWZqs+ob9z
x9E/TVl1iBVgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDRlNjVk
OWNmYTA0ZDc0N2I4OGVhMjhmZDlhZDk3OGU3Yzc2OGZhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTI5MjAzYzYtY2JiMS00ODk0LWIyYTgtYmVkNTQ0
OTg2NGVhLzBlZDI3OTY3NTZhNWI0N2Q4ZWE3NjAzNGM0YTQxNzk4MWEwMTMzNzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MjkyMDNjNi1jYmIxLTQ4OTQtYjJhOC1iZWQ1
NDQ5ODY0ZWEvMDRlNjVkOWNmYTA0ZDc0N2I4OGVhMjhmZDlhZDk3OGU3Yzc2OGZh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD0EAAATANBgkqhkiG9w0BAQsFAAOCAQEABlRWESCp/ZgF
j1iWU6IGsZ8wAfSo7AfJttJUcGYsB0f1qhhiG1ivswHyvPOhPlhcWC0l+xatHJwj
KO6UIC0aykbYh1OBsxGcvDWD8Z2KpyRDP6FQi6euejpOUUcMJRouP0C9JZYadc1l
3GHIixsoTj0Z9mKoBwDe0aoCmjcK+3BL7+1EA1JCh/FoAPJldZJoB1EpIhIWFFn7
4NdoEN7TWJ82V9P5Q0vDNipOM9NcC2Tges9ZOJePLcpHgSnRqymBBozQJVNcwHTJ
TjflRdJMNezxK1gJU9Ks7Bfx47I+ieo3lSoNRlh5wqQeD2M+s+GStcUwWMrThmfm
0mV4CgZPUA==
-----END CERTIFICATE-----