Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/37fb50a0d243d37504607ece1ef39edbb20c3f31.roa
File:                     37fb50a0d243d37504607ece1ef39edbb20c3f31.roa (raw, json)
Hash identifier:          5jNMhN4ZlEMgjMMhALfyWyuxnyDB6nPk0RmzvAXHhq4=
Subject key identifier:   F3:C8:25:98:6F:C6:8F:A5:45:58:DE:14:1B:02:9E:34:99:56:60:70
Certificate issuer:       /CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
Certificate serial:       2187E8
Authority key identifier: 44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/37fb50a0d243d37504607ece1ef39edbb20c3f31.roa
Signing time:             Wed 14 Jun 2023 08:30:00 +0000
ROA not before:           Tue 13 Jun 2023 08:30:00 +0000
ROA not after:            Thu 12 Jun 2025 08:30:00 +0000
asID:                     52238
IP address blocks:        2803:7260::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197480 (0x2187e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
        Validity
            Not Before: Jun 13 08:30:00 2023 GMT
            Not After : Jun 12 08:30:00 2025 GMT
        Subject: CN=37fb50a0d243d37504607ece1ef39edbb20c3f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:05:4f:2e:6b:bd:40:27:dc:61:ac:29:d5:
                    85:2c:16:41:94:99:79:73:b4:73:dd:ae:b1:66:06:
                    5f:88:3c:7f:78:d3:39:a6:b5:ba:77:31:99:8e:42:
                    09:e2:5d:d8:9c:29:b2:0a:c7:81:ee:26:f9:b1:18:
                    dd:87:a6:23:b9:ec:9c:b7:11:ea:b0:84:64:18:d8:
                    f6:9d:96:65:d7:aa:e9:99:0b:9d:35:a9:70:af:3a:
                    04:e9:b7:73:9b:a4:64:ae:9c:82:98:6d:3f:a5:eb:
                    84:db:34:2e:36:92:52:95:f2:ed:c6:bd:dc:f7:55:
                    bd:3c:8a:98:25:9c:26:0e:e8:0a:a8:a9:09:8e:7a:
                    bd:32:1b:48:38:59:9c:00:ef:23:7f:df:4b:3a:48:
                    45:ac:5d:ea:32:f2:ea:e6:74:5c:82:ee:c2:73:fe:
                    c9:89:d9:12:99:00:a1:84:7e:6a:dd:51:ef:20:d5:
                    a1:73:c9:bb:f4:fa:75:92:3b:1d:75:65:fb:83:5c:
                    99:f7:66:1c:e6:42:a0:61:be:9e:bb:f9:4e:ea:a9:
                    73:68:93:b8:b7:00:cb:9f:26:ce:9e:8e:51:3e:17:
                    48:7a:6e:fc:63:a2:44:3f:5f:d6:24:a0:21:ec:d9:
                    61:65:a4:2d:2e:1e:31:29:f1:cf:9a:38:f0:75:55:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:25:98:6F:C6:8F:A5:45:58:DE:14:1B:02:9E:34:99:56:60:70
            X509v3 Authority Key Identifier:
                keyid:44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/37fb50a0d243d37504607ece1ef39edbb20c3f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7260::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:71:0d:a7:3f:65:46:e3:e0:8c:12:b6:7f:e1:04:9e:26:4a:
         9d:42:79:44:3a:41:a7:37:96:90:5e:91:bc:73:dd:c9:c6:d4:
         8e:7f:7c:1f:16:fe:5a:21:01:94:88:01:7c:02:a5:61:e7:1b:
         ff:41:24:9c:5a:fe:8c:85:32:0a:bd:7a:fc:22:c0:54:09:0b:
         9b:08:15:fa:10:54:56:b9:05:41:bc:c7:ec:e2:5d:82:71:8b:
         03:ef:de:37:8d:fe:fd:bd:71:36:81:dd:9a:5b:b3:7f:a4:2a:
         b7:e2:f8:6c:3f:5c:45:40:b0:d3:df:3f:40:b1:88:96:a3:f9:
         0a:a0:9e:66:7d:3a:6f:f2:72:af:ce:89:08:5a:05:43:0f:8d:
         1d:96:14:68:f8:be:01:4c:1d:50:6c:00:cc:3b:d1:83:a3:3a:
         04:2d:8a:15:9e:59:76:71:f8:a8:b2:38:fc:e9:63:b5:03:45:
         9a:bb:38:74:eb:57:96:b4:7b:8d:27:09:5d:2e:d8:19:3a:bb:
         aa:99:d7:b6:c5:cf:f2:75:88:14:64:77:8f:e7:89:93:e9:dd:
         84:0c:cb:e2:2e:e7:c9:9f:3f:39:75:58:49:f7:dc:39:5d:88:
         a8:77:3a:98:b2:32:c1:e1:93:4c:cf:c4:7b:b9:2b:e3:fb:bd:
         aa:24:36:40
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIYfoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEy
MzE5OWNiMTg5ZmIxNTAyZDFkZjI3NTRkZWIxZGY3NmFmY2I1YmEwHhcNMjMwNjEz
MDgzMDAwWhcNMjUwNjEyMDgzMDAwWjAzMTEwLwYDVQQDEygzN2ZiNTBhMGQyNDNk
Mzc1MDQ2MDdlY2UxZWYzOWVkYmIyMGMzZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArfoFTy5rvUAn3GGsKdWFLBZBlJl5c7Rz3a6xZgZfiDx/eNM5
prW6dzGZjkIJ4l3YnCmyCseB7ib5sRjdh6YjueyctxHqsIRkGNj2nZZl16rpmQud
NalwrzoE6bdzm6RkrpyCmG0/peuE2zQuNpJSlfLtxr3c91W9PIqYJZwmDugKqKkJ
jnq9MhtIOFmcAO8jf99LOkhFrF3qMvLq5nRcgu7Cc/7JidkSmQChhH5q3VHvINWh
c8m79Pp1kjsddWX7g1yZ92Yc5kKgYb6eu/lO6qlzaJO4twDLnybOno5RPhdIem78
Y6JEP1/WJKAh7NlhZaQtLh4xKfHPmjjwdVVttQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPPIJZhvxo+lRVjeFBsCnjSZVmBwMB8GA1UdIwQYMBaAFESrXHAzH44hESjC
UM4E/JUnvOLKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTIzMTk5
Y2IxODlmYjE1MDJkMWRmMjc1NGRlYjFkZjc2YWZjYjViYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWY5ZmYzOTMtODM0MS00MzgyLWExNTYtMDExYTZi
ZTQ3ZGU3LzM3ZmI1MGEwZDI0M2QzNzUwNDYwN2VjZTFlZjM5ZWRiYjIwYzNmMzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZjlmZjM5My04MzQxLTQzODItYTE1Ni0wMTFh
NmJlNDdkZTcvYTIzMTk5Y2IxODlmYjE1MDJkMWRmMjc1NGRlYjFkZjc2YWZjYjVi
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDcmAwDQYJKoZIhvcNAQELBQADggEBAAFxDac/ZUbj4IwS
tn/hBJ4mSp1CeUQ6Qac3lpBekbxz3cnG1I5/fB8W/lohAZSIAXwCpWHnG/9BJJxa
/oyFMgq9evwiwFQJC5sIFfoQVFa5BUG8x+ziXYJxiwPv3jeN/v29cTaB3Zpbs3+k
Krfi+Gw/XEVAsNPfP0CxiJaj+QqgnmZ9Om/ycq/OiQhaBUMPjR2WFGj4vgFMHVBs
AMw70YOjOgQtihWeWXZx+KiyOPzpY7UDRZq7OHTrV5a0e40nCV0u2Bk6u6qZ17bF
z/J1iBRkd4/niZPp3YQMy+Iu58mfPzl1WEn33DldiKh3OpiyMsHhk0zPxHu5K+P7
vaokNkA=
-----END CERTIFICATE-----