Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/f21e7587145e03a241df1e7fe525500e06cc41e4.roa
File:                     f21e7587145e03a241df1e7fe525500e06cc41e4.roa (raw, json)
Hash identifier:          n8FtGurGUWykmovBS/QKP3TY+epuyojySThdmE9v1dM=
Subject key identifier:   6F:57:6C:B4:51:99:95:5A:C7:88:A3:D5:B2:C4:11:DA:C4:E8:6D:21
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       1DFCEA
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/f21e7587145e03a241df1e7fe525500e06cc41e4.roa
Signing time:             Mon 08 May 2023 18:18:33 +0000
ROA not before:           Sun 07 May 2023 18:18:29 +0000
ROA not after:            Thu 08 May 2025 18:18:29 +0000
asID:                     11340
IP address blocks:        146.83.0.0/16 maxlen: 24
                          2001:1310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965290 (0x1dfcea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: May  7 18:18:29 2023 GMT
            Not After : May  8 18:18:29 2025 GMT
        Subject: CN=f21e7587145e03a241df1e7fe525500e06cc41e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:b2:4b:8e:4b:5c:52:4c:76:62:46:41:74:
                    1b:77:38:18:39:8c:86:39:57:27:43:16:26:bb:5f:
                    23:c6:5c:6f:ca:6e:6a:7a:4c:49:c7:35:23:b2:8d:
                    88:72:7a:f7:83:6f:1e:16:2f:e3:76:fd:83:07:ba:
                    1d:fe:d9:a6:d3:e4:bc:17:d5:0b:97:2b:51:58:1d:
                    04:94:10:49:1e:c8:32:3f:68:e8:52:7a:d0:70:e9:
                    86:41:97:b7:8a:5f:70:48:b9:d7:ee:78:e7:d8:1d:
                    e5:a5:d5:f6:22:b3:4b:40:88:9d:1a:b1:6d:f9:63:
                    7a:24:9f:f6:23:80:a5:76:11:ff:ad:2d:d8:76:5b:
                    0c:d6:ef:4d:fc:24:bf:e0:6c:92:ed:9a:81:69:a9:
                    c4:a2:99:25:dc:18:a7:82:a3:90:97:74:b5:2e:29:
                    82:c2:7f:d1:2e:90:65:7e:56:45:bc:77:67:79:43:
                    1e:e1:df:de:84:29:39:72:3e:92:8d:12:5b:9e:56:
                    ec:b0:fc:cb:47:8e:d1:71:ff:f0:8e:7b:3f:24:94:
                    c8:16:93:cc:d7:3c:08:62:2b:e6:be:0e:26:25:05:
                    62:12:bc:1e:39:48:fa:bf:59:ac:08:7a:f7:ab:ce:
                    9a:d8:01:48:1d:29:f5:6f:12:e3:ee:22:4c:1b:bc:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:6C:B4:51:99:95:5A:C7:88:A3:D5:B2:C4:11:DA:C4:E8:6D:21
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/f21e7587145e03a241df1e7fe525500e06cc41e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.0.0/16
                IPv6:
                  2001:1310::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:15:c4:50:69:83:9f:be:92:fd:f4:d6:d8:d0:64:c9:9e:ce:
         98:98:c0:09:d1:2a:42:7b:56:b2:f8:4c:ef:17:81:9e:29:2e:
         d0:97:89:06:a2:d7:77:f2:8f:6e:9e:d8:7b:8a:b4:92:47:b5:
         d2:4d:7d:f3:e1:9b:f4:45:27:48:f7:5b:f7:b5:1c:4a:77:0e:
         4b:ab:6c:98:4c:47:7c:02:e6:37:e9:da:8f:11:95:09:67:57:
         b7:cc:5c:32:fc:37:d8:ca:4f:be:49:e5:3e:6c:8d:6c:03:a7:
         8c:52:e0:5c:72:ae:35:de:6d:c8:73:e2:0a:34:cf:be:42:b6:
         e8:a0:8b:91:04:53:ad:31:28:2d:12:96:bf:0b:a1:17:c4:ca:
         2f:33:8d:95:5f:4f:18:cf:95:ad:dd:15:5f:b0:2f:4e:5d:17:
         bb:69:8c:c8:89:f2:92:37:1c:28:80:c1:8d:3b:9d:39:22:f1:
         25:b0:0f:46:10:f9:2d:fc:f3:42:e3:a0:e4:84:af:d4:b1:44:
         83:65:af:9d:fe:d6:bc:fd:50:d8:02:4a:43:98:77:a2:42:6a:
         f9:33:25:60:ba:f2:42:bc:49:b8:ac:3f:dc:9d:a0:93:17:a1:
         f2:57:91:3e:9a:a8:51:1c:89:8a:00:2c:50:36:fd:a5:be:de:
         69:e7:fa:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDHfzqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ4
OTQ3NDMzZWIwMDNlMWEwNzFmNGZmZjVkZWI5NmM4N2E2OTE5YTMwHhcNMjMwNTA3
MTgxODI5WhcNMjUwNTA4MTgxODI5WjAzMTEwLwYDVQQDEyhmMjFlNzU4NzE0NWUw
M2EyNDFkZjFlN2ZlNTI1NTAwZTA2Y2M0MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkceyS45LXFJMdmJGQXQbdzgYOYyGOVcnQxYmu18jxlxvym5q
ekxJxzUjso2Icnr3g28eFi/jdv2DB7od/tmm0+S8F9ULlytRWB0ElBBJHsgyP2jo
UnrQcOmGQZe3il9wSLnX7njn2B3lpdX2IrNLQIidGrFt+WN6JJ/2I4CldhH/rS3Y
dlsM1u9N/CS/4GyS7ZqBaanEopkl3BingqOQl3S1LimCwn/RLpBlflZFvHdneUMe
4d/ehCk5cj6SjRJbnlbssPzLR47Rcf/wjns/JJTIFpPM1zwIYivmvg4mJQViErwe
OUj6v1msCHr3q86a2AFIHSn1bxLj7iJMG7ymEwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFG9XbLRRmZVax4ij1bLEEdrE6G0hMB8GA1UdIwQYMBaAFP/GevltUSfkhYg5
guW1CgwIY7aCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDg5NDc0
MzNlYjAwM2UxYTA3MWY0ZmZmNWRlYjk2Yzg3YTY5MTlhMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTQ5M2I0MDgtNWFjMS00M2E4LTllYmUtOTk2ZDI5
OTM4ZWYyL2YyMWU3NTg3MTQ1ZTAzYTI0MWRmMWU3ZmU1MjU1MDBlMDZjYzQxZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNDkzYjQwOC01YWMxLTQzYTgtOWViZS05OTZk
Mjk5MzhlZjIvNDg5NDc0MzNlYjAwM2UxYTA3MWY0ZmZmNWRlYjk2Yzg3YTY5MTlh
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwCwQCAAEwBQMDAJJTMA0EAgACMAcDBQAgARMQMA0GCSqGSIb3DQEBCwUAA4IB
AQAZFcRQaYOfvpL99NbY0GTJns6YmMAJ0SpCe1ay+EzvF4GeKS7Ql4kGotd38o9u
nth7irSSR7XSTX3z4Zv0RSdI91v3tRxKdw5Lq2yYTEd8AuY36dqPEZUJZ1e3zFwy
/DfYyk++SeU+bI1sA6eMUuBccq413m3Ic+IKNM++QrbooIuRBFOtMSgtEpa/C6EX
xMovM42VX08Yz5Wt3RVfsC9OXRe7aYzIifKSNxwogMGNO505IvElsA9GEPkt/PNC
46DkhK/UsUSDZa+d/ta8/VDYAkpDmHeiQmr5MyVguvJCvEm4rD/cnaCTF6HyV5E+
mqhRHImKACxQNv2lvt5p5/r2
-----END CERTIFICATE-----