Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/37bc2f79224889b3f679afedeac04c4ca0cac78a.roa
File:                     37bc2f79224889b3f679afedeac04c4ca0cac78a.roa (raw, json)
Hash identifier:          VzXLv3H+VZOq53j2o1u6SZ9BSTnD91xoFVSpl+91LrI=
Subject key identifier:   2A:A8:9B:03:18:72:08:27:D4:BA:B4:43:28:64:69:9A:AD:98:4C:5B
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       1A8D35
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/37bc2f79224889b3f679afedeac04c4ca0cac78a.roa
Signing time:             Tue 06 Dec 2022 16:55:40 +0000
ROA not before:           Mon 05 Dec 2022 16:54:52 +0000
ROA not after:            Fri 06 Dec 2024 16:54:52 +0000
asID:                     267799
IP address blocks:        2803:bfa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740085 (0x1a8d35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Dec  5 16:54:52 2022 GMT
            Not After : Dec  6 16:54:52 2024 GMT
        Subject: CN=37bc2f79224889b3f679afedeac04c4ca0cac78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:52:2b:6c:1c:2e:59:03:e5:69:25:a9:8e:
                    c2:f3:d4:94:b4:eb:14:fc:9e:0b:07:79:ca:60:1e:
                    1b:ec:44:ee:6d:28:4c:a7:e4:fe:77:39:1c:ce:d9:
                    49:40:8c:83:a1:c6:78:a8:c4:96:f9:1b:f6:00:c6:
                    97:8e:99:7e:b1:2b:7f:42:1e:e9:09:53:59:77:4f:
                    63:16:29:c9:53:6d:94:0a:b9:12:cd:a2:aa:f5:70:
                    f7:5c:5e:c8:31:aa:8e:54:d3:b3:76:50:32:b3:e0:
                    59:58:c3:f6:49:f8:df:04:0f:df:8c:43:e9:4e:8f:
                    02:a3:95:f9:86:3e:98:ef:fb:80:94:34:65:8e:d7:
                    e0:c8:b3:82:bc:5c:59:41:ef:5d:51:eb:18:d9:68:
                    c2:7d:1a:19:58:a3:1b:54:6e:e1:5a:44:71:96:e8:
                    e8:4e:ee:32:ba:38:b1:f6:e2:71:8e:e1:ca:06:21:
                    7a:39:e9:68:91:17:23:bb:6a:3f:7f:5f:1e:53:2b:
                    7f:03:b7:1a:6e:f3:02:cc:b1:8c:66:2f:b9:95:54:
                    dd:d7:01:b1:cf:97:3f:e9:7e:bf:76:96:82:8d:a9:
                    bc:2c:ea:2a:5e:30:75:80:b1:02:70:87:16:a9:21:
                    8e:f5:ee:c4:a3:89:e5:8f:77:8c:64:17:cc:f4:0f:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A8:9B:03:18:72:08:27:D4:BA:B4:43:28:64:69:9A:AD:98:4C:5B
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/37bc2f79224889b3f679afedeac04c4ca0cac78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:bc:9a:84:07:2f:9f:fb:19:1c:c0:12:72:19:24:08:10:
         63:a7:e7:57:95:5d:27:64:93:c5:7e:bf:7b:8f:70:3b:88:b9:
         03:9f:bf:4f:e1:8b:57:d0:70:34:19:c3:de:13:77:35:b3:63:
         86:ac:25:47:6b:93:8c:e4:77:d5:6e:93:94:c1:54:07:02:7d:
         9f:c1:60:3d:71:0a:54:f8:45:11:af:c9:f7:f2:71:be:91:b6:
         bb:9c:98:ca:89:39:11:59:15:ff:a5:17:9e:e9:71:a7:42:f9:
         e9:1c:a4:9e:77:43:62:52:57:15:74:71:74:fe:e1:21:4e:1e:
         7c:ef:e7:cd:4d:36:a3:e9:97:d4:00:0c:9d:c8:32:7b:60:80:
         cc:51:9b:cd:cf:61:08:1c:81:a8:b0:e7:84:63:63:3f:7a:d4:
         ca:90:49:f5:aa:75:f4:9d:c3:04:5c:72:6b:14:19:70:0a:a7:
         24:59:a7:51:e5:02:39:d4:bb:1a:b2:42:22:9c:09:31:6d:7b:
         e9:7a:1b:fa:ed:ef:63:9b:81:c5:f9:e1:ba:1d:1d:22:63:65:
         de:c2:e5:ab:46:c7:29:08:f2:44:4a:7d:d7:f9:e8:4d:9d:9e:
         64:e1:5e:7b:e9:87:b6:59:4a:d2:8f:c6:40:58:fc:39:c6:25:
         87:bc:db:37
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGo01MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUy
MzZmZTVmODg0ZjY3ZjJkYjE0NzZkYjJmM2JkOWVlMDgwNWZkMmQwHhcNMjIxMjA1
MTY1NDUyWhcNMjQxMjA2MTY1NDUyWjAzMTEwLwYDVQQDEygzN2JjMmY3OTIyNDg4
OWIzZjY3OWFmZWRlYWMwNGM0Y2EwY2FjNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1lJSK2wcLlkD5WklqY7C89SUtOsU/J4LB3nKYB4b7ETubShM
p+T+dzkcztlJQIyDocZ4qMSW+Rv2AMaXjpl+sSt/Qh7pCVNZd09jFinJU22UCrkS
zaKq9XD3XF7IMaqOVNOzdlAys+BZWMP2SfjfBA/fjEPpTo8Co5X5hj6Y7/uAlDRl
jtfgyLOCvFxZQe9dUesY2WjCfRoZWKMbVG7hWkRxlujoTu4yujix9uJxjuHKBiF6
OelokRcju2o/f18eUyt/A7cabvMCzLGMZi+5lVTd1wGxz5c/6X6/dpaCjam8LOoq
XjB1gLECcIcWqSGO9e7Eo4nlj3eMZBfM9A9tpwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCqomwMYcggn1Lq0QyhkaZqtmExbMB8GA1UdIwQYMBaAFJVrCT80wPTM0cqQ
0K+T36CGudaRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTIzNmZl
NWY4ODRmNjdmMmRiMTQ3NmRiMmYzYmQ5ZWUwODA1ZmQyZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYThiYzRjZTItNjFmNy00OWJhLTkyNGEtZWI0ZmNk
NmUwZjFmLzM3YmMyZjc5MjI0ODg5YjNmNjc5YWZlZGVhYzA0YzRjYTBjYWM3OGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOGJjNGNlMi02MWY3LTQ5YmEtOTI0YS1lYjRm
Y2Q2ZTBmMWYvZTIzNmZlNWY4ODRmNjdmMmRiMTQ3NmRiMmYzYmQ5ZWUwODA1ZmQy
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDv6AwDQYJKoZIhvcNAQELBQADggEBAFppvJqEBy+f+xkc
wBJyGSQIEGOn51eVXSdkk8V+v3uPcDuIuQOfv0/hi1fQcDQZw94TdzWzY4asJUdr
k4zkd9Vuk5TBVAcCfZ/BYD1xClT4RRGvyffycb6RtrucmMqJORFZFf+lF57pcadC
+ekcpJ53Q2JSVxV0cXT+4SFOHnzv581NNqPpl9QADJ3IMntggMxRm83PYQgcgaiw
54RjYz961MqQSfWqdfSdwwRccmsUGXAKpyRZp1HlAjnUuxqyQiKcCTFte+l6G/rt
72ObgcX54bodHSJjZd7C5atGxykI8kRKfdf56E2dnmThXnvph7ZZStKPxkBY/DnG
JYe82zc=
-----END CERTIFICATE-----