Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/942dac59dc52b46b1628868e362c13a13f402637.roa
File:                     942dac59dc52b46b1628868e362c13a13f402637.roa (raw, json)
Hash identifier:          wDifEPAO23tnxCqCicwEsrMLVo921JObrVIkAveG+B8=
Subject key identifier:   19:79:45:F8:DC:5F:CD:41:4D:01:15:C6:09:B4:86:BA:97:08:16:A3
Certificate issuer:       /CN=fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0
Certificate serial:       056C
Authority key identifier: 98:8F:E0:2B:93:F3:33:60:61:68:8C:2B:08:1F:20:B9:D0:DF:39:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/942dac59dc52b46b1628868e362c13a13f402637.roa
Signing time:             Sat 19 Nov 2022 00:36:01 +0000
ROA not before:           Fri 18 Nov 2022 00:25:53 +0000
ROA not after:            Tue 19 Nov 2024 00:25:53 +0000
asID:                     272831
IP address blocks:        2803:f490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0
        Validity
            Not Before: Nov 18 00:25:53 2022 GMT
            Not After : Nov 19 00:25:53 2024 GMT
        Subject: CN=942dac59dc52b46b1628868e362c13a13f402637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:39:c3:95:4b:1b:57:f8:b8:70:e0:83:0b:
                    ab:f5:4a:43:47:17:df:41:6d:73:9d:ba:f6:fb:55:
                    1c:9e:04:33:f3:0d:54:84:69:96:1c:41:c0:d2:5d:
                    9e:4a:c6:4c:2a:1e:5a:1c:37:45:41:ab:22:a5:02:
                    c1:c1:67:3a:3a:ae:70:80:31:b6:4f:3b:0b:9f:0d:
                    bb:59:38:0a:e6:e4:f4:6d:90:e0:38:95:3f:e9:27:
                    53:cb:be:35:51:2b:fd:fc:35:43:2f:f9:c2:19:f9:
                    ef:60:4e:be:0a:55:1c:a9:60:e6:8e:a4:85:c9:f5:
                    7a:b0:29:33:c8:36:fe:ed:4d:ca:1a:da:ba:6a:e9:
                    ad:23:49:ff:9a:96:b1:53:38:ca:66:e0:c6:64:5f:
                    8d:40:15:02:cd:16:e3:8a:3f:bb:a4:e9:07:c0:bd:
                    a2:08:32:8a:db:00:e4:17:dc:b7:0e:a9:bf:7d:31:
                    d2:8c:bc:bd:ba:6a:eb:90:0a:64:8f:27:17:83:18:
                    2e:6b:27:00:ce:bb:7c:c8:b4:b5:57:ec:1e:86:0a:
                    8b:ea:c6:ff:79:f1:ca:2f:62:96:92:f2:20:80:1b:
                    28:7f:06:06:eb:9a:49:04:b3:64:41:25:73:78:5e:
                    ff:1f:36:54:76:5b:9e:f4:95:b4:18:83:49:73:98:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:79:45:F8:DC:5F:CD:41:4D:01:15:C6:09:B4:86:BA:97:08:16:A3
            X509v3 Authority Key Identifier:
                keyid:98:8F:E0:2B:93:F3:33:60:61:68:8C:2B:08:1F:20:B9:D0:DF:39:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/942dac59dc52b46b1628868e362c13a13f402637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f490::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:07:cf:5b:b6:20:29:4e:e0:6e:f1:76:70:2a:48:84:b1:95:
         c5:26:2e:0a:33:c2:1b:f3:71:18:8f:11:93:13:d1:5a:a3:f0:
         2a:4f:e6:93:6e:b4:10:56:1b:57:dc:fc:44:85:b6:4c:09:18:
         4f:c4:dd:08:5b:8d:53:c4:50:e7:a3:5c:5b:69:80:22:96:dc:
         45:9c:82:b9:d7:a5:a9:58:6a:44:a6:89:26:21:da:1e:a0:36:
         18:26:0f:3a:9a:36:12:3e:6e:44:48:03:1a:1f:95:d9:68:f0:
         f3:56:ae:d8:64:79:e9:6d:ca:8c:fa:0d:f9:05:8c:94:c6:3a:
         51:33:04:39:4a:02:a5:45:0e:25:0b:59:5d:e9:3b:b6:01:9e:
         4c:d2:ac:81:ea:00:cb:af:95:07:59:84:0d:21:5d:ee:ea:f0:
         ff:5a:2e:f7:f6:3d:86:0b:42:a2:60:7a:41:6b:50:2d:5b:7a:
         1d:4a:e5:86:6b:94:4f:2e:dd:de:d3:58:1a:b7:08:d8:4c:f4:
         c2:69:33:bf:11:69:20:8c:b7:d0:58:fc:8a:18:e7:e3:1e:e9:
         17:ad:ed:12:28:7a:2f:3f:97:08:6e:6c:9d:d7:5f:82:04:e9:
         9b:78:50:1c:ec:08:ea:90:39:38:40:73:b1:0b:0a:45:50:a7:
         60:4f:51:63
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZmMw
MDA1MThiNzJkNmUxYTRmZWM3M2Q5NmEwZjdjMGM0OGRjMzJiMDAeFw0yMjExMTgw
MDI1NTNaFw0yNDExMTkwMDI1NTNaMDMxMTAvBgNVBAMTKDk0MmRhYzU5ZGM1MmI0
NmIxNjI4ODY4ZTM2MmMxM2ExM2Y0MDI2MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpkTnDlUsbV/i4cOCDC6v1SkNHF99BbXOduvb7VRyeBDPzDVSE
aZYcQcDSXZ5KxkwqHlocN0VBqyKlAsHBZzo6rnCAMbZPOwufDbtZOArm5PRtkOA4
lT/pJ1PLvjVRK/38NUMv+cIZ+e9gTr4KVRypYOaOpIXJ9XqwKTPINv7tTcoa2rpq
6a0jSf+alrFTOMpm4MZkX41AFQLNFuOKP7uk6QfAvaIIMorbAOQX3LcOqb99MdKM
vL26auuQCmSPJxeDGC5rJwDOu3zItLVX7B6GCovqxv958covYpaS8iCAGyh/Bgbr
mkkEs2RBJXN4Xv8fNlR2W570lbQYg0lzmLZzAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUGXlF+NxfzUFNARXGCbSGupcIFqMwHwYDVR0jBBgwFoAUmI/gK5PzM2BhaIwr
CB8gudDfOYQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mYzAwMDUx
OGI3MmQ2ZTFhNGZlYzczZDk2YTBmN2MwYzQ4ZGMzMmIwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hYmZjZmM4YS01MDc2LTRmNDYtOTNhNS0yYWZlMTZl
Y2ZjZGYvOTQyZGFjNTlkYzUyYjQ2YjE2Mjg4NjhlMzYyYzEzYTEzZjQwMjYzNy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2FiZmNmYzhhLTUwNzYtNGY0Ni05M2E1LTJhZmUx
NmVjZmNkZi9mYzAwMDUxOGI3MmQ2ZTFhNGZlYzczZDk2YTBmN2MwYzQ4ZGMzMmIw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAP0kDANBgkqhkiG9w0BAQsFAAOCAQEAJgfPW7YgKU7gbvF2
cCpIhLGVxSYuCjPCG/NxGI8RkxPRWqPwKk/mk260EFYbV9z8RIW2TAkYT8TdCFuN
U8RQ56NcW2mAIpbcRZyCudelqVhqRKaJJiHaHqA2GCYPOpo2Ej5uREgDGh+V2Wjw
81au2GR56W3KjPoN+QWMlMY6UTMEOUoCpUUOJQtZXek7tgGeTNKsgeoAy6+VB1mE
DSFd7urw/1ou9/Y9hgtComB6QWtQLVt6HUrlhmuUTy7d3tNYGrcI2Ez0wmkzvxFp
IIy30Fj8ihjn4x7pF63tEih6Lz+XCG5snddfggTpm3hQHOwI6pA5OEBzsQsKRVCn
YE9RYw==
-----END CERTIFICATE-----