Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/afd440b1-88b6-4fa9-985f-b8a50de55da1/4699135712a1ae34eba89d357fd29086998efcc2.roa
File:                     4699135712a1ae34eba89d357fd29086998efcc2.roa (raw, json)
Hash identifier:          2VLK0zzAtolNTEuuY8RUqCB/SNW7CGyxnBSxWghV4yg=
Subject key identifier:   DB:C4:B0:92:7E:E4:70:F0:26:15:C1:85:0C:A1:BF:CB:2F:86:F1:3A
Certificate issuer:       /CN=b1927e1815437a62f0f892307a6b6437e5c16b56
Certificate serial:       92EC
Authority key identifier: 7D:1A:F8:72:D5:C1:E4:07:B8:5F:82:4C:01:2D:06:9A:EA:19:B9:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1927e1815437a62f0f892307a6b6437e5c16b56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/afd440b1-88b6-4fa9-985f-b8a50de55da1/4699135712a1ae34eba89d357fd29086998efcc2.roa
Signing time:             Tue 30 May 2023 20:45:27 +0000
ROA not before:           Mon 29 May 2023 20:45:27 +0000
ROA not after:            Fri 30 May 2025 20:45:27 +0000
asID:                     272987
IP address blocks:        2803:d90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37612 (0x92ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1927e1815437a62f0f892307a6b6437e5c16b56
        Validity
            Not Before: May 29 20:45:27 2023 GMT
            Not After : May 30 20:45:27 2025 GMT
        Subject: CN=4699135712a1ae34eba89d357fd29086998efcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:00:ae:f6:b2:6b:cb:e1:b1:19:30:4f:f8:
                    e6:27:2b:0c:7b:9a:6b:d3:88:3e:71:db:c9:25:89:
                    af:ae:58:75:93:65:9d:88:fc:b5:16:e8:aa:51:31:
                    66:ca:30:e3:1e:bd:8e:27:b7:2a:27:68:8e:0e:14:
                    c4:27:ff:1d:2f:77:28:b8:e6:b3:1d:7e:82:9a:12:
                    15:a8:5c:de:11:14:08:ad:13:67:dc:d5:24:6e:f6:
                    be:5f:76:56:c1:b8:b7:e0:e7:25:29:1b:33:e7:b1:
                    0a:5a:0a:c2:23:d5:93:3e:65:f3:ee:66:5b:d7:c2:
                    02:63:6d:2e:9d:cb:53:71:7f:8c:de:8a:dd:55:c0:
                    b4:24:97:05:c6:3b:3a:90:0e:f5:4c:a3:46:48:78:
                    c7:98:e8:cd:b4:33:55:d0:6e:67:51:0a:03:87:0a:
                    44:c4:8b:78:44:c8:4c:9c:23:ce:6d:d5:25:df:3c:
                    12:61:4a:4e:50:51:0b:9f:61:f4:61:0a:1e:2a:ca:
                    a9:de:e4:ce:2d:13:0a:f0:7d:e9:f5:5a:19:fa:f2:
                    95:70:0e:ad:d3:80:db:fe:b2:86:da:fa:a5:41:78:
                    96:df:e4:9c:06:ad:1e:1c:32:ae:05:35:c7:16:d9:
                    c8:05:48:74:d4:c3:bd:0f:7f:73:85:68:6d:2c:a7:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C4:B0:92:7E:E4:70:F0:26:15:C1:85:0C:A1:BF:CB:2F:86:F1:3A
            X509v3 Authority Key Identifier:
                keyid:7D:1A:F8:72:D5:C1:E4:07:B8:5F:82:4C:01:2D:06:9A:EA:19:B9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1927e1815437a62f0f892307a6b6437e5c16b56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/afd440b1-88b6-4fa9-985f-b8a50de55da1/4699135712a1ae34eba89d357fd29086998efcc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/afd440b1-88b6-4fa9-985f-b8a50de55da1/b1927e1815437a62f0f892307a6b6437e5c16b56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:c3:c9:d1:c0:ee:46:00:2e:26:ff:2b:fd:9e:ca:a7:d9:
         7a:f4:18:ae:a5:24:27:1b:05:97:4b:d3:a6:f3:a6:a3:30:13:
         2f:04:df:01:64:19:12:83:56:07:cb:4b:0f:70:4e:93:a8:66:
         de:06:93:5d:00:9e:54:41:4f:87:1d:a6:d7:0d:b9:47:1e:0d:
         f7:ed:bb:1e:81:00:10:45:c8:4c:14:85:0f:f4:a3:2e:3a:3f:
         7c:c8:ff:e9:f0:42:1b:14:38:37:57:25:5a:91:09:58:17:3c:
         ec:08:95:25:77:c3:f0:51:b9:b8:99:a4:a5:d4:6d:10:cc:a3:
         ac:c0:ce:b9:7b:e5:e8:20:18:a9:f4:cf:d2:ba:1c:44:70:63:
         ac:21:9e:c9:4e:ec:80:d3:cf:95:e9:20:18:95:b2:d7:b7:61:
         d5:b6:69:bc:c9:d8:77:2a:e6:a5:27:91:b5:79:34:e0:84:48:
         c9:45:ec:c7:17:ef:90:07:0f:fb:8f:cd:e3:96:96:fb:0e:32:
         11:56:e8:2e:2b:81:d1:b7:57:d3:d4:1d:ec:45:f7:e9:c0:db:
         12:b1:22:54:74:91:f7:2d:d4:34:e4:be:8d:9c:d8:ba:36:f0:
         dd:a4:4e:0c:6d:47:14:51:d4:32:1c:c5:9a:1c:6d:3f:82:7a:
         ee:fc:af:75
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAJLsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
OTI3ZTE4MTU0MzdhNjJmMGY4OTIzMDdhNmI2NDM3ZTVjMTZiNTYwHhcNMjMwNTI5
MjA0NTI3WhcNMjUwNTMwMjA0NTI3WjAzMTEwLwYDVQQDEyg0Njk5MTM1NzEyYTFh
ZTM0ZWJhODlkMzU3ZmQyOTA4Njk5OGVmY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoekArvaya8vhsRkwT/jmJysMe5pr04g+cdvJJYmvrlh1k2Wd
iPy1FuiqUTFmyjDjHr2OJ7cqJ2iODhTEJ/8dL3couOazHX6CmhIVqFzeERQIrRNn
3NUkbva+X3ZWwbi34OclKRsz57EKWgrCI9WTPmXz7mZb18ICY20unctTcX+M3ord
VcC0JJcFxjs6kA71TKNGSHjHmOjNtDNV0G5nUQoDhwpExIt4RMhMnCPObdUl3zwS
YUpOUFELn2H0YQoeKsqp3uTOLRMK8H3p9VoZ+vKVcA6t04Db/rKG2vqlQXiW3+Sc
Bq0eHDKuBTXHFtnIBUh01MO9D39zhWhtLKdr7QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFNvEsJJ+5HDwJhXBhQyhv8svhvE6MB8GA1UdIwQYMBaAFH0a+HLVweQHuF+C
TAEtBprqGbkIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjE5Mjdl
MTgxNTQzN2E2MmYwZjg5MjMwN2E2YjY0MzdlNWMxNmI1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWZkNDQwYjEtODhiNi00ZmE5LTk4NWYtYjhhNTBk
ZTU1ZGExLzQ2OTkxMzU3MTJhMWFlMzRlYmE4OWQzNTdmZDI5MDg2OTk4ZWZjYzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZmQ0NDBiMS04OGI2LTRmYTktOTg1Zi1iOGE1
MGRlNTVkYTEvYjE5MjdlMTgxNTQzN2E2MmYwZjg5MjMwN2E2YjY0MzdlNWMxNmI1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDDZAwDQYJKoZIhvcNAQELBQADggEBAHY6w8nRwO5GAC4m
/yv9nsqn2Xr0GK6lJCcbBZdL06bzpqMwEy8E3wFkGRKDVgfLSw9wTpOoZt4Gk10A
nlRBT4cdptcNuUceDfftux6BABBFyEwUhQ/0oy46P3zI/+nwQhsUODdXJVqRCVgX
POwIlSV3w/BRubiZpKXUbRDMo6zAzrl75eggGKn0z9K6HERwY6whnslO7IDTz5Xp
IBiVste3YdW2abzJ2Hcq5qUnkbV5NOCESMlF7McX75AHD/uPzeOWlvsOMhFW6C4r
gdG3V9PUHexF9+nA2xKxIlR0kfct1DTkvo2c2Lo28N2kTgxtRxRR1DIcxZocbT+C
eu78r3U=
-----END CERTIFICATE-----