Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/884197b45b9528220eaad322606751030c66b149.roa
File:                     884197b45b9528220eaad322606751030c66b149.roa (raw, json)
Hash identifier:          8v2jJ3vcppROZiDqthibc6g0hxbXgT/xHmYrK7umddw=
Subject key identifier:   55:08:05:00:27:38:F3:9C:23:8F:D7:BB:4B:6E:A9:47:CD:96:61:8B
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       1757A1
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/884197b45b9528220eaad322606751030c66b149.roa
Signing time:             Mon 18 Jul 2022 19:50:42 +0000
ROA not before:           Mon 18 Jul 2022 03:00:00 +0000
ROA not after:            Thu 18 Jul 2024 03:00:00 +0000
asID:                     266668
IP address blocks:        2803:a920::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529761 (0x1757a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Jul 18 03:00:00 2022 GMT
            Not After : Jul 18 03:00:00 2024 GMT
        Subject: CN=884197b45b9528220eaad322606751030c66b149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:f5:10:6b:da:64:79:96:42:b9:88:9d:3a:
                    ae:2f:64:7d:b1:0f:25:75:de:4d:9d:35:6e:2b:ae:
                    17:71:cc:42:b1:5d:52:ab:b9:c6:88:a3:49:81:d7:
                    74:d6:89:ae:22:b0:92:26:90:1f:8f:5d:ce:f5:20:
                    3d:73:f4:35:a6:2e:16:9d:84:41:55:c0:38:a7:8b:
                    43:f0:a3:b0:23:e2:37:cd:76:ba:0a:7e:f8:a7:e1:
                    82:d2:bc:89:4e:74:31:7d:e9:7e:c7:be:e2:d9:74:
                    9e:98:1e:c7:ed:7f:08:07:90:c0:5a:7b:bf:cf:a0:
                    01:c1:a1:4f:f0:0b:c7:d4:00:24:f1:73:0c:d8:07:
                    de:84:52:18:7e:7a:02:4e:68:26:40:04:f8:e7:7d:
                    fd:a6:f7:ca:1d:9e:6c:e7:68:e5:4c:c8:56:5b:f2:
                    ab:08:ba:ad:cf:56:05:2b:95:3e:82:63:7b:d1:15:
                    b9:62:3c:d5:ed:25:63:30:0e:fe:4f:2c:e6:bb:d1:
                    d0:56:36:60:b9:69:7a:f0:e3:53:ff:ca:74:cc:f5:
                    17:c9:57:16:f0:77:a9:82:d0:6d:25:46:ce:7d:a1:
                    44:4d:b6:ce:df:cd:31:6c:ec:0b:8a:1b:80:81:fc:
                    1e:d6:78:3c:75:15:08:0a:86:57:91:ec:8e:1e:4e:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:05:00:27:38:F3:9C:23:8F:D7:BB:4B:6E:A9:47:CD:96:61:8B
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/884197b45b9528220eaad322606751030c66b149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a920::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:c7:29:ff:4a:5c:2b:14:73:f6:4b:f5:01:9f:9a:0b:64:
         ca:2d:1d:7b:79:c8:45:40:d6:f7:24:8a:57:d4:3f:d2:30:73:
         27:79:d2:e6:eb:7f:81:9f:63:2d:a5:a1:d4:f1:56:45:1b:88:
         ee:9d:61:6b:5b:44:3a:f5:8e:d7:da:89:2e:8c:25:37:38:ea:
         49:73:85:c2:36:e2:e1:72:d8:f8:c6:9d:18:f1:21:cd:e0:5f:
         7b:6e:1f:94:00:97:74:cf:06:c9:d0:40:cd:02:00:66:ea:81:
         0a:4f:cb:9b:05:e2:e3:64:81:b9:83:5a:d6:b6:99:52:b8:0f:
         5b:6f:4c:0b:25:73:54:0a:d0:69:22:99:68:57:ae:8d:2a:12:
         ef:71:9d:6d:70:ff:7d:44:24:5e:f1:fc:b1:9f:c5:b8:e7:a7:
         dd:5b:d2:f7:05:68:f7:7d:71:52:2f:3e:0e:76:c0:60:15:7f:
         99:30:23:67:50:39:44:64:ce:0d:38:ab:00:73:24:7e:19:67:
         ff:22:a1:17:32:b0:a3:66:58:23:86:60:8d:34:7b:61:fe:d3:
         e7:4b:1b:ac:ad:04:66:87:7c:22:c7:1f:d4:59:94:69:8c:d9:
         9b:8b:1d:8f:34:96:c4:25:34:3a:c4:b8:26:3f:3a:ea:57:66:
         aa:47:cd:31
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDF1ehMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
ZTdkMmI4M2MzNGEwZGQ0MDNjOTI2ODlhZWRkNTdmMGExODJiNWQwHhcNMjIwNzE4
MDMwMDAwWhcNMjQwNzE4MDMwMDAwWjAzMTEwLwYDVQQDEyg4ODQxOTdiNDViOTUy
ODIyMGVhYWQzMjI2MDY3NTEwMzBjNjZiMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiGn1EGvaZHmWQrmInTquL2R9sQ8ldd5NnTVuK64XccxCsV1S
q7nGiKNJgdd01omuIrCSJpAfj13O9SA9c/Q1pi4WnYRBVcA4p4tD8KOwI+I3zXa6
Cn74p+GC0ryJTnQxfel+x77i2XSemB7H7X8IB5DAWnu/z6ABwaFP8AvH1AAk8XMM
2AfehFIYfnoCTmgmQAT45339pvfKHZ5s52jlTMhWW/KrCLqtz1YFK5U+gmN70RW5
YjzV7SVjMA7+Tyzmu9HQVjZguWl68ONT/8p0zPUXyVcW8HepgtBtJUbOfaFETbbO
380xbOwLihuAgfwe1ng8dRUICoZXkeyOHk5FeQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFFUIBQAnOPOcI4/Xu0tuqUfNlmGLMB8GA1UdIwQYMBaAFIbTPyJiq9TZ5n0M
vDP7cvYdzc0tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2JlN2Qy
YjgzYzM0YTBkZDQwM2M5MjY4OWFlZGQ1N2YwYTE4MmI1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjFkMWE4ZmQtNGZmZC00ODkxLWI5MTEtYjIzYzYz
NzRmOTFkLzg4NDE5N2I0NWI5NTI4MjIwZWFhZDMyMjYwNjc1MTAzMGM2NmIxNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMWQxYThmZC00ZmZkLTQ4OTEtYjkxMS1iMjNj
NjM3NGY5MWQvY2JlN2QyYjgzYzM0YTBkZDQwM2M5MjY4OWFlZGQ1N2YwYTE4MmI1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDqSAwDQYJKoZIhvcNAQELBQADggEBAHr4xyn/SlwrFHP2
S/UBn5oLZMotHXt5yEVA1vckilfUP9Iwcyd50ubrf4GfYy2lodTxVkUbiO6dYWtb
RDr1jtfaiS6MJTc46klzhcI24uFy2PjGnRjxIc3gX3tuH5QAl3TPBsnQQM0CAGbq
gQpPy5sF4uNkgbmDWta2mVK4D1tvTAslc1QK0GkimWhXro0qEu9xnW1w/31EJF7x
/LGfxbjnp91b0vcFaPd9cVIvPg52wGAVf5kwI2dQOURkzg04qwBzJH4ZZ/8ioRcy
sKNmWCOGYI00e2H+0+dLG6ytBGaHfCLHH9RZlGmM2ZuLHY80lsQlNDrEuCY/OupX
ZqpHzTE=
-----END CERTIFICATE-----