Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a236a337a5d301ec185479294e9b29d504c2924c.roa
File:                     a236a337a5d301ec185479294e9b29d504c2924c.roa (raw, json)
Hash identifier:          A8nrdesLi9G/Z31QuxRWMpUCSbKeWAC7d0msgRci868=
Subject key identifier:   F6:0B:BE:47:54:D4:1A:CC:3C:24:C0:80:D3:D2:06:56:60:A4:B8:8C
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       1D285B
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a236a337a5d301ec185479294e9b29d504c2924c.roa
Signing time:             Tue 10 Jan 2023 13:03:05 +0000
ROA not before:           Mon 17 Oct 2022 21:46:22 +0000
ROA not after:            Sat 19 Oct 2024 21:46:22 +0000
asID:                     264646
IP address blocks:        2803:1780:2::/48 maxlen: 48
                          2803:1780:3::/48 maxlen: 48
                          2803:1780:4::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910875 (0x1d285b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Oct 17 21:46:22 2022 GMT
            Not After : Oct 19 21:46:22 2024 GMT
        Subject: CN=a236a337a5d301ec185479294e9b29d504c2924c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:2f:e0:d3:9d:4e:ad:fc:8e:8e:33:e8:7e:
                    75:1d:c2:15:61:94:67:2b:95:9a:0c:88:b2:cd:e2:
                    ac:2f:7c:ad:75:f1:05:5d:e6:22:13:bb:ff:dd:21:
                    b0:95:57:ba:fa:93:c9:1d:f2:e3:e7:f9:79:ec:63:
                    59:a0:d5:d5:d6:18:cc:4b:90:bd:b1:76:f9:be:1a:
                    bd:68:01:d4:bc:60:9d:56:a1:7d:fb:cb:24:4a:4b:
                    b3:de:cd:c7:05:c3:30:81:a4:d3:93:b7:ca:39:db:
                    ce:14:7f:7c:0b:8a:19:75:06:b0:c9:7f:f4:39:52:
                    7b:d6:f9:08:39:b4:b5:14:66:d2:af:b6:55:b5:c3:
                    fa:23:51:e6:aa:4b:92:ed:c3:f2:29:a5:67:06:8d:
                    06:a1:f1:33:df:da:e9:34:46:ed:f6:91:79:9a:b9:
                    e4:5a:ac:85:c1:40:70:e9:8f:26:f7:e6:31:39:e2:
                    1f:f7:45:b8:29:19:05:2f:c4:c5:2a:80:b7:0c:2d:
                    bc:63:33:ab:3a:9b:b6:74:e4:16:2a:98:3b:cb:b0:
                    f5:66:5b:d5:fc:4c:cb:fd:95:07:7d:cf:2b:85:c7:
                    11:65:7f:88:f8:97:b9:15:22:63:4a:e3:73:cf:40:
                    06:1e:ae:94:6e:f1:7a:4f:0e:1b:e5:b1:e2:f7:8a:
                    97:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0B:BE:47:54:D4:1A:CC:3C:24:C0:80:D3:D2:06:56:60:A4:B8:8C
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a236a337a5d301ec185479294e9b29d504c2924c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:2::-2803:1780:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4f:f9:77:67:19:af:a1:0f:8c:49:43:0b:f7:ad:36:2d:c4:4a:
         6c:96:15:97:1e:24:2f:da:1c:df:73:d0:19:db:2c:db:a8:f4:
         b1:07:70:f2:a4:26:ca:fd:be:d4:1c:ac:47:7c:d7:ea:43:6a:
         cd:89:55:6b:5b:d4:dd:3e:8c:65:cb:db:ad:cd:d5:07:a3:bc:
         4e:1f:26:24:af:fe:15:1b:f6:76:29:06:cc:3f:58:e8:bb:0a:
         05:68:ca:59:db:a6:dc:a2:8f:b4:b6:93:e2:0a:86:1e:8a:76:
         9a:ca:b3:27:56:32:b8:6c:9f:e1:19:f1:ac:fa:ef:f2:b3:e0:
         90:5e:ee:21:83:38:6e:14:a8:7e:ef:20:1e:b9:bd:09:63:70:
         4a:bb:d9:ba:b0:ce:f8:29:38:7f:74:b1:9d:e2:e9:42:18:29:
         b0:c3:f1:09:90:fe:94:78:4d:24:52:52:3b:6c:c1:07:46:6b:
         f4:8f:3e:30:a1:fb:03:58:52:0d:3f:75:cc:5d:e0:be:ca:e4:
         71:3c:a5:84:b9:a9:04:3b:40:bf:fe:2e:17:3d:db:a8:ba:de:
         f0:09:45:ca:c6:49:3e:90:48:39:a8:61:65:a4:8b:5f:a9:9b:
         f1:8c:45:af:38:69:94:9d:25:3e:9c:0c:d8:69:cc:9a:7c:1a:
         1e:f0:17:58
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDHShbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
ODU1YjE0YjlhMDQzZWEyMTI3MDkzYmU3Zjg2N2IwOTFmNjAyMzEwHhcNMjIxMDE3
MjE0NjIyWhcNMjQxMDE5MjE0NjIyWjAzMTEwLwYDVQQDEyhhMjM2YTMzN2E1ZDMw
MWVjMTg1NDc5Mjk0ZTliMjlkNTA0YzI5MjRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhkcv4NOdTq38jo4z6H51HcIVYZRnK5WaDIiyzeKsL3ytdfEF
XeYiE7v/3SGwlVe6+pPJHfLj5/l57GNZoNXV1hjMS5C9sXb5vhq9aAHUvGCdVqF9
+8skSkuz3s3HBcMwgaTTk7fKOdvOFH98C4oZdQawyX/0OVJ71vkIObS1FGbSr7ZV
tcP6I1HmqkuS7cPyKaVnBo0GofEz39rpNEbt9pF5mrnkWqyFwUBw6Y8m9+YxOeIf
90W4KRkFL8TFKoC3DC28YzOrOpu2dOQWKpg7y7D1ZlvV/EzL/ZUHfc8rhccRZX+I
+Je5FSJjSuNzz0AGHq6UbvF6Tw4b5bHi94qXsQIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFPYLvkdU1BrMPCTAgNPSBlZgpLiMMB8GA1UdIwQYMBaAFCrwKsBKA2VldyRG
rZupA0MvAGT5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA4NTVi
MTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjljN2UyYzYtYTBkMy00NGRiLWJiZjAtYzE5NGQ1
NzZmODhjL2EyMzZhMzM3YTVkMzAxZWMxODU0NzkyOTRlOWIyOWQ1MDRjMjkyNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOWM3ZTJjNi1hMGQzLTQ0ZGItYmJmMC1jMTk0
ZDU3NmY4OGMvMzA4NTViMTRiOWEwNDNlYTIxMjcwOTNiZTdmODY3YjA5MWY2MDIz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAIwFDASAwcBKAMXgAACAwcBKAMXgAAEMA0GCSqGSIb3DQEBCwUAA4IB
AQBP+XdnGa+hD4xJQwv3rTYtxEpslhWXHiQv2hzfc9AZ2yzbqPSxB3DypCbK/b7U
HKxHfNfqQ2rNiVVrW9TdPoxly9utzdUHo7xOHyYkr/4VG/Z2KQbMP1jouwoFaMpZ
26bcoo+0tpPiCoYeinaayrMnVjK4bJ/hGfGs+u/ys+CQXu4hgzhuFKh+7yAeub0J
Y3BKu9m6sM74KTh/dLGd4ulCGCmww/EJkP6UeE0kUlI7bMEHRmv0jz4wofsDWFIN
P3XMXeC+yuRxPKWEuakEO0C//i4XPduout7wCUXKxkk+kEg5qGFlpItfqZvxjEWv
OGmUnSU+nAzYacyafBoe8BdY
-----END CERTIFICATE-----