Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/3525f0eb8ef35e36bf9e94669c130b55f885f62e.roa
File:                     3525f0eb8ef35e36bf9e94669c130b55f885f62e.roa (raw, json)
Hash identifier:          ln5EYCsdY0Y34Su4XJ8Tf5uFqk1AAdSlzZLhFSqazII=
Subject key identifier:   28:66:F6:64:45:B4:09:40:93:4F:52:25:E0:CF:D9:A1:00:AD:9D:C1
Certificate issuer:       /CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
Certificate serial:       0AAABD
Authority key identifier: EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/3525f0eb8ef35e36bf9e94669c130b55f885f62e.roa
Signing time:             Wed 07 Dec 2022 21:36:57 +0000
ROA not before:           Tue 06 Dec 2022 21:36:37 +0000
ROA not after:            Sat 07 Dec 2024 21:36:37 +0000
asID:                     271993
IP address blocks:        2803:5110:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699069 (0xaaabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
        Validity
            Not Before: Dec  6 21:36:37 2022 GMT
            Not After : Dec  7 21:36:37 2024 GMT
        Subject: CN=3525f0eb8ef35e36bf9e94669c130b55f885f62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:29:78:a7:76:68:47:b3:ae:6f:1c:cf:f7:
                    40:9b:ba:22:6f:34:bf:0a:b5:27:b9:5c:ca:ba:a5:
                    cf:8a:ae:16:80:10:a8:28:8b:7e:b2:3f:69:c8:b3:
                    e9:da:ac:f8:86:d1:f9:60:50:f3:dd:88:e5:6e:a7:
                    d2:f9:a5:0b:ff:64:6f:b6:b4:c9:ab:89:05:d3:0c:
                    e6:9c:99:e8:fc:bb:19:42:73:77:44:fb:95:7c:ed:
                    14:40:58:2d:84:4d:76:6e:64:e5:1f:a2:06:9b:d4:
                    4e:d8:b1:c9:dd:fa:9d:d7:e9:66:63:b3:80:50:dd:
                    64:c7:67:f7:ce:45:47:77:eb:09:9d:dc:18:1f:70:
                    b3:72:44:93:8b:4d:9a:22:12:36:06:95:3f:11:02:
                    e9:2f:26:31:dd:49:b7:f8:ef:e7:23:71:18:9a:fb:
                    bd:39:25:08:f7:90:4b:29:f8:97:a3:f3:2f:49:26:
                    83:98:82:ab:94:da:18:c0:c4:63:37:5f:6c:d1:f6:
                    41:f8:19:60:12:9e:9a:87:e7:64:14:b2:bd:88:16:
                    18:59:a5:48:88:8e:74:46:7c:26:ff:48:91:d2:95:
                    af:47:74:1b:2d:0d:78:99:ea:b3:b9:d4:ee:07:fb:
                    12:0e:e8:96:9a:f6:9f:56:35:af:35:a5:d0:c0:97:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:66:F6:64:45:B4:09:40:93:4F:52:25:E0:CF:D9:A1:00:AD:9D:C1
            X509v3 Authority Key Identifier:
                keyid:EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/3525f0eb8ef35e36bf9e94669c130b55f885f62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/13e7c7268d24306b60d655788ea7e6ab7c157a37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5110:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:2b:bd:cd:4a:5e:68:27:dc:b2:8c:29:e6:32:09:e3:79:e4:
         ef:55:fc:c2:48:55:6b:7a:d9:da:fd:b0:ad:df:6d:31:b7:8a:
         98:8a:4c:50:1a:13:f7:f8:81:7f:b2:48:a8:c1:e7:52:23:58:
         3f:bc:23:32:43:b3:68:78:bb:7c:d9:ab:57:b5:e2:80:94:61:
         ed:83:19:a5:3a:4f:d5:ef:69:5f:44:9d:9b:e1:d8:d5:00:c3:
         7e:f5:75:06:71:d1:e2:c3:62:3b:4d:f9:92:80:ee:10:52:90:
         86:5f:d1:c5:49:87:fd:7f:65:d3:fb:d5:e6:42:28:22:7d:a1:
         8f:9b:1b:b1:77:e2:36:79:8a:84:6f:70:69:23:86:86:46:8a:
         84:20:57:97:aa:8f:a9:21:4d:bf:76:f2:ca:f6:d8:a1:69:62:
         6f:0d:66:9f:bd:9c:d7:e5:5d:8b:67:dc:2a:ae:95:02:72:8c:
         ec:5b:0d:4b:34:d0:20:4c:15:a1:f5:6e:88:d8:99:93:c7:5b:
         20:67:e0:0a:ae:9e:69:7a:41:0f:26:89:5f:07:dc:42:b7:d3:
         46:26:ab:32:a6:aa:fe:3d:d6:cf:09:53:14:5c:3a:98:17:70:
         c3:a7:5a:d6:b0:cf:25:1d:73:ec:0b:e7:01:fe:ca:1f:b9:65:
         25:03:f8:ee
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCqq9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
ZTdjNzI2OGQyNDMwNmI2MGQ2NTU3ODhlYTdlNmFiN2MxNTdhMzcwHhcNMjIxMjA2
MjEzNjM3WhcNMjQxMjA3MjEzNjM3WjAzMTEwLwYDVQQDEygzNTI1ZjBlYjhlZjM1
ZTM2YmY5ZTk0NjY5YzEzMGI1NWY4ODVmNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtXIpeKd2aEezrm8cz/dAm7oibzS/CrUnuVzKuqXPiq4WgBCo
KIt+sj9pyLPp2qz4htH5YFDz3YjlbqfS+aUL/2RvtrTJq4kF0wzmnJno/LsZQnN3
RPuVfO0UQFgthE12bmTlH6IGm9RO2LHJ3fqd1+lmY7OAUN1kx2f3zkVHd+sJndwY
H3CzckSTi02aIhI2BpU/EQLpLyYx3Um3+O/nI3EYmvu9OSUI95BLKfiXo/MvSSaD
mIKrlNoYwMRjN19s0fZB+BlgEp6ah+dkFLK9iBYYWaVIiI50Rnwm/0iR0pWvR3Qb
LQ14meqzudTuB/sSDuiWmvafVjWvNaXQwJdfJQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFChm9mRFtAlAk09SJeDP2aEArZ3BMB8GA1UdIwQYMBaAFOqoRmElGNSiwRAo
L63Ksvg2BHbqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTNlN2M3
MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2EzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmZjN2EyZjgtYmY3ZS00NmI3LWExODktMjFjMWMw
NDcyMGJjLzM1MjVmMGViOGVmMzVlMzZiZjllOTQ2NjljMTMwYjU1Zjg4NWY2MmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZmM3YTJmOC1iZjdlLTQ2YjctYTE4OS0yMWMx
YzA0NzIwYmMvMTNlN2M3MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2Ez
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDURBAADANBgkqhkiG9w0BAQsFAAOCAQEAWCu9zUpeaCfc
sowp5jIJ43nk71X8wkhVa3rZ2v2wrd9tMbeKmIpMUBoT9/iBf7JIqMHnUiNYP7wj
MkOzaHi7fNmrV7XigJRh7YMZpTpP1e9pX0Sdm+HY1QDDfvV1BnHR4sNiO035koDu
EFKQhl/RxUmH/X9l0/vV5kIoIn2hj5sbsXfiNnmKhG9waSOGhkaKhCBXl6qPqSFN
v3byyvbYoWlibw1mn72c1+Vdi2fcKq6VAnKM7FsNSzTQIEwVofVuiNiZk8dbIGfg
Cq6eaXpBDyaJXwfcQrfTRiarMqaq/j3WzwlTFFw6mBdww6da1rDPJR1z7AvnAf7K
H7llJQP47g==
-----END CERTIFICATE-----