Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/a3b328bff98c2ce88364ddfc72a3a203a4c5b890.roa
File:                     a3b328bff98c2ce88364ddfc72a3a203a4c5b890.roa (raw, json)
Hash identifier:          of2pBMMiInmGN37Qdiez7ThvjbDVddiviZxyAqE3q2w=
Subject key identifier:   E4:39:D5:27:76:A0:F0:EF:49:F0:F1:C0:AB:89:C0:CA:C9:CE:DF:5C
Certificate issuer:       /CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
Certificate serial:       0AA54D
Authority key identifier: EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/a3b328bff98c2ce88364ddfc72a3a203a4c5b890.roa
Signing time:             Wed 07 Dec 2022 21:36:35 +0000
ROA not before:           Tue 06 Dec 2022 21:35:20 +0000
ROA not after:            Sat 07 Dec 2024 21:35:20 +0000
asID:                     271993
IP address blocks:        2803:5110:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697677 (0xaa54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
        Validity
            Not Before: Dec  6 21:35:20 2022 GMT
            Not After : Dec  7 21:35:20 2024 GMT
        Subject: CN=a3b328bff98c2ce88364ddfc72a3a203a4c5b890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:0e:e5:78:42:8c:9e:98:b6:0c:de:32:f4:
                    cd:38:f4:19:af:29:e7:81:e9:f1:00:2a:eb:1b:39:
                    68:ef:ba:8c:2a:94:0a:e5:7d:c8:95:57:7e:9d:5c:
                    7b:c1:f0:a0:8d:05:5a:df:09:68:39:6e:7f:2f:8c:
                    b1:3e:b3:d6:ab:ec:bf:8c:1e:a2:01:43:4b:86:ff:
                    17:ac:48:3d:8d:3d:35:06:c5:3a:64:6e:82:f8:52:
                    b5:82:70:e9:06:b3:85:48:7c:27:2f:55:e7:22:40:
                    b5:2c:91:c9:e1:e6:0c:7e:1c:92:89:1c:0e:00:dd:
                    53:ce:78:0e:9b:17:c6:11:81:61:92:29:37:80:5d:
                    b4:04:43:38:e3:35:3c:fb:74:3e:4e:a4:a4:ec:38:
                    31:7d:30:d1:93:5c:df:32:d0:3a:37:1b:7a:da:99:
                    ef:af:7b:cd:a4:6a:4e:c0:bb:23:ab:3e:17:a6:e2:
                    62:be:62:44:f2:24:ec:72:2c:3a:a4:d4:16:e6:00:
                    d9:ae:7d:33:8c:66:f0:df:4c:00:a9:ea:64:5b:56:
                    ab:b7:93:5a:bf:0a:67:9c:67:f7:17:ab:71:f4:55:
                    cc:50:ee:61:36:76:d2:8a:ba:24:86:04:f2:a2:f2:
                    54:51:4c:fb:20:de:d8:83:4b:b3:72:ed:9d:d6:0a:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:39:D5:27:76:A0:F0:EF:49:F0:F1:C0:AB:89:C0:CA:C9:CE:DF:5C
            X509v3 Authority Key Identifier:
                keyid:EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/a3b328bff98c2ce88364ddfc72a3a203a4c5b890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/13e7c7268d24306b60d655788ea7e6ab7c157a37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5110:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:c6:a1:06:78:23:ac:90:a1:a4:3e:22:ad:63:4b:e8:67:f6:
         91:71:9c:fd:f9:f4:f6:5c:19:b2:ff:f2:21:46:46:eb:ed:29:
         80:4e:cf:6b:7b:2b:23:e9:95:67:26:b4:78:17:ae:e9:ac:36:
         b2:b1:0d:1a:a6:fe:ce:9f:be:71:de:ec:82:3e:66:ad:18:5b:
         2a:88:c3:bb:81:68:e4:dd:9f:8e:53:a9:82:ab:49:11:82:ef:
         7c:b2:47:db:bd:35:eb:c5:3a:e5:85:1e:c2:27:4b:d1:3f:be:
         08:9c:cd:dc:03:cc:ef:ff:4e:bb:4f:d2:1f:81:5c:e8:03:db:
         a9:c6:3b:70:55:2a:75:34:c1:39:88:c2:08:2f:12:a6:72:07:
         62:87:57:6d:e5:0a:fe:f1:29:aa:4b:35:34:ec:9f:df:13:e5:
         01:03:41:3b:5a:96:bd:81:e0:c0:46:31:06:32:67:56:f3:76:
         64:be:a4:ff:10:2f:01:73:b5:08:bf:4f:06:eb:e5:5c:fb:b6:
         57:48:1f:26:a0:a7:76:91:4b:5b:db:d5:df:ec:af:33:0d:c6:
         de:7c:4c:f0:d3:90:12:97:b5:4a:df:91:b5:ac:81:ae:5c:92:
         1c:5b:09:90:fc:2d:2f:cc:33:c5:83:d9:c0:3f:5b:78:4d:1f:
         d6:45:fd:65
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCqVNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
ZTdjNzI2OGQyNDMwNmI2MGQ2NTU3ODhlYTdlNmFiN2MxNTdhMzcwHhcNMjIxMjA2
MjEzNTIwWhcNMjQxMjA3MjEzNTIwWjAzMTEwLwYDVQQDEyhhM2IzMjhiZmY5OGMy
Y2U4ODM2NGRkZmM3MmEzYTIwM2E0YzViODkwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxGYO5XhCjJ6YtgzeMvTNOPQZrynngenxACrrGzlo77qMKpQK
5X3IlVd+nVx7wfCgjQVa3wloOW5/L4yxPrPWq+y/jB6iAUNLhv8XrEg9jT01BsU6
ZG6C+FK1gnDpBrOFSHwnL1XnIkC1LJHJ4eYMfhySiRwOAN1TzngOmxfGEYFhkik3
gF20BEM44zU8+3Q+TqSk7DgxfTDRk1zfMtA6Nxt62pnvr3vNpGpOwLsjqz4XpuJi
vmJE8iTsciw6pNQW5gDZrn0zjGbw30wAqepkW1art5NavwpnnGf3F6tx9FXMUO5h
NnbSirokhgTyovJUUUz7IN7Yg0uzcu2d1gpHBQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFOQ51Sd2oPDvSfDxwKuJwMrJzt9cMB8GA1UdIwQYMBaAFOqoRmElGNSiwRAo
L63Ksvg2BHbqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTNlN2M3
MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2EzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmZjN2EyZjgtYmY3ZS00NmI3LWExODktMjFjMWMw
NDcyMGJjL2EzYjMyOGJmZjk4YzJjZTg4MzY0ZGRmYzcyYTNhMjAzYTRjNWI4OTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZmM3YTJmOC1iZjdlLTQ2YjctYTE4OS0yMWMx
YzA0NzIwYmMvMTNlN2M3MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2Ez
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDURAwADANBgkqhkiG9w0BAQsFAAOCAQEALMahBngjrJCh
pD4irWNL6Gf2kXGc/fn09lwZsv/yIUZG6+0pgE7Pa3srI+mVZya0eBeu6aw2srEN
Gqb+zp++cd7sgj5mrRhbKojDu4Fo5N2fjlOpgqtJEYLvfLJH270168U65YUewidL
0T++CJzN3APM7/9Ou0/SH4Fc6APbqcY7cFUqdTTBOYjCCC8SpnIHYodXbeUK/vEp
qks1NOyf3xPlAQNBO1qWvYHgwEYxBjJnVvN2ZL6k/xAvAXO1CL9PBuvlXPu2V0gf
JqCndpFLW9vV3+yvMw3G3nxM8NOQEpe1St+RtayBrlySHFsJkPwtL8wzxYPZwD9b
eE0f1kX9ZQ==
-----END CERTIFICATE-----