Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/3a0ae95dbd83042178ed2db1da5d9405c3b04d8c.roa
File:                     3a0ae95dbd83042178ed2db1da5d9405c3b04d8c.roa (raw, json)
Hash identifier:          ZbpyOJF168nuBpxal7vOWnH0xGfIyshRwROE3OfMu6I=
Subject key identifier:   23:88:C5:30:65:09:28:37:9B:11:3F:5E:80:A2:E0:E9:EE:69:D7:A8
Certificate issuer:       /CN=99489470a7c41b7b995971ffb2f6e2d7d2252a1a
Certificate serial:       1B017E
Authority key identifier: 52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/3a0ae95dbd83042178ed2db1da5d9405c3b04d8c.roa
Signing time:             Fri 13 Jan 2023 19:38:45 +0000
ROA not before:           Thu 12 Jan 2023 19:36:32 +0000
ROA not after:            Mon 13 Jan 2025 19:36:32 +0000
asID:                     264668
IP address blocks:        2803:fd60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769854 (0x1b017e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99489470a7c41b7b995971ffb2f6e2d7d2252a1a
        Validity
            Not Before: Jan 12 19:36:32 2023 GMT
            Not After : Jan 13 19:36:32 2025 GMT
        Subject: CN=3a0ae95dbd83042178ed2db1da5d9405c3b04d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:8f:4b:13:86:96:59:6d:6c:60:2d:00:e1:
                    5f:62:1c:67:e3:bf:c6:bd:de:0c:a1:7c:6e:9b:04:
                    08:0c:2a:3a:49:3b:5b:1d:03:a5:cb:6f:b3:43:6b:
                    36:e6:36:e5:5a:9c:84:a4:9e:50:9c:36:a4:30:8d:
                    e4:19:45:11:a9:1a:3e:ca:91:12:90:bc:c6:95:df:
                    8b:2a:b0:f9:8b:8b:69:c2:b5:ed:04:74:c1:cf:7d:
                    3c:f3:68:c9:4e:2d:50:0b:38:8e:b0:27:27:93:9b:
                    e7:a1:9a:15:ce:cf:4f:78:a8:25:69:3e:a9:35:52:
                    26:0f:29:a4:69:b4:29:d6:2e:3e:88:c9:63:5b:08:
                    c3:8e:44:c7:fd:b9:9e:1c:08:ae:3c:9f:65:4b:4a:
                    3c:7b:aa:20:3d:f9:b2:99:39:cd:83:0e:a3:7c:c6:
                    84:2f:b2:6d:19:fa:60:c7:67:ba:b1:e0:66:15:1b:
                    6b:70:8c:3e:9a:9a:76:3f:23:0e:2b:34:07:07:f0:
                    14:b6:94:a4:7d:07:e1:27:ec:ae:c6:bb:a9:a8:0b:
                    3e:4d:10:86:ae:16:e8:be:41:88:d5:ab:87:03:8a:
                    65:5a:15:00:b7:2b:8b:68:c5:34:15:75:5a:d1:ee:
                    ca:09:54:f8:b9:9e:42:0c:a5:cd:63:1e:9d:2c:09:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:88:C5:30:65:09:28:37:9B:11:3F:5E:80:A2:E0:E9:EE:69:D7:A8
            X509v3 Authority Key Identifier:
                keyid:52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/3a0ae95dbd83042178ed2db1da5d9405c3b04d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:d3:4a:e8:89:41:ef:ea:7d:45:28:50:92:e0:49:6b:ad:
         59:01:7a:f0:db:93:28:d6:f2:fa:e0:a3:a4:bf:ef:43:1e:2a:
         2d:b9:11:ef:f9:6b:18:05:a0:76:4a:78:c4:35:5d:eb:8b:c8:
         13:0d:d1:95:b6:24:28:1e:09:67:5b:be:d2:3e:9a:93:61:2f:
         ad:17:24:fa:8f:3b:0b:c4:24:e3:aa:e9:83:12:1b:e9:9d:c8:
         4d:8e:11:41:2e:fa:53:8c:58:27:64:08:40:ff:59:33:19:2e:
         80:ad:e3:ed:fb:85:fa:c1:44:6d:90:ad:4e:59:f7:a3:78:38:
         b9:4b:73:21:5c:b8:79:91:52:90:ae:d3:97:9c:a4:04:1a:20:
         98:e5:82:60:46:49:4b:8e:7e:94:6b:fc:cd:bc:62:0f:de:e3:
         3a:8a:e4:ab:d1:c5:78:81:73:75:3b:04:8f:06:bd:16:dc:99:
         1b:71:04:47:a8:ff:31:36:b9:22:e9:c0:fa:6a:5f:cb:59:81:
         04:dc:b0:1b:2e:11:0a:da:a3:33:06:f0:82:19:ea:d4:c9:ef:
         19:91:75:41:ff:b6:09:90:12:bb:75:10:d0:d2:82:a5:16:21:
         b2:07:19:13:78:41:ac:23:e5:b2:61:e6:80:a4:4e:76:dd:5e:
         b8:d8:b0:db
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGwF+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk5
NDg5NDcwYTdjNDFiN2I5OTU5NzFmZmIyZjZlMmQ3ZDIyNTJhMWEwHhcNMjMwMTEy
MTkzNjMyWhcNMjUwMTEzMTkzNjMyWjAzMTEwLwYDVQQDEygzYTBhZTk1ZGJkODMw
NDIxNzhlZDJkYjFkYTVkOTQwNWMzYjA0ZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAngePSxOGllltbGAtAOFfYhxn47/Gvd4MoXxumwQIDCo6STtb
HQOly2+zQ2s25jblWpyEpJ5QnDakMI3kGUURqRo+ypESkLzGld+LKrD5i4tpwrXt
BHTBz30882jJTi1QCziOsCcnk5vnoZoVzs9PeKglaT6pNVImDymkabQp1i4+iMlj
WwjDjkTH/bmeHAiuPJ9lS0o8e6ogPfmymTnNgw6jfMaEL7JtGfpgx2e6seBmFRtr
cIw+mpp2PyMOKzQHB/AUtpSkfQfhJ+yuxrupqAs+TRCGrhbovkGI1auHA4plWhUA
tyuLaMU0FXVa0e7KCVT4uZ5CDKXNYx6dLAmmQwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCOIxTBlCSg3mxE/XoCi4OnuadeoMB8GA1UdIwQYMBaAFFKFyG42MfBJmJb0
9axFXT4MV46HMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTk0ODk0
NzBhN2M0MWI3Yjk5NTk3MWZmYjJmNmUyZDdkMjI1MmExYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzAzN2EwZTgtMDYwNy00Mjg4LTg3MjItZTg4YjRj
MGZiNDQ3LzNhMGFlOTVkYmQ4MzA0MjE3OGVkMmRiMWRhNWQ5NDA1YzNiMDRkOGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMDM3YTBlOC0wNjA3LTQyODgtODcyMi1lODhi
NGMwZmI0NDcvOTk0ODk0NzBhN2M0MWI3Yjk5NTk3MWZmYjJmNmUyZDdkMjI1MmEx
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD/WAwDQYJKoZIhvcNAQELBQADggEBAGoT00roiUHv6n1F
KFCS4ElrrVkBevDbkyjW8vrgo6S/70MeKi25Ee/5axgFoHZKeMQ1XeuLyBMN0ZW2
JCgeCWdbvtI+mpNhL60XJPqPOwvEJOOq6YMSG+mdyE2OEUEu+lOMWCdkCED/WTMZ
LoCt4+37hfrBRG2QrU5Z96N4OLlLcyFcuHmRUpCu05ecpAQaIJjlgmBGSUuOfpRr
/M28Yg/e4zqK5KvRxXiBc3U7BI8GvRbcmRtxBEeo/zE2uSLpwPpqX8tZgQTcsBsu
EQraozMG8IIZ6tTJ7xmRdUH/tgmQErt1ENDSgqUWIbIHGRN4Qawj5bJh5oCkTnbd
XrjYsNs=
-----END CERTIFICATE-----