Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/74163cdeedb6b5c665da45135342a1955f7230b7.roa
File:                     74163cdeedb6b5c665da45135342a1955f7230b7.roa (raw, json)
Hash identifier:          AWybwfL2RkGIHMoW2fTMmUU+qQDVjUjdiMgagOeaCYI=
Subject key identifier:   C5:5C:8B:64:E4:A1:AA:B4:D8:C3:42:CD:77:D8:02:C8:4D:6F:AD:E2
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       048DCD
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/74163cdeedb6b5c665da45135342a1955f7230b7.roa
Signing time:             Fri 03 Feb 2023 23:35:41 +0000
ROA not before:           Thu 02 Feb 2023 23:34:39 +0000
ROA not after:            Mon 03 Feb 2025 23:34:39 +0000
asID:                     272812
IP address blocks:        2803:f890::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298445 (0x48dcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Feb  2 23:34:39 2023 GMT
            Not After : Feb  3 23:34:39 2025 GMT
        Subject: CN=74163cdeedb6b5c665da45135342a1955f7230b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:50:e8:51:06:e5:f8:d7:b6:a0:33:97:97:
                    87:68:4a:0a:99:1a:37:72:3c:b7:47:81:60:1a:21:
                    ca:23:4f:e4:b6:ed:b4:96:ca:2d:45:b5:11:e5:2d:
                    cd:da:b0:c1:15:48:09:63:30:16:97:18:e0:ca:67:
                    f1:00:2b:a3:4f:a0:b8:a2:0d:58:65:46:0b:4e:51:
                    91:ed:be:a8:c3:a7:69:85:1e:10:fc:2c:5e:59:aa:
                    75:a5:e2:5f:93:a3:1d:e9:e3:03:6c:69:b2:e6:89:
                    26:21:8c:cb:2e:bb:47:03:b7:d7:1a:3c:91:ca:3d:
                    da:15:d5:1e:1f:7b:b2:30:8f:2e:4f:68:f8:27:16:
                    f7:6a:3c:2a:31:32:ec:45:8c:ed:95:4d:1d:c1:e0:
                    6a:f0:23:63:ab:9a:7b:8a:9c:19:5c:6b:77:f0:a1:
                    71:21:46:ac:da:69:09:e1:e3:24:1a:1a:e5:5d:32:
                    96:37:33:cd:5a:a1:40:a1:10:67:c4:f5:3e:d4:43:
                    16:8a:60:e6:30:2d:3b:ee:3f:ca:7e:bc:46:28:7e:
                    81:d6:47:a2:18:29:81:38:83:46:7c:c7:72:ae:db:
                    fc:fc:67:33:8e:4a:68:0f:96:89:41:a0:d6:51:52:
                    f3:77:7e:01:13:f5:3d:9d:7f:3f:e8:db:d4:78:0c:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:8B:64:E4:A1:AA:B4:D8:C3:42:CD:77:D8:02:C8:4D:6F:AD:E2
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/74163cdeedb6b5c665da45135342a1955f7230b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:33:a2:b9:0b:5f:05:43:17:74:e6:fb:f1:a4:91:86:5d:de:
         81:87:33:1f:43:32:a4:8e:2c:92:ef:13:7a:19:aa:88:d9:34:
         0c:b3:ac:41:a9:d7:23:45:a2:ef:15:92:88:7a:7c:f2:35:a3:
         f6:70:84:73:73:dd:c9:26:e3:76:88:e8:80:e3:d1:a9:04:d8:
         09:e7:9c:bf:c0:e4:d8:23:67:73:b1:95:23:97:4b:eb:03:35:
         4e:43:48:85:2f:d3:c9:b9:ad:3a:3d:e8:14:f3:a5:57:14:19:
         3e:57:25:9e:41:52:72:ca:50:00:95:8e:60:5a:b2:42:35:fd:
         a1:51:d5:79:4a:4b:8b:8e:f9:29:6f:7f:c7:7b:b5:10:c3:ba:
         fd:22:c5:63:26:52:22:6c:5c:88:f7:4d:33:85:04:be:3a:1b:
         33:c8:9e:89:44:b8:4a:15:26:7f:a6:1a:d0:ee:55:36:94:20:
         84:63:31:32:67:ef:8a:af:c8:8d:69:ce:96:3b:47:4d:e9:11:
         77:f9:78:68:84:1c:43:12:9b:71:12:80:f4:70:75:1a:86:64:
         54:0f:5e:e1:38:85:f4:6d:14:b3:e3:19:a1:b0:c8:38:25:4d:
         63:c6:9d:71:d5:77:26:14:1c:00:fc:d6:50:6f:aa:41:44:bf:
         c1:fa:aa:62
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBI3NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVj
NDQ4YmVkODg3NDcwMWM5ZTY5MTU4NWJmMjY4NmUwYjdhNWUzNmUwHhcNMjMwMjAy
MjMzNDM5WhcNMjUwMjAzMjMzNDM5WjAzMTEwLwYDVQQDEyg3NDE2M2NkZWVkYjZi
NWM2NjVkYTQ1MTM1MzQyYTE5NTVmNzIzMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlZlQ6FEG5fjXtqAzl5eHaEoKmRo3cjy3R4FgGiHKI0/ktu20
lsotRbUR5S3N2rDBFUgJYzAWlxjgymfxACujT6C4og1YZUYLTlGR7b6ow6dphR4Q
/CxeWap1peJfk6Md6eMDbGmy5okmIYzLLrtHA7fXGjyRyj3aFdUeH3uyMI8uT2j4
Jxb3ajwqMTLsRYztlU0dweBq8CNjq5p7ipwZXGt38KFxIUas2mkJ4eMkGhrlXTKW
NzPNWqFAoRBnxPU+1EMWimDmMC077j/KfrxGKH6B1keiGCmBOINGfMdyrtv8/Gcz
jkpoD5aJQaDWUVLzd34BE/U9nX8/6NvUeAw1rQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMVci2Tkoaq02MNCzXfYAshNb63iMB8GA1UdIwQYMBaAFOmWadEWPmV/bcG8
9eWJZ/NZUcBOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWM0NDhi
ZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTVlY2JlN2QtNDg3ZS00ZDg0LWFjZTgtNWRkYWZi
ZjU0MWYyLzc0MTYzY2RlZWRiNmI1YzY2NWRhNDUxMzUzNDJhMTk1NWY3MjMwYjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNWVjYmU3ZC00ODdlLTRkODQtYWNlOC01ZGRh
ZmJmNTQxZjIvNWM0NDhiZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD+JAwDQYJKoZIhvcNAQELBQADggEBAJUzorkLXwVDF3Tm
+/GkkYZd3oGHMx9DMqSOLJLvE3oZqojZNAyzrEGp1yNFou8Vkoh6fPI1o/ZwhHNz
3ckm43aI6IDj0akE2AnnnL/A5NgjZ3OxlSOXS+sDNU5DSIUv08m5rTo96BTzpVcU
GT5XJZ5BUnLKUACVjmBaskI1/aFR1XlKS4uO+Slvf8d7tRDDuv0ixWMmUiJsXIj3
TTOFBL46GzPInolEuEoVJn+mGtDuVTaUIIRjMTJn74qvyI1pzpY7R03pEXf5eGiE
HEMSm3ESgPRwdRqGZFQPXuE4hfRtFLPjGaGwyDglTWPGnXHVdyYUHAD81lBvqkFE
v8H6qmI=
-----END CERTIFICATE-----