Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/89a0742fc68b0986b3a6212f4da6f113d6bdddfa.roa
File:                     89a0742fc68b0986b3a6212f4da6f113d6bdddfa.roa (raw, json)
Hash identifier:          fEnQbGjfx/QhdVEXzwUAkTvEOPn+OrLg2VDJq8xpdUI=
Subject key identifier:   67:11:C0:8D:93:5B:43:FC:DA:D0:1A:F5:83:48:6A:91:8E:AC:1F:4A
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       0348
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/89a0742fc68b0986b3a6212f4da6f113d6bdddfa.roa
Signing time:             Thu 04 Aug 2022 22:55:12 +0000
ROA not before:           Thu 04 Aug 2022 22:52:21 +0000
ROA not after:            Sun 04 Aug 2024 22:52:21 +0000
asID:                     272812
IP address blocks:        2803:f890::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Aug  4 22:52:21 2022 GMT
            Not After : Aug  4 22:52:21 2024 GMT
        Subject: CN=89a0742fc68b0986b3a6212f4da6f113d6bdddfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:9c:2d:02:16:08:0e:54:90:58:d1:da:33:
                    3d:c0:ed:a2:bc:be:bf:88:9b:ac:07:af:59:0c:1f:
                    35:8e:10:8b:04:bc:60:21:0f:a0:14:69:e5:92:4e:
                    d1:77:ce:e9:ae:76:5e:8d:18:98:a1:4b:30:41:59:
                    4d:74:82:90:88:a7:dd:30:7e:d6:67:6b:8f:8e:eb:
                    5b:dd:cd:4b:25:24:fb:84:f3:06:97:03:eb:46:00:
                    c7:df:9e:69:ed:3e:9e:dd:df:fe:04:9d:df:7c:1f:
                    24:86:de:5f:72:6f:0f:7c:85:2f:65:7d:25:da:cf:
                    14:b8:32:57:6d:85:6a:23:a4:be:28:81:d5:af:ab:
                    2b:2c:49:10:17:b5:dc:8f:5f:5d:46:3b:d1:c9:53:
                    50:41:8e:0a:e6:ef:ea:4e:b2:25:cd:d8:d7:76:91:
                    83:fc:3a:10:b2:7a:51:a1:16:5f:26:3c:f8:4e:5d:
                    05:98:e8:ac:4f:38:29:61:6e:a2:02:e3:cb:7f:46:
                    48:34:8f:f7:6d:e8:57:6b:ec:69:69:93:8a:78:8a:
                    25:12:7d:c4:34:8f:65:c7:ae:ff:ed:6d:bf:44:a9:
                    65:97:5d:58:0c:a3:74:ae:13:31:a4:2d:7e:80:6c:
                    ab:d2:48:86:a2:97:6c:4d:3a:4d:cc:56:c8:82:8c:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:11:C0:8D:93:5B:43:FC:DA:D0:1A:F5:83:48:6A:91:8E:AC:1F:4A
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/89a0742fc68b0986b3a6212f4da6f113d6bdddfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:80:f1:8d:92:6e:f7:9a:d6:44:1e:f2:da:d9:72:70:57:
         80:32:bf:56:49:8a:5b:b8:07:58:a6:fa:b9:7b:d0:4f:0a:ff:
         ab:ff:35:4e:79:69:b0:fa:f5:d8:dc:34:36:8c:81:ed:a3:7c:
         b1:f6:a6:0b:59:aa:87:f7:0f:81:fd:27:66:e2:52:f6:d0:38:
         85:33:19:42:22:35:c0:31:11:46:a1:99:e6:bd:20:9e:d4:fc:
         22:b5:15:ad:40:78:6f:67:c5:c1:34:de:24:5e:79:76:41:f1:
         79:0d:11:5a:b3:79:6b:ec:9f:e9:20:4a:1c:a9:5d:3f:d8:19:
         8d:4c:a4:8c:be:02:38:50:7b:5f:49:21:4c:c5:05:55:e4:3e:
         cf:87:55:10:1f:19:6d:1d:fc:5e:b4:d5:79:30:d6:45:20:19:
         31:aa:64:d0:3a:78:31:c6:92:90:d2:80:9c:d4:76:75:4c:72:
         66:82:b1:14:fa:db:4b:69:95:66:2d:aa:af:14:aa:e1:4e:cd:
         bd:58:f8:d9:ea:4a:78:91:12:b9:99:6f:da:76:d1:f9:38:2e:
         94:79:21:fe:62:31:64:55:ce:05:0c:1f:b6:a4:7e:2d:93:17:
         86:82:e1:f8:2e:88:20:58:a7:10:3d:2c:2c:e3:b5:4d:a3:8b:
         78:ab:6e:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNWM0
NDhiZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2ZTAeFw0yMjA4MDQy
MjUyMjFaFw0yNDA4MDQyMjUyMjFaMDMxMTAvBgNVBAMTKDg5YTA3NDJmYzY4YjA5
ODZiM2E2MjEyZjRkYTZmMTEzZDZiZGRkZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCc4ZwtAhYIDlSQWNHaMz3A7aK8vr+Im6wHr1kMHzWOEIsEvGAh
D6AUaeWSTtF3zumudl6NGJihSzBBWU10gpCIp90wftZna4+O61vdzUslJPuE8waX
A+tGAMffnmntPp7d3/4End98HySG3l9ybw98hS9lfSXazxS4MldthWojpL4ogdWv
qyssSRAXtdyPX11GO9HJU1BBjgrm7+pOsiXN2Nd2kYP8OhCyelGhFl8mPPhOXQWY
6KxPOClhbqIC48t/Rkg0j/dt6Fdr7Glpk4p4iiUSfcQ0j2XHrv/tbb9EqWWXXVgM
o3SuEzGkLX6AbKvSSIail2xNOk3MVsiCjBW7AgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUZxHAjZNbQ/za0Br1g0hqkY6sH0owHwYDVR0jBBgwFoAU6ZZp0RY+ZX9twbz1
5Yln81lRwE4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81YzQ0OGJl
ZDg4NzQ3MDFjOWU2OTE1ODViZjI2ODZlMGI3YTVlMzZlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lNWVjYmU3ZC00ODdlLTRkODQtYWNlOC01ZGRhZmJm
NTQxZjIvODlhMDc0MmZjNjhiMDk4NmIzYTYyMTJmNGRhNmYxMTNkNmJkZGRmYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2U1ZWNiZTdkLTQ4N2UtNGQ4NC1hY2U4LTVkZGFm
YmY1NDFmMi81YzQ0OGJlZDg4NzQ3MDFjOWU2OTE1ODViZjI2ODZlMGI3YTVlMzZl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAP4kDANBgkqhkiG9w0BAQsFAAOCAQEADTCA8Y2Sbvea1kQe
8trZcnBXgDK/VkmKW7gHWKb6uXvQTwr/q/81TnlpsPr12Nw0NoyB7aN8sfamC1mq
h/cPgf0nZuJS9tA4hTMZQiI1wDERRqGZ5r0gntT8IrUVrUB4b2fFwTTeJF55dkHx
eQ0RWrN5a+yf6SBKHKldP9gZjUykjL4COFB7X0khTMUFVeQ+z4dVEB8ZbR38XrTV
eTDWRSAZMapk0Dp4McaSkNKAnNR2dUxyZoKxFPrbS2mVZi2qrxSq4U7NvVj42epK
eJESuZlv2nbR+TgulHkh/mIxZFXOBQwftqR+LZMXhoLh+C6IIFinED0sLOO1TaOL
eKtusA==
-----END CERTIFICATE-----