Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/f21fe7e15fabeb2e80cfd6b0c1b6c3ee7c474c1a.roa
File:                     f21fe7e15fabeb2e80cfd6b0c1b6c3ee7c474c1a.roa (raw, json)
Hash identifier:          pKRkR5oV4xUGR5ezkgW4tko3ghq6XfDsH5aT95NRmIE=
Subject key identifier:   28:80:2A:48:EA:70:D7:AF:CF:68:CA:0C:0C:25:01:70:1E:36:E1:67
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       0E3B11
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/f21fe7e15fabeb2e80cfd6b0c1b6c3ee7c474c1a.roa
Signing time:             Thu 15 Feb 2024 19:49:06 +0000
ROA not before:           Thu 15 Feb 2024 19:49:05 +0000
ROA not after:            Sun 15 Feb 2026 19:49:05 +0000
asID:                     272812
IP address blocks:        2803:f890::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932625 (0xe3b11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Feb 15 19:49:05 2024 GMT
            Not After : Feb 15 19:49:05 2026 GMT
        Subject: CN=f21fe7e15fabeb2e80cfd6b0c1b6c3ee7c474c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4b:ab:99:43:b4:de:86:27:0a:c7:1e:ce:31:
                    57:4e:8e:b8:b7:d9:fd:67:9b:aa:8c:68:4e:e0:ee:
                    f6:8a:13:38:f0:a8:36:4b:66:45:5f:a1:ce:35:57:
                    ec:ab:f3:d5:bd:1d:0d:4f:6d:52:b7:cb:2c:31:c1:
                    86:3a:cb:1d:68:e9:02:43:13:de:8b:05:00:bf:9b:
                    db:ad:4f:cd:7a:c6:24:27:b7:93:b8:d1:d0:75:b1:
                    4a:91:ca:48:32:af:41:51:03:6f:71:61:83:61:fc:
                    b2:ea:e0:9e:e1:93:0f:06:97:94:8c:4b:8b:eb:39:
                    48:90:65:c4:9d:c6:b5:ef:0e:58:de:4f:d3:96:cf:
                    e5:50:b2:e2:14:8a:03:3f:f6:c6:2e:16:1b:2b:f5:
                    7b:52:3d:20:ff:a6:66:0c:25:a7:14:0b:f1:e2:15:
                    0c:17:25:c8:40:b4:ed:67:bb:6b:d0:b1:0b:19:3c:
                    e9:8c:a1:5a:1d:4d:51:78:64:44:a9:fc:37:0c:4d:
                    67:5f:70:ae:ad:86:5a:58:0d:78:03:6d:4c:35:e6:
                    ff:a4:c2:ba:4b:c1:29:28:29:97:33:b5:90:fc:f4:
                    ae:4f:78:96:90:76:7f:1e:13:8a:98:57:60:8f:d1:
                    e2:91:73:a2:33:6e:6d:d2:18:8c:7e:38:7b:63:28:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:2A:48:EA:70:D7:AF:CF:68:CA:0C:0C:25:01:70:1E:36:E1:67
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/f21fe7e15fabeb2e80cfd6b0c1b6c3ee7c474c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:35:7e:cf:0f:66:67:2e:07:66:b8:02:21:64:52:f7:71:69:
         03:3d:f2:01:a9:57:43:d9:23:b6:64:c6:7c:e9:17:a8:2e:4f:
         51:d9:b7:b9:07:82:8e:40:61:c7:7a:05:90:f5:6f:69:87:55:
         8a:b9:7a:d0:b9:65:60:8c:9d:0b:2f:8f:97:4e:1a:1e:0f:84:
         9e:b4:5d:19:e3:78:c3:ed:a2:43:e4:85:47:9a:e3:dc:d8:8f:
         38:95:f9:34:6e:02:93:dc:a6:97:e9:39:e5:bb:ba:2f:ef:2c:
         dd:1c:32:2c:e6:3a:02:eb:1d:93:e6:7f:ba:88:a6:48:f0:cb:
         f8:2e:43:b6:33:dd:e5:c2:de:c0:66:88:92:fc:c7:da:75:a8:
         08:61:6d:31:9a:a6:f2:05:b4:d2:db:aa:d8:ad:9c:54:0f:59:
         e1:44:38:99:98:14:1b:cd:35:7d:8a:62:9b:05:4b:59:cc:1a:
         0a:c7:34:38:b9:9a:0e:e4:84:88:79:3b:06:6c:ed:13:d8:f8:
         e7:f0:f3:ae:c0:4b:bf:e4:fc:b0:b2:93:3d:b0:c9:d3:7a:ca:
         48:98:e0:ee:b2:82:0c:8a:49:76:5e:d8:4c:3c:1b:a7:35:96:
         e9:d3:75:fc:67:16:92:99:9d:df:f3:f2:26:10:a1:e3:4a:a5:
         fa:d0:24:21
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDjsRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVj
NDQ4YmVkODg3NDcwMWM5ZTY5MTU4NWJmMjY4NmUwYjdhNWUzNmUwHhcNMjQwMjE1
MTk0OTA1WhcNMjYwMjE1MTk0OTA1WjAzMTEwLwYDVQQDEyhmMjFmZTdlMTVmYWJl
YjJlODBjZmQ2YjBjMWI2YzNlZTdjNDc0YzFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgEurmUO03oYnCscezjFXTo64t9n9Z5uqjGhO4O72ihM48Kg2
S2ZFX6HONVfsq/PVvR0NT21St8ssMcGGOssdaOkCQxPeiwUAv5vbrU/NesYkJ7eT
uNHQdbFKkcpIMq9BUQNvcWGDYfyy6uCe4ZMPBpeUjEuL6zlIkGXEnca17w5Y3k/T
ls/lULLiFIoDP/bGLhYbK/V7Uj0g/6ZmDCWnFAvx4hUMFyXIQLTtZ7tr0LELGTzp
jKFaHU1ReGREqfw3DE1nX3CurYZaWA14A21MNeb/pMK6S8EpKCmXM7WQ/PSuT3iW
kHZ/HhOKmFdgj9HikXOiM25t0hiMfjh7YyiqLQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCiAKkjqcNevz2jKDAwlAXAeNuFnMB8GA1UdIwQYMBaAFOmWadEWPmV/bcG8
9eWJZ/NZUcBOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWM0NDhi
ZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTVlY2JlN2QtNDg3ZS00ZDg0LWFjZTgtNWRkYWZi
ZjU0MWYyL2YyMWZlN2UxNWZhYmViMmU4MGNmZDZiMGMxYjZjM2VlN2M0NzRjMWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNWVjYmU3ZC00ODdlLTRkODQtYWNlOC01ZGRh
ZmJmNTQxZjIvNWM0NDhiZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD+JAwDQYJKoZIhvcNAQELBQADggEBAHo1fs8PZmcuB2a4
AiFkUvdxaQM98gGpV0PZI7ZkxnzpF6guT1HZt7kHgo5AYcd6BZD1b2mHVYq5etC5
ZWCMnQsvj5dOGh4PhJ60XRnjeMPtokPkhUea49zYjziV+TRuApPcppfpOeW7ui/v
LN0cMizmOgLrHZPmf7qIpkjwy/guQ7Yz3eXC3sBmiJL8x9p1qAhhbTGapvIFtNLb
qtitnFQPWeFEOJmYFBvNNX2KYpsFS1nMGgrHNDi5mg7khIh5OwZs7RPY+Ofw867A
S7/k/LCykz2wydN6ykiY4O6yggyKSXZe2Ew8G6c1lunTdfxnFpKZnd/z8iYQoeNK
pfrQJCE=
-----END CERTIFICATE-----