Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/78953044d1a28345196d1bedf93ef25a18a5d165.roa
File:                     78953044d1a28345196d1bedf93ef25a18a5d165.roa (raw, json)
Hash identifier:          dkXlMOPh8gMT8heFrGburGlZ5ihl3Nw6YXC+R5I7Oso=
Subject key identifier:   22:BA:9F:63:3E:08:03:B4:2B:E3:42:3D:95:81:6A:B8:A6:D8:06:6C
Certificate issuer:       /CN=b7e4d19c57f9e363d6970c924c1351eca876c872
Certificate serial:       1A6768
Authority key identifier: C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7e4d19c57f9e363d6970c924c1351eca876c872.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/78953044d1a28345196d1bedf93ef25a18a5d165.roa
Signing time:             Thu 08 Sep 2022 15:39:11 +0000
ROA not before:           Thu 08 Sep 2022 15:36:21 +0000
ROA not after:            Sun 08 Sep 2024 15:36:21 +0000
asID:                     263762
IP address blocks:        2803:5180::/34 maxlen: 36
                          2803:5180:1000::/36 maxlen: 36
                          2803:5180:2000::/36 maxlen: 36
                          2803:5180:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730408 (0x1a6768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4d19c57f9e363d6970c924c1351eca876c872
        Validity
            Not Before: Sep  8 15:36:21 2022 GMT
            Not After : Sep  8 15:36:21 2024 GMT
        Subject: CN=78953044d1a28345196d1bedf93ef25a18a5d165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:f4:c1:25:94:26:89:32:4e:14:89:fc:8c:
                    7a:4c:f6:df:47:55:c0:23:ef:39:ed:34:f2:59:1b:
                    75:9e:99:af:97:26:2c:3f:c3:d2:fc:8f:86:63:fe:
                    e9:cf:01:2f:91:49:a6:91:30:d6:05:3b:98:49:87:
                    81:3d:95:e6:37:98:cc:5f:cc:a7:bc:b0:94:02:75:
                    eb:14:c7:76:31:8c:f6:6f:92:92:ad:95:47:fb:c0:
                    48:7d:d6:70:9c:66:18:0d:c6:24:a6:c4:6e:14:44:
                    1a:6c:ef:97:8e:33:88:0f:1f:94:4e:8c:00:87:4e:
                    64:72:2d:18:c3:f4:97:19:f9:8f:7a:98:15:4f:ec:
                    14:76:e5:9b:ef:94:b2:6d:43:d2:eb:fb:b1:82:1d:
                    47:d2:9d:92:84:e9:c5:db:ac:b5:4c:36:25:25:cc:
                    e7:5c:83:74:2a:7b:42:74:ea:0c:a7:12:d0:a0:ad:
                    50:b9:5f:97:b0:d4:b7:53:55:d5:a3:8a:61:14:96:
                    f9:64:7e:08:25:36:86:5a:1d:71:92:3a:e7:fd:de:
                    44:ab:8a:a3:d3:f7:65:ae:87:05:e8:6e:94:d1:16:
                    86:cd:3c:e0:cb:5d:71:2f:6c:26:5e:f1:91:29:97:
                    a2:f8:73:b1:79:ab:0e:40:a0:69:bb:b0:fa:f2:70:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BA:9F:63:3E:08:03:B4:2B:E3:42:3D:95:81:6A:B8:A6:D8:06:6C
            X509v3 Authority Key Identifier:
                keyid:C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7e4d19c57f9e363d6970c924c1351eca876c872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/78953044d1a28345196d1bedf93ef25a18a5d165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/b7e4d19c57f9e363d6970c924c1351eca876c872.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5180::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:02:b0:e7:0e:2f:5a:33:aa:92:49:b2:6c:00:e3:ae:8e:
         bd:9b:d7:3c:86:cf:e2:73:f3:15:0e:d2:ba:dc:00:cb:cd:b0:
         1f:26:30:8f:0d:4c:49:8a:b6:39:47:15:43:4d:75:ff:36:f6:
         97:aa:41:f3:7d:18:97:86:b2:7f:f7:f2:b3:af:f6:63:f6:69:
         bc:f1:9b:47:5e:b1:fe:6f:a0:8f:f1:fc:2f:dd:01:87:a9:30:
         b5:1c:00:50:4f:1f:ac:1d:8d:52:bb:27:31:8d:6e:af:89:ad:
         e3:1b:57:1c:24:49:2e:ed:b4:b4:4d:be:08:f0:b7:e3:50:54:
         36:7d:68:12:c5:b7:6f:36:ee:70:cb:2a:fd:31:f6:5c:bb:a4:
         85:e6:7f:f9:9b:72:a3:55:57:38:fb:f1:98:f9:fd:f2:97:cf:
         2b:88:9a:67:04:2e:34:c8:90:79:a4:43:16:54:eb:e2:c0:90:
         65:b2:04:24:4a:5c:ce:6f:94:f8:4b:e8:9a:29:e3:36:f0:22:
         4c:fb:b8:19:8d:ca:1a:22:02:36:ac:0d:c4:79:24:70:bc:1b:
         78:c1:13:6b:72:89:c9:45:b2:f4:9c:47:5a:8d:64:a0:91:4d:
         88:5f:00:51:74:ac:3b:3f:57:c5:fd:d4:4e:ef:53:42:62:0c:
         0c:f0:85:60
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDGmdoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI3
ZTRkMTljNTdmOWUzNjNkNjk3MGM5MjRjMTM1MWVjYTg3NmM4NzIwHhcNMjIwOTA4
MTUzNjIxWhcNMjQwOTA4MTUzNjIxWjAzMTEwLwYDVQQDEyg3ODk1MzA0NGQxYTI4
MzQ1MTk2ZDFiZWRmOTNlZjI1YTE4YTVkMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgA70wSWUJokyThSJ/Ix6TPbfR1XAI+857TTyWRt1npmvlyYs
P8PS/I+GY/7pzwEvkUmmkTDWBTuYSYeBPZXmN5jMX8ynvLCUAnXrFMd2MYz2b5KS
rZVH+8BIfdZwnGYYDcYkpsRuFEQabO+XjjOIDx+UTowAh05kci0Yw/SXGfmPepgV
T+wUduWb75SybUPS6/uxgh1H0p2ShOnF26y1TDYlJcznXIN0KntCdOoMpxLQoK1Q
uV+XsNS3U1XVo4phFJb5ZH4IJTaGWh1xkjrn/d5Eq4qj0/dlrocF6G6U0RaGzTzg
y11xL2wmXvGRKZei+HOxeasOQKBpu7D68nBtTQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFCK6n2M+CAO0K+NCPZWBarim2AZsMB8GA1UdIwQYMBaAFMMzIwaA+vXeYjNx
nRgCVsICFJWRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjdlNGQx
OWM1N2Y5ZTM2M2Q2OTcwYzkyNGMxMzUxZWNhODc2Yzg3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTk1YWY4M2QtMDg2OC00ZTczLTljZjctMjgxNmQz
YTFlNWU5Lzc4OTUzMDQ0ZDFhMjgzNDUxOTZkMWJlZGY5M2VmMjVhMThhNWQxNjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOTVhZjgzZC0wODY4LTRlNzMtOWNmNy0yODE2
ZDNhMWU1ZTkvYjdlNGQxOWM1N2Y5ZTM2M2Q2OTcwYzkyNGMxMzUxZWNhODc2Yzg3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBigDUYAAMA0GCSqGSIb3DQEBCwUAA4IBAQBuxQKw5w4vWjOq
kkmybADjro69m9c8hs/ic/MVDtK63ADLzbAfJjCPDUxJirY5RxVDTXX/NvaXqkHz
fRiXhrJ/9/Kzr/Zj9mm88ZtHXrH+b6CP8fwv3QGHqTC1HABQTx+sHY1SuycxjW6v
ia3jG1ccJEku7bS0Tb4I8LfjUFQ2fWgSxbdvNu5wyyr9MfZcu6SF5n/5m3KjVVc4
+/GY+f3yl88riJpnBC40yJB5pEMWVOviwJBlsgQkSlzOb5T4S+iaKeM28CJM+7gZ
jcoaIgI2rA3EeSRwvBt4wRNrconJRbL0nEdajWSgkU2IXwBRdKw7P1fF/dRO71NC
YgwM8IVg
-----END CERTIFICATE-----