Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/db03721400e379dcbadc9193e8f88ecba74c9a4a.roa
File:                     db03721400e379dcbadc9193e8f88ecba74c9a4a.roa (raw, json)
Hash identifier:          sZAQT4ZbfaonmWft8iFsav+PNrmlAUhucKfEKNkMI30=
Subject key identifier:   BD:79:3D:EE:0E:BF:97:E6:C4:B4:2F:D8:71:ED:DC:46:74:39:A3:F9
Certificate issuer:       /CN=8f78ced5e1440862c8f27e301ae2006bffa9884c
Certificate serial:       02ABFF
Authority key identifier: 43:97:A0:3B:DD:2B:B0:68:1E:99:B3:C6:17:E8:BE:78:6C:78:BE:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f78ced5e1440862c8f27e301ae2006bffa9884c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/db03721400e379dcbadc9193e8f88ecba74c9a4a.roa
Signing time:             Mon 04 Sep 2023 19:33:26 +0000
ROA not before:           Sun 03 Sep 2023 19:33:26 +0000
ROA not after:            Thu 04 Sep 2025 19:33:26 +0000
asID:                     272936
IP address blocks:        2803:d190::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175103 (0x2abff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78ced5e1440862c8f27e301ae2006bffa9884c
        Validity
            Not Before: Sep  3 19:33:26 2023 GMT
            Not After : Sep  4 19:33:26 2025 GMT
        Subject: CN=db03721400e379dcbadc9193e8f88ecba74c9a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:e5:5c:25:5f:fb:71:1a:9f:35:4c:68:e2:
                    c6:56:57:83:ff:c0:e7:8d:18:5c:2d:74:fb:e7:db:
                    23:3b:c9:e6:cb:9d:33:4e:5a:c1:23:3b:fb:b4:b0:
                    f9:e4:ff:56:7a:5c:15:e2:89:fe:25:c8:10:03:1c:
                    a1:fe:4c:eb:9e:be:58:9d:97:3c:0d:1c:18:6d:4a:
                    37:ab:cb:cd:69:4a:df:da:81:2f:c1:81:7c:c3:5c:
                    4d:bc:f4:94:20:7b:7e:d4:94:92:6a:a5:46:70:54:
                    30:fc:70:c2:19:e4:ed:c9:f7:a1:c2:b0:fc:d8:07:
                    45:45:e7:d5:c8:0a:46:49:b8:82:da:99:41:76:7d:
                    76:e4:7d:1e:99:52:56:40:dc:1a:0a:57:95:fb:97:
                    a9:4c:c2:5a:f4:78:99:e7:28:17:23:e1:31:cc:36:
                    c3:df:45:78:5f:f3:76:3e:68:a5:e3:6c:15:55:ac:
                    41:0b:f7:21:63:4c:42:27:a0:89:27:c6:bc:66:e1:
                    56:66:54:3e:9c:8a:05:dc:7c:b3:02:79:6b:f2:10:
                    80:eb:8d:0f:3a:5a:b1:68:99:04:54:01:c3:19:14:
                    1f:82:22:d4:82:c3:b5:6d:85:0e:16:57:75:2c:42:
                    bd:32:1f:4b:90:5c:02:7b:68:aa:94:fd:81:bc:a5:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:3D:EE:0E:BF:97:E6:C4:B4:2F:D8:71:ED:DC:46:74:39:A3:F9
            X509v3 Authority Key Identifier:
                keyid:43:97:A0:3B:DD:2B:B0:68:1E:99:B3:C6:17:E8:BE:78:6C:78:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f78ced5e1440862c8f27e301ae2006bffa9884c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/db03721400e379dcbadc9193e8f88ecba74c9a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f35fbebe-ccb3-4c00-bde9-3957500e1f6a/8f78ced5e1440862c8f27e301ae2006bffa9884c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d190::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:b9:d6:d9:4d:c4:da:71:9e:19:87:64:74:64:6c:e2:e1:ef:
         5c:4b:f0:a6:fd:cf:85:3a:80:80:43:a1:72:26:14:3c:3b:56:
         ca:96:32:b2:fe:45:e3:29:85:d4:9d:2e:65:90:01:5e:5a:44:
         4c:2e:67:81:14:35:26:8f:cd:5e:fe:b2:c2:26:07:8a:af:3a:
         ed:95:ce:60:95:2c:7b:9d:4c:37:53:16:3c:e3:de:31:57:d3:
         49:d2:00:48:23:c0:5f:42:17:a9:44:e7:af:01:d9:05:e6:0d:
         ef:b0:34:9d:42:06:d7:2d:5f:a5:a4:28:15:75:23:86:a6:84:
         c4:83:f2:5f:26:ab:5e:20:af:85:ca:25:b1:d2:48:54:1f:e4:
         ed:20:af:df:a6:a2:36:6f:ad:ae:b4:36:c1:88:f0:e0:1e:9f:
         9e:3b:bb:15:0c:fd:e6:34:9e:f9:bd:40:3a:28:2d:b1:0f:6e:
         ac:fa:40:1d:4b:b4:c1:35:ca:09:b0:66:58:20:4b:19:57:33:
         2f:b6:f2:5e:6c:31:1e:f8:9b:50:7e:d5:a6:ec:3d:d5:55:d2:
         92:13:e4:1a:df:e0:40:24:68:aa:b4:b4:68:e6:b6:e9:62:04:
         4c:17:12:8a:9a:47:57:1c:19:e5:29:40:37:cf:20:82:1d:0c:
         65:1b:a2:49
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAqv/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhm
NzhjZWQ1ZTE0NDA4NjJjOGYyN2UzMDFhZTIwMDZiZmZhOTg4NGMwHhcNMjMwOTAz
MTkzMzI2WhcNMjUwOTA0MTkzMzI2WjAzMTEwLwYDVQQDEyhkYjAzNzIxNDAwZTM3
OWRjYmFkYzkxOTNlOGY4OGVjYmE3NGM5YTRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAod/lXCVf+3EanzVMaOLGVleD/8DnjRhcLXT759sjO8nmy50z
TlrBIzv7tLD55P9WelwV4on+JcgQAxyh/kzrnr5YnZc8DRwYbUo3q8vNaUrf2oEv
wYF8w1xNvPSUIHt+1JSSaqVGcFQw/HDCGeTtyfehwrD82AdFRefVyApGSbiC2plB
dn125H0emVJWQNwaCleV+5epTMJa9HiZ5ygXI+ExzDbD30V4X/N2Pmil42wVVaxB
C/chY0xCJ6CJJ8a8ZuFWZlQ+nIoF3HyzAnlr8hCA640POlqxaJkEVAHDGRQfgiLU
gsO1bYUOFld1LEK9Mh9LkFwCe2iqlP2BvKU5AwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFL15Pe4Ov5fmxLQv2HHt3EZ0OaP5MB8GA1UdIwQYMBaAFEOXoDvdK7BoHpmz
xhfovnhseL75MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGY3OGNl
ZDVlMTQ0MDg2MmM4ZjI3ZTMwMWFlMjAwNmJmZmE5ODg0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjM1ZmJlYmUtY2NiMy00YzAwLWJkZTktMzk1NzUw
MGUxZjZhL2RiMDM3MjE0MDBlMzc5ZGNiYWRjOTE5M2U4Zjg4ZWNiYTc0YzlhNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMzVmYmViZS1jY2IzLTRjMDAtYmRlOS0zOTU3
NTAwZTFmNmEvOGY3OGNlZDVlMTQ0MDg2MmM4ZjI3ZTMwMWFlMjAwNmJmZmE5ODg0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD0ZAwDQYJKoZIhvcNAQELBQADggEBAES51tlNxNpxnhmH
ZHRkbOLh71xL8Kb9z4U6gIBDoXImFDw7VsqWMrL+ReMphdSdLmWQAV5aREwuZ4EU
NSaPzV7+ssImB4qvOu2VzmCVLHudTDdTFjzj3jFX00nSAEgjwF9CF6lE568B2QXm
De+wNJ1CBtctX6WkKBV1I4amhMSD8l8mq14gr4XKJbHSSFQf5O0gr9+mojZvra60
NsGI8OAen547uxUM/eY0nvm9QDooLbEPbqz6QB1LtME1ygmwZlggSxlXMy+28l5s
MR74m1B+1absPdVV0pIT5Brf4EAkaKq0tGjmtuliBEwXEoqaR1ccGeUpQDfPIIId
DGUbokk=
-----END CERTIFICATE-----