Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/983b3f34e394c7252f6bb58f0905b76bd4c046f8.roa
File:                     983b3f34e394c7252f6bb58f0905b76bd4c046f8.roa (raw, json)
Hash identifier:          M7An/6QjA3GP9+pQ6TQiuxup3mw9K7gb704mGl9+lx4=
Subject key identifier:   2E:E8:03:63:15:96:27:0C:D0:73:A9:E3:BB:B3:3E:3B:64:98:F6:71
Certificate issuer:       /CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
Certificate serial:       089D5D
Authority key identifier: F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/983b3f34e394c7252f6bb58f0905b76bd4c046f8.roa
Signing time:             Tue 03 May 2022 20:15:48 +0000
ROA not before:           Tue 03 May 2022 03:00:00 +0000
ROA not after:            Fri 03 May 2024 03:00:00 +0000
asID:                     265770
IP address blocks:        2803:cba0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564573 (0x89d5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Validity
            Not Before: May  3 03:00:00 2022 GMT
            Not After : May  3 03:00:00 2024 GMT
        Subject: CN=983b3f34e394c7252f6bb58f0905b76bd4c046f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:41:fb:32:bb:a6:c1:ba:76:6e:82:e9:0a:
                    d5:61:20:b7:84:3b:ca:39:26:eb:f1:4c:33:42:2d:
                    ac:64:c9:ed:aa:45:34:bb:e5:7d:f9:80:d2:fd:a6:
                    d5:68:76:ce:51:2d:69:df:08:4f:0e:d1:39:a5:be:
                    ae:ce:d4:e7:5b:33:7a:dc:30:b3:90:05:56:9d:39:
                    08:87:d9:41:1b:62:27:26:86:f9:b6:29:7b:b5:36:
                    32:b8:ed:7e:ee:48:a6:5d:8a:a6:9e:14:7b:b7:d3:
                    e6:11:66:9d:13:ab:36:93:a6:d2:92:23:50:22:a1:
                    90:ec:08:60:5a:3e:dd:0a:83:01:0f:c1:5b:54:da:
                    a0:dd:32:63:fe:56:3e:9e:7e:9e:f2:db:25:e6:a4:
                    fa:9e:6f:2a:d6:6b:09:95:fe:0c:90:bf:44:4e:b1:
                    39:48:90:e4:ba:24:f1:15:a0:99:c6:78:e3:41:99:
                    c8:bd:18:ff:92:d0:b6:06:f2:f2:4b:16:98:b2:86:
                    ed:d5:d9:67:c5:5e:7c:55:bf:aa:e3:25:29:e1:d9:
                    67:33:0a:78:ec:59:0b:72:3b:db:9b:95:a0:d1:36:
                    6a:33:16:08:8f:e4:3d:f5:cf:53:04:0f:6f:ad:83:
                    fb:41:ef:de:41:79:09:cc:3d:76:36:74:a3:0b:c2:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:03:63:15:96:27:0C:D0:73:A9:E3:BB:B3:3E:3B:64:98:F6:71
            X509v3 Authority Key Identifier:
                keyid:F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/983b3f34e394c7252f6bb58f0905b76bd4c046f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:9d:be:74:a4:fb:74:95:a8:ad:a6:89:08:d4:78:89:dd:09:
         02:13:da:95:b2:2d:3a:5a:60:6a:ee:0d:36:2c:a0:99:01:fb:
         84:13:ae:64:bc:72:b2:b8:2e:d8:b8:1f:4e:92:ec:24:ad:4d:
         ac:f4:a0:5e:e5:71:13:fc:2f:34:0a:97:7f:d0:91:5d:23:33:
         8b:c7:1d:2c:c2:27:bb:c9:86:d8:67:b6:4e:12:75:79:af:da:
         c2:5e:4c:6e:c6:21:01:bf:d5:1a:0f:c2:41:9c:1a:60:01:75:
         d1:46:a8:92:92:10:a8:d2:04:af:4c:40:49:46:04:68:14:52:
         2b:a3:3c:fe:ae:e6:cf:13:bb:43:4f:b6:18:05:6e:ac:eb:49:
         17:69:cd:5f:14:45:2f:5f:cc:d9:44:43:3c:db:f2:7f:c3:34:
         18:83:1c:22:b0:64:21:f5:13:d0:00:64:68:2f:9f:3f:04:c7:
         cc:e3:fe:72:2f:a6:ea:55:23:54:41:3d:d7:f7:14:49:17:c5:
         a7:63:ef:49:d2:fe:a2:5a:d6:e6:f0:46:3b:bd:60:2e:c1:d2:
         e5:85:bc:7a:d6:ba:4c:ff:6d:ce:41:43:33:9e:54:4f:84:0d:
         7f:b9:97:3f:f8:75:49:43:c0:53:74:64:1e:ef:55:be:34:b7:
         8e:a3:2c:f3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCJ1dMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1
YTM4N2Y0YTlhY2Y4MzgwMDlkZDc1MWQ4NGM2MGI3ZWNiNTZlYzgwHhcNMjIwNTAz
MDMwMDAwWhcNMjQwNTAzMDMwMDAwWjAzMTEwLwYDVQQDEyg5ODNiM2YzNGUzOTRj
NzI1MmY2YmI1OGYwOTA1Yjc2YmQ0YzA0NmY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyeVB+zK7psG6dm6C6QrVYSC3hDvKOSbr8UwzQi2sZMntqkU0
u+V9+YDS/abVaHbOUS1p3whPDtE5pb6uztTnWzN63DCzkAVWnTkIh9lBG2InJob5
til7tTYyuO1+7kimXYqmnhR7t9PmEWadE6s2k6bSkiNQIqGQ7AhgWj7dCoMBD8Fb
VNqg3TJj/lY+nn6e8tsl5qT6nm8q1msJlf4MkL9ETrE5SJDkuiTxFaCZxnjjQZnI
vRj/ktC2BvLySxaYsobt1dlnxV58Vb+q4yUp4dlnMwp47FkLcjvbm5Wg0TZqMxYI
j+Q99c9TBA9vrYP7Qe/eQXkJzD12NnSjC8KOswIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFC7oA2MVlicM0HOp47uzPjtkmPZxMB8GA1UdIwQYMBaAFPn1yKEv4gfd9RPK
itX4TmZK6otyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjVhMzg3
ZjRhOWFjZjgzODAwOWRkNzUxZDg0YzYwYjdlY2I1NmVjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmIzMDlkMTMtMzg4Yy00Njg0LThmOWItYjM0ZGY0
YWU4NjFlLzk4M2IzZjM0ZTM5NGM3MjUyZjZiYjU4ZjA5MDViNzZiZDRjMDQ2Zjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYjMwOWQxMy0zODhjLTQ2ODQtOGY5Yi1iMzRk
ZjRhZTg2MWUvYjVhMzg3ZjRhOWFjZjgzODAwOWRkNzUxZDg0YzYwYjdlY2I1NmVj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDy6AwDQYJKoZIhvcNAQELBQADggEBAEWdvnSk+3SVqK2m
iQjUeIndCQIT2pWyLTpaYGruDTYsoJkB+4QTrmS8crK4Lti4H06S7CStTaz0oF7l
cRP8LzQKl3/QkV0jM4vHHSzCJ7vJhthntk4SdXmv2sJeTG7GIQG/1RoPwkGcGmAB
ddFGqJKSEKjSBK9MQElGBGgUUiujPP6u5s8Tu0NPthgFbqzrSRdpzV8URS9fzNlE
Qzzb8n/DNBiDHCKwZCH1E9AAZGgvnz8Ex8zj/nIvpupVI1RBPdf3FEkXxadj70nS
/qJa1ubwRju9YC7B0uWFvHrWukz/bc5BQzOeVE+EDX+5lz/4dUlDwFN0ZB7vVb40
t46jLPM=
-----END CERTIFICATE-----