Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/98ebd0a5e516992e7e8fe4c0bfac31036c502b67.roa
File:                     98ebd0a5e516992e7e8fe4c0bfac31036c502b67.roa (raw, json)
Hash identifier:          THlxdoRg/aPchmcVSxvPJj4W8FpBonG8pbsrswugk1Y=
Subject key identifier:   DD:19:D3:FB:AC:BC:0B:0D:1E:C7:5A:67:AA:E6:CD:3F:D1:F2:FF:FF
Certificate issuer:       /CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
Certificate serial:       089FA5
Authority key identifier: F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/98ebd0a5e516992e7e8fe4c0bfac31036c502b67.roa
Signing time:             Tue 03 May 2022 20:15:50 +0000
ROA not before:           Tue 03 May 2022 03:00:00 +0000
ROA not after:            Fri 03 May 2024 03:00:00 +0000
asID:                     265770
IP address blocks:        2803:cba0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565157 (0x89fa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a387f4a9acf838009dd751d84c60b7ecb56ec8
        Validity
            Not Before: May  3 03:00:00 2022 GMT
            Not After : May  3 03:00:00 2024 GMT
        Subject: CN=98ebd0a5e516992e7e8fe4c0bfac31036c502b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:36:11:f6:b4:1d:18:c0:9b:3a:b8:08:6c:3e:
                    e1:14:06:10:ab:21:04:34:76:bf:c8:2a:ae:49:c1:
                    d3:7b:0f:8e:67:36:39:43:2f:d8:8a:88:75:ca:a6:
                    92:d4:af:ff:c1:df:dc:a2:f2:1c:62:74:50:b6:2e:
                    c6:36:63:ee:6f:68:ab:35:da:d3:2b:14:51:6e:b6:
                    9f:54:8d:cd:11:b1:27:77:53:2f:fc:33:c5:98:9c:
                    b8:ea:38:da:50:22:60:23:86:76:17:ac:6b:31:33:
                    8b:3b:82:8e:5a:3d:54:c7:a5:91:6e:b3:9d:df:70:
                    fe:39:8a:0f:b6:7b:e7:35:57:95:85:44:5c:1b:6d:
                    d5:01:88:d0:5a:fd:82:0c:03:06:5c:e7:25:06:f7:
                    63:ea:b0:d1:36:e9:f1:bb:4b:92:8d:1b:f2:23:c0:
                    30:f2:aa:8b:bd:c7:95:61:a0:fd:11:31:dd:72:e2:
                    38:9c:7e:52:3e:be:14:9d:1d:b7:04:45:b1:fc:9b:
                    ee:20:ef:63:08:8f:31:a2:3d:71:8f:57:6f:8d:2b:
                    47:86:18:f8:1f:9a:6b:1d:3f:1b:1e:cb:cd:06:de:
                    bb:3d:db:b8:57:2a:eb:6a:b5:cb:3d:57:52:f5:22:
                    ce:33:12:47:7a:b9:77:5e:8c:7f:b6:13:ad:32:aa:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:19:D3:FB:AC:BC:0B:0D:1E:C7:5A:67:AA:E6:CD:3F:D1:F2:FF:FF
            X509v3 Authority Key Identifier:
                keyid:F9:F5:C8:A1:2F:E2:07:DD:F5:13:CA:8A:D5:F8:4E:66:4A:EA:8B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/98ebd0a5e516992e7e8fe4c0bfac31036c502b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb309d13-388c-4684-8f9b-b34df4ae861e/b5a387f4a9acf838009dd751d84c60b7ecb56ec8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:a5:16:bf:4a:80:5e:2c:72:52:de:ef:0a:43:bf:4a:a9:d5:
         18:91:67:f8:87:7d:3f:5c:83:56:32:5b:47:c9:91:54:2b:a3:
         ab:7a:64:6c:e4:73:9a:a5:16:6f:ca:15:cd:de:39:05:14:23:
         62:ab:e4:6a:d5:d3:7c:75:8b:0f:12:2a:24:1e:74:d5:c6:d7:
         c8:3c:c1:1e:23:e2:5f:ec:5c:7d:e2:e0:49:0e:44:5b:71:2a:
         19:7d:ec:bc:3a:a7:29:22:2f:07:19:fe:9c:5b:35:90:e2:13:
         28:4e:d9:84:73:d9:a2:65:44:0f:45:3c:e3:f6:79:c3:56:01:
         23:e8:9d:c5:41:33:b1:3b:3b:93:84:aa:54:68:68:0c:fd:c9:
         c5:ba:88:a7:dc:58:81:f6:5e:31:d2:a2:be:d9:87:da:0b:97:
         dd:1e:bc:7c:cd:79:a6:32:bf:f2:e0:8a:4a:fa:ff:ca:5e:ff:
         21:c5:db:86:9d:b0:ab:c3:0d:b0:b6:cc:72:f3:07:c7:14:20:
         18:93:16:0a:5e:69:70:1a:1e:fe:b3:42:8b:a5:d1:b0:d5:2e:
         06:76:04:24:4f:a6:93:f8:82:90:15:f3:03:e2:b5:26:6b:8c:
         a7:2b:b4:8c:e7:8a:64:d6:6d:1e:1d:c3:ca:9d:ab:96:ff:47:
         2b:2a:46:d9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCJ+lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1
YTM4N2Y0YTlhY2Y4MzgwMDlkZDc1MWQ4NGM2MGI3ZWNiNTZlYzgwHhcNMjIwNTAz
MDMwMDAwWhcNMjQwNTAzMDMwMDAwWjAzMTEwLwYDVQQDEyg5OGViZDBhNWU1MTY5
OTJlN2U4ZmU0YzBiZmFjMzEwMzZjNTAyYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhDYR9rQdGMCbOrgIbD7hFAYQqyEENHa/yCquScHTew+OZzY5
Qy/Yioh1yqaS1K//wd/covIcYnRQti7GNmPub2irNdrTKxRRbrafVI3NEbEnd1Mv
/DPFmJy46jjaUCJgI4Z2F6xrMTOLO4KOWj1Ux6WRbrOd33D+OYoPtnvnNVeVhURc
G23VAYjQWv2CDAMGXOclBvdj6rDRNunxu0uSjRvyI8Aw8qqLvceVYaD9ETHdcuI4
nH5SPr4UnR23BEWx/JvuIO9jCI8xoj1xj1dvjStHhhj4H5prHT8bHsvNBt67Pdu4
VyrrarXLPVdS9SLOMxJHerl3Xox/thOtMqo+NQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFN0Z0/usvAsNHsdaZ6rmzT/R8v//MB8GA1UdIwQYMBaAFPn1yKEv4gfd9RPK
itX4TmZK6otyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjVhMzg3
ZjRhOWFjZjgzODAwOWRkNzUxZDg0YzYwYjdlY2I1NmVjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmIzMDlkMTMtMzg4Yy00Njg0LThmOWItYjM0ZGY0
YWU4NjFlLzk4ZWJkMGE1ZTUxNjk5MmU3ZThmZTRjMGJmYWMzMTAzNmM1MDJiNjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYjMwOWQxMy0zODhjLTQ2ODQtOGY5Yi1iMzRk
ZjRhZTg2MWUvYjVhMzg3ZjRhOWFjZjgzODAwOWRkNzUxZDg0YzYwYjdlY2I1NmVj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDy6AwDQYJKoZIhvcNAQELBQADggEBAEelFr9KgF4sclLe
7wpDv0qp1RiRZ/iHfT9cg1YyW0fJkVQro6t6ZGzkc5qlFm/KFc3eOQUUI2Kr5GrV
03x1iw8SKiQedNXG18g8wR4j4l/sXH3i4EkORFtxKhl97Lw6pykiLwcZ/pxbNZDi
EyhO2YRz2aJlRA9FPOP2ecNWASPoncVBM7E7O5OEqlRoaAz9ycW6iKfcWIH2XjHS
or7Zh9oLl90evHzNeaYyv/Lgikr6/8pe/yHF24adsKvDDbC2zHLzB8cUIBiTFgpe
aXAaHv6zQoul0bDVLgZ2BCRPppP4gpAV8wPitSZrjKcrtIznimTWbR4dw8qdq5b/
RysqRtk=
-----END CERTIFICATE-----