Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa
File:                     3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa (raw, json)
Hash identifier:          2mDkNUbygsVtq53ebfKbMn50L1fgMvFZUo/FHZZNI8Q=
Subject key identifier:   66:95:D9:D6:C9:F0:1B:E1:D2:08:FF:B3:C1:80:5C:0E:C8:34:B4:86
Certificate issuer:       /CN=5acbc1040078c2c220281be4e4aebb06b6460703
Certificate serial:       1245D8
Authority key identifier: 22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa
Signing time:             Mon 24 Apr 2023 08:30:00 +0000
ROA not before:           Sun 23 Apr 2023 08:30:00 +0000
ROA not after:            Tue 22 Apr 2025 08:30:00 +0000
asID:                     14080
IP address blocks:        2801:1e:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197528 (0x1245d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acbc1040078c2c220281be4e4aebb06b6460703
        Validity
            Not Before: Apr 23 08:30:00 2023 GMT
            Not After : Apr 22 08:30:00 2025 GMT
        Subject: CN=3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:d3:3b:4a:2f:20:8e:da:b6:db:2f:3f:a8:
                    5b:34:ac:f5:f8:0e:57:7b:94:88:45:82:25:ca:29:
                    0d:71:a8:3b:c2:3b:42:84:e2:ca:cd:b8:4d:f6:f1:
                    f1:c6:f7:8c:b5:75:bf:c5:ea:b6:8f:73:32:ad:db:
                    db:92:cf:b4:91:c7:e8:62:e1:48:06:ce:d9:79:b5:
                    e0:52:c5:07:4c:99:1f:8e:44:dd:ed:76:96:ab:3e:
                    fd:5d:9a:b3:99:19:50:7b:15:65:48:52:e0:60:b5:
                    36:f7:ff:2a:4f:65:8f:f3:47:01:6a:76:1e:65:d9:
                    50:fe:5b:27:0b:78:24:04:e4:c6:82:8f:a2:bd:fd:
                    79:bf:bd:e8:00:56:76:0a:28:dc:42:15:30:26:aa:
                    f8:c6:13:76:58:ab:72:e7:ba:bd:85:6a:0a:04:0d:
                    b2:28:1a:8f:7b:a5:43:0f:ac:d1:84:e4:72:c1:ca:
                    4d:76:fe:5c:d6:3e:9d:29:ba:d9:20:e4:a8:e1:06:
                    ce:03:07:c7:d9:ca:74:a6:f5:00:ae:ba:cb:2b:98:
                    ff:3d:44:0f:d3:7e:8d:ad:81:b1:b9:34:61:09:c3:
                    b3:e5:ec:5a:e7:86:12:ce:1f:c5:5a:14:38:6f:fa:
                    d1:b6:d6:49:79:be:b3:33:4a:34:d2:93:ac:cf:2a:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:95:D9:D6:C9:F0:1B:E1:D2:08:FF:B3:C1:80:5C:0E:C8:34:B4:86
            X509v3 Authority Key Identifier:
                keyid:22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/3b0ac7fa1b8b15f1d3aac30e9e761e031a42385d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:66:6f:fa:13:04:f4:2e:27:3b:3f:2a:84:fe:93:cd:73:1d:
         49:66:04:4b:13:9c:30:e2:b4:55:ac:1a:c3:de:39:fb:78:41:
         6f:83:a1:9d:af:5c:27:fe:95:5e:59:63:c5:b5:6a:e7:b0:33:
         c4:f0:50:a9:36:78:e5:dd:6d:39:89:a6:71:38:1d:2a:38:44:
         b0:11:82:14:c7:25:da:54:e6:5f:58:c0:0c:c3:58:d8:0f:bb:
         94:03:20:9c:d3:60:a2:86:e2:7d:7e:ed:4c:43:11:9d:a5:03:
         35:e0:a3:54:d8:3a:b1:47:45:e1:cb:76:37:6e:79:78:f4:9f:
         2d:39:bf:47:5e:b6:d5:46:7c:57:3a:94:7c:0e:1b:80:9d:b7:
         2a:d5:65:e0:7d:be:0c:74:1a:15:41:c9:d3:0d:17:2a:1e:5c:
         cc:ca:54:1a:69:8d:66:b1:33:1c:7c:00:46:aa:40:30:a9:e0:
         6e:2c:24:49:b5:e5:e3:ea:af:8b:d9:66:72:e9:ea:db:63:60:
         6e:0a:7a:fa:98:83:dd:ed:e6:bf:e2:d9:60:6f:d2:b0:27:3e:
         b7:e8:6d:e7:c6:06:f5:b8:e9:9b:05:6e:30:1e:15:72:b0:29:
         d5:7b:01:4f:65:5d:89:c2:65:a0:32:9c:26:fe:b9:bb:3e:99:
         a3:70:75:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDEkXYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
Y2JjMTA0MDA3OGMyYzIyMDI4MWJlNGU0YWViYjA2YjY0NjA3MDMwHhcNMjMwNDIz
MDgzMDAwWhcNMjUwNDIyMDgzMDAwWjAzMTEwLwYDVQQDEygzYjBhYzdmYTFiOGIx
NWYxZDNhYWMzMGU5ZTc2MWUwMzFhNDIzODVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr/LTO0ovII7attsvP6hbNKz1+A5Xe5SIRYIlyikNcag7wjtC
hOLKzbhN9vHxxveMtXW/xeq2j3Myrdvbks+0kcfoYuFIBs7ZebXgUsUHTJkfjkTd
7XaWqz79XZqzmRlQexVlSFLgYLU29/8qT2WP80cBanYeZdlQ/lsnC3gkBOTGgo+i
vf15v73oAFZ2CijcQhUwJqr4xhN2WKty57q9hWoKBA2yKBqPe6VDD6zRhORywcpN
dv5c1j6dKbrZIOSo4QbOAwfH2cp0pvUArrrLK5j/PUQP036NrYGxuTRhCcOz5exa
54YSzh/FWhQ4b/rRttZJeb6zM0o00pOszyqeRQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFGaV2dbJ8Bvh0gj/s8GAXA7INLSGMB8GA1UdIwQYMBaAFCK9Zy9Dhy1dRs7D
KW1cxcbBeCQvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWFjYmMx
MDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmJhZTI0NjMtZTNlOS00ZGZkLTk1ZGUtNTMzOWNj
NWQxNDk4LzNiMGFjN2ZhMWI4YjE1ZjFkM2FhYzMwZTllNzYxZTAzMWE0MjM4NWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYmFlMjQ2My1lM2U5LTRkZmQtOTVkZS01MzM5
Y2M1ZDE0OTgvNWFjYmMxMDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB5oADANBgkqhkiG9w0BAQsFAAOCAQEAc2Zv+hME9C4n
Oz8qhP6TzXMdSWYESxOcMOK0Vawaw945+3hBb4Ohna9cJ/6VXlljxbVq57AzxPBQ
qTZ45d1tOYmmcTgdKjhEsBGCFMcl2lTmX1jADMNY2A+7lAMgnNNgoobifX7tTEMR
naUDNeCjVNg6sUdF4ct2N255ePSfLTm/R1621UZ8VzqUfA4bgJ23KtVl4H2+DHQa
FUHJ0w0XKh5czMpUGmmNZrEzHHwARqpAMKngbiwkSbXl4+qvi9lmcunq22Ngbgp6
+piD3e3mv+LZYG/SsCc+t+ht58YG9bjpmwVuMB4VcrAp1XsBT2VdicJloDKcJv65
uz6Zo3B1Zw==
-----END CERTIFICATE-----