Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/a2c10a4dc9752a106c8037799b89f1e4e615d564.roa
File:                     a2c10a4dc9752a106c8037799b89f1e4e615d564.roa (raw, json)
Hash identifier:          lck8RrFJjZ+fcpAmHHaAhoQvAJYlgodPRIlSW1RcHPo=
Subject key identifier:   44:49:58:3D:53:47:12:D7:58:90:88:2E:33:2B:83:22:3F:98:D4:7D
Certificate issuer:       /CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab
Certificate serial:       0BFE5F
Authority key identifier: A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/a2c10a4dc9752a106c8037799b89f1e4e615d564.roa
Signing time:             Wed 24 Mar 2021 14:48:04 +0000
ROA not before:           Wed 24 Mar 2021 14:48:04 +0000
ROA not after:            Tue 24 Mar 2026 14:48:04 +0000
asID:                     267693
IP address blocks:        2803:c1a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786015 (0xbfe5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab
        Validity
            Not Before: Mar 24 14:48:04 2021 GMT
            Not After : Mar 24 14:48:04 2026 GMT
        Subject: CN=a2c10a4dc9752a106c8037799b89f1e4e615d564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:94:ac:13:3a:7d:4a:2a:a6:d6:49:ab:f1:
                    f2:f9:68:33:1a:29:44:65:b7:0c:ef:ad:68:06:be:
                    df:1e:cf:e3:02:f2:c4:f5:2a:0a:f5:12:9d:2b:c7:
                    67:af:1a:b8:2f:a1:11:37:af:5b:f7:0a:9f:16:5d:
                    97:c5:ea:bd:b5:83:ab:19:38:c1:b8:ec:95:55:11:
                    c7:08:fd:52:c9:99:26:7e:c4:ed:99:86:17:64:cb:
                    24:68:c4:0e:56:6c:0b:5c:04:c3:b6:bc:5d:ad:65:
                    a5:26:2f:ab:f1:fc:66:2c:ae:ae:99:1b:03:bb:5c:
                    20:e8:c3:ff:e7:ec:30:1a:8c:c9:cb:1b:73:7d:65:
                    88:cf:4a:bc:0c:62:da:ed:a5:6a:92:fc:02:4a:fd:
                    75:63:74:b3:a7:21:42:10:c0:23:a0:8b:7c:97:3c:
                    38:72:06:27:c7:e5:a4:2c:5e:a5:2a:4d:43:c0:cb:
                    15:f3:a2:ca:be:16:a1:ea:c5:c8:a6:8b:26:61:af:
                    a4:c7:30:8c:e0:35:26:ac:4e:ad:ad:b1:b9:cc:cf:
                    9b:d2:da:97:c6:9a:42:e1:73:04:d8:27:7e:4c:77:
                    d5:58:7e:1b:9c:e2:57:ed:9c:38:fd:69:70:1c:5b:
                    71:45:e1:4f:89:ec:bc:06:7f:2c:bc:e0:59:10:01:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:49:58:3D:53:47:12:D7:58:90:88:2E:33:2B:83:22:3F:98:D4:7D
            X509v3 Authority Key Identifier:
                keyid:A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/a2c10a4dc9752a106c8037799b89f1e4e615d564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:bb:5a:11:81:60:09:42:c1:a2:be:5d:24:9c:cc:47:b3:1d:
         82:8e:1b:23:59:c4:13:26:eb:76:4c:c0:c2:67:2c:69:6b:cc:
         cc:f1:23:31:ef:70:04:ea:6f:69:4a:c6:e8:1f:cf:fa:a1:3b:
         f2:fc:9f:f9:88:e7:37:8c:5e:be:58:cf:13:30:fb:8e:fe:0a:
         b9:25:e9:cb:0e:bc:c1:5c:79:86:4d:65:28:92:83:b8:65:9c:
         cd:42:3f:9c:70:3a:ba:0a:ef:09:6f:8e:3b:db:3a:f0:18:ff:
         7f:1b:f2:56:31:1a:5f:e2:3d:55:71:62:fb:fe:75:6c:d6:44:
         7b:e3:d2:93:23:f6:c0:d0:17:25:59:1d:e9:d8:f4:2a:b7:29:
         d9:37:86:bf:b3:e8:e5:23:9d:89:fe:e9:21:3e:e7:24:73:15:
         7b:f5:6b:c9:ce:09:44:bd:37:7d:bf:5a:c8:9c:68:f1:8e:87:
         f3:de:61:79:d3:97:01:49:0b:c2:b4:f5:54:21:26:64:d6:93:
         6a:e1:dd:c0:be:06:5b:2a:1a:ba:8f:ee:97:05:f8:0d:cd:b1:
         10:48:ec:21:8a:6b:c2:8b:f6:a0:cf:e9:2b:55:96:98:69:58:
         5d:3b:50:78:88:1c:69:b2:7a:43:2c:4f:f3:70:b1:cc:de:c3:
         6f:bc:67:c3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDC/5fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
ZjYwZGFkNWNiMDJmYTEzZTIyYTAzY2Y3ZTBmNWNhY2UzMmNlYWIwHhcNMjEwMzI0
MTQ0ODA0WhcNMjYwMzI0MTQ0ODA0WjAzMTEwLwYDVQQDEyhhMmMxMGE0ZGM5NzUy
YTEwNmM4MDM3Nzk5Yjg5ZjFlNGU2MTVkNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjAWUrBM6fUoqptZJq/Hy+WgzGilEZbcM761oBr7fHs/jAvLE
9SoK9RKdK8dnrxq4L6ERN69b9wqfFl2Xxeq9tYOrGTjBuOyVVRHHCP1SyZkmfsTt
mYYXZMskaMQOVmwLXATDtrxdrWWlJi+r8fxmLK6umRsDu1wg6MP/5+wwGozJyxtz
fWWIz0q8DGLa7aVqkvwCSv11Y3SzpyFCEMAjoIt8lzw4cgYnx+WkLF6lKk1DwMsV
86LKvhah6sXIposmYa+kxzCM4DUmrE6trbG5zM+b0tqXxppC4XME2Cd+THfVWH4b
nOJX7Zw4/WlwHFtxReFPiey8Bn8svOBZEAEO5wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFERJWD1TRxLXWJCILjMrgyI/mNR9MB8GA1UdIwQYMBaAFKmSt3NGc73lHUHm
loX1yNMLczKsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWRmNjBk
YWQ1Y2IwMmZhMTNlMjJhMDNjZjdlMGY1Y2FjZTMyY2VhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzM0MzgzMjAtODdhMi00MjNmLWFmODEtNDQ1YmE2
YmVhMzg3L2EyYzEwYTRkYzk3NTJhMTA2YzgwMzc3OTliODlmMWU0ZTYxNWQ1NjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMzQzODMyMC04N2EyLTQyM2YtYWY4MS00NDVi
YTZiZWEzODcvOWRmNjBkYWQ1Y2IwMmZhMTNlMjJhMDNjZjdlMGY1Y2FjZTMyY2Vh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDwaAwDQYJKoZIhvcNAQELBQADggEBAEG7WhGBYAlCwaK+
XSSczEezHYKOGyNZxBMm63ZMwMJnLGlrzMzxIzHvcATqb2lKxugfz/qhO/L8n/mI
5zeMXr5YzxMw+47+Crkl6csOvMFceYZNZSiSg7hlnM1CP5xwOroK7wlvjjvbOvAY
/38b8lYxGl/iPVVxYvv+dWzWRHvj0pMj9sDQFyVZHenY9Cq3Kdk3hr+z6OUjnYn+
6SE+5yRzFXv1a8nOCUS9N32/WsicaPGOh/PeYXnTlwFJC8K09VQhJmTWk2rh3cC+
BlsqGrqP7pcF+A3NsRBI7CGKa8KL9qDP6StVlphpWF07UHiIHGmyekMsT/Nwscze
w2+8Z8M=
-----END CERTIFICATE-----