Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/ec4ecfb4a40f9f29183316dbc195c0127f153f46.roa
File:                     ec4ecfb4a40f9f29183316dbc195c0127f153f46.roa (raw, json)
Hash identifier:          QzW0s1CcJMG4t+OcKJu0LYpFJkf8/b4/8Dyy79M+SyI=
Subject key identifier:   9D:37:F8:88:E3:1F:50:BF:EA:92:38:DD:26:DC:F4:A7:E1:F4:06:36
Certificate issuer:       /CN=e559225476bc467cb73e1777186dbca1caa93294
Certificate serial:       08F8A0
Authority key identifier: 02:83:F1:D6:F5:67:C1:2B:26:7F:1F:D2:6C:4D:F6:D4:8E:B3:AB:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e559225476bc467cb73e1777186dbca1caa93294.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/ec4ecfb4a40f9f29183316dbc195c0127f153f46.roa
Signing time:             Wed 24 Mar 2021 14:42:29 +0000
ROA not before:           Wed 24 Mar 2021 14:42:28 +0000
ROA not after:            Tue 24 Mar 2026 14:42:28 +0000
asID:                     269934
IP address blocks:        2803:4ae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587936 (0x8f8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e559225476bc467cb73e1777186dbca1caa93294
        Validity
            Not Before: Mar 24 14:42:28 2021 GMT
            Not After : Mar 24 14:42:28 2026 GMT
        Subject: CN=ec4ecfb4a40f9f29183316dbc195c0127f153f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bc:42:44:46:16:08:7b:6a:78:08:f4:4e:e4:
                    97:fb:f5:da:ef:5f:4f:e5:a8:ee:50:07:c7:44:15:
                    92:ad:7f:a8:bd:1e:01:71:be:48:32:3f:6b:31:55:
                    c2:79:e2:90:d6:68:32:3f:a0:b4:61:a8:4a:01:dd:
                    3b:df:e2:48:0c:46:0b:17:b1:d1:a0:25:0d:cf:44:
                    9a:66:fe:59:4a:06:eb:60:e1:26:12:c7:e3:5d:dc:
                    62:69:c3:c9:c0:36:14:df:15:c9:c6:9f:d0:63:18:
                    3e:a3:3b:81:66:75:3f:7b:60:d7:44:6b:fa:1e:a1:
                    aa:c5:09:99:00:a0:80:63:b0:48:25:cd:77:ab:46:
                    8d:b6:5b:d2:00:e2:25:16:96:2a:74:52:3d:40:28:
                    59:85:88:cd:27:94:49:84:2a:00:cc:38:7e:de:22:
                    d6:74:0d:ae:ef:0f:a4:31:8a:7d:c5:6c:96:70:be:
                    92:51:ae:e3:ac:09:a1:9c:1f:fd:7e:5e:b8:bd:98:
                    3a:8c:1b:27:16:cd:1a:78:80:82:be:8e:3b:fa:20:
                    26:18:b6:e1:a9:60:0e:a5:e7:06:f1:71:60:41:d6:
                    25:1e:9e:c2:c3:8d:70:1b:67:2d:21:01:08:93:d1:
                    b6:3a:51:8e:73:53:22:3e:c8:55:ad:e5:d6:64:e1:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:37:F8:88:E3:1F:50:BF:EA:92:38:DD:26:DC:F4:A7:E1:F4:06:36
            X509v3 Authority Key Identifier:
                keyid:02:83:F1:D6:F5:67:C1:2B:26:7F:1F:D2:6C:4D:F6:D4:8E:B3:AB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e559225476bc467cb73e1777186dbca1caa93294.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/ec4ecfb4a40f9f29183316dbc195c0127f153f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0139fc82-2be3-4c8a-bb94-07a6e6b3b0fe/e559225476bc467cb73e1777186dbca1caa93294.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:eb:8b:0f:5e:77:f6:5c:00:fe:a7:e4:4e:8e:47:f0:c0:
         a3:a0:9e:da:c1:55:e3:a2:75:1c:29:76:96:81:7b:07:f3:96:
         bf:a6:e8:0d:a5:b4:11:30:d5:bf:4a:5a:e5:09:75:d0:c7:e5:
         21:76:ee:b9:e6:61:64:08:1b:b5:35:56:5a:cc:a1:df:bd:fe:
         04:b3:d1:d0:da:19:76:1e:14:55:28:fd:31:4c:0a:da:46:b5:
         2e:c2:27:d2:f5:bb:ba:a6:0c:93:db:dc:f6:52:d8:f8:b0:9e:
         e9:f2:dd:b7:1f:40:ea:0e:5e:b2:ed:7f:0a:10:28:58:e2:cd:
         5e:2b:73:c0:6b:08:9b:21:d9:e1:82:50:4f:e8:05:e1:58:7b:
         00:08:3c:50:89:b2:e9:a1:4d:73:2a:4d:67:9f:56:f7:ca:88:
         f9:96:a7:c3:50:61:6c:25:79:40:0a:bf:52:b5:78:d9:ae:ad:
         88:09:db:7e:fb:cf:c8:a9:3c:ae:dc:9c:2f:f0:c4:2a:ba:2b:
         b2:f7:a3:47:73:bf:05:8d:ca:18:38:78:9b:fe:02:08:b6:c9:
         bd:eb:ff:a5:94:ed:c1:0d:88:9c:ad:8a:ca:71:53:e7:1e:89:
         e4:24:dc:33:98:c0:03:a1:14:0b:ae:72:78:c0:4a:1f:6c:57:
         5b:f3:ef:6d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCPigMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
NTkyMjU0NzZiYzQ2N2NiNzNlMTc3NzE4NmRiY2ExY2FhOTMyOTQwHhcNMjEwMzI0
MTQ0MjI4WhcNMjYwMzI0MTQ0MjI4WjAzMTEwLwYDVQQDEyhlYzRlY2ZiNGE0MGY5
ZjI5MTgzMzE2ZGJjMTk1YzAxMjdmMTUzZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmLxCREYWCHtqeAj0TuSX+/Xa719P5ajuUAfHRBWSrX+ovR4B
cb5IMj9rMVXCeeKQ1mgyP6C0YahKAd073+JIDEYLF7HRoCUNz0SaZv5ZSgbrYOEm
EsfjXdxiacPJwDYU3xXJxp/QYxg+ozuBZnU/e2DXRGv6HqGqxQmZAKCAY7BIJc13
q0aNtlvSAOIlFpYqdFI9QChZhYjNJ5RJhCoAzDh+3iLWdA2u7w+kMYp9xWyWcL6S
Ua7jrAmhnB/9fl64vZg6jBsnFs0aeICCvo47+iAmGLbhqWAOpecG8XFgQdYlHp7C
w41wG2ctIQEIk9G2OlGOc1MiPshVreXWZOFhwQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJ03+IjjH1C/6pI43Sbc9Kfh9AY2MB8GA1UdIwQYMBaAFAKD8db1Z8ErJn8f
0mxN9tSOs6tEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTU1OTIy
NTQ3NmJjNDY3Y2I3M2UxNzc3MTg2ZGJjYTFjYWE5MzI5NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDEzOWZjODItMmJlMy00YzhhLWJiOTQtMDdhNmU2
YjNiMGZlL2VjNGVjZmI0YTQwZjlmMjkxODMzMTZkYmMxOTVjMDEyN2YxNTNmNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMTM5ZmM4Mi0yYmUzLTRjOGEtYmI5NC0wN2E2
ZTZiM2IwZmUvZTU1OTIyNTQ3NmJjNDY3Y2I3M2UxNzc3MTg2ZGJjYTFjYWE5MzI5
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDSuAwDQYJKoZIhvcNAQELBQADggEBADfv64sPXnf2XAD+
p+ROjkfwwKOgntrBVeOidRwpdpaBewfzlr+m6A2ltBEw1b9KWuUJddDH5SF27rnm
YWQIG7U1VlrMod+9/gSz0dDaGXYeFFUo/TFMCtpGtS7CJ9L1u7qmDJPb3PZS2Piw
nuny3bcfQOoOXrLtfwoQKFjizV4rc8BrCJsh2eGCUE/oBeFYewAIPFCJsumhTXMq
TWefVvfKiPmWp8NQYWwleUAKv1K1eNmurYgJ2377z8ipPK7cnC/wxCq6K7L3o0dz
vwWNyhg4eJv+Agi2yb3r/6WU7cENiJytispxU+ceieQk3DOYwAOhFAuucnjASh9s
V1vz720=
-----END CERTIFICATE-----