Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/98010fbbed6025aaf6724b7ef0d157816558a366.roa
File:                     98010fbbed6025aaf6724b7ef0d157816558a366.roa (raw, json)
Hash identifier:          EUfCHZd96tgfQh4Sq/7U5MGI4KOyouKf4Bby5kAk0NA=
Subject key identifier:   8F:B8:55:4F:81:05:DC:44:E8:45:62:B8:00:E3:B7:A5:DE:F4:CB:F9
Certificate issuer:       /CN=9016dbbb30f681076e85c5aae05e7a2e38e274e1
Certificate serial:       2AA0
Authority key identifier: 98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/98010fbbed6025aaf6724b7ef0d157816558a366.roa
Signing time:             Tue 12 Apr 2022 12:58:21 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Wed 07 Feb 2024 03:00:00 +0000
asID:                     272117
IP address blocks:        2803:8f10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10912 (0x2aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9016dbbb30f681076e85c5aae05e7a2e38e274e1
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Feb  7 03:00:00 2024 GMT
        Subject: CN=98010fbbed6025aaf6724b7ef0d157816558a366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6f:36:0e:68:9d:4d:e2:7c:6b:82:75:1a:d2:
                    5e:1e:ca:21:01:88:9a:36:04:46:61:08:b7:57:22:
                    ab:8b:67:b7:5c:0c:50:d8:a6:ec:04:cf:c1:21:f6:
                    79:1d:eb:e4:43:d4:7d:a0:05:69:eb:02:b0:9b:f1:
                    71:38:6f:80:b6:bb:90:90:2f:20:36:d9:35:aa:54:
                    7e:08:30:ce:34:82:a6:f0:b1:e0:76:be:68:24:81:
                    b8:22:55:31:7f:fc:1a:f9:e4:bc:2b:0b:f9:05:28:
                    9f:e6:1e:6b:af:fa:37:6c:48:a3:25:d0:89:53:90:
                    e4:0a:cd:5e:f1:4a:a1:75:58:ba:14:3d:55:c8:75:
                    7c:15:7f:a8:55:ba:1e:18:7c:c9:2b:03:d3:e5:6b:
                    6e:0c:17:34:b7:2d:42:dd:6d:e8:c9:5a:01:9e:fc:
                    45:78:4a:c7:09:53:2f:07:8d:de:74:6b:a9:4e:fa:
                    94:5f:af:e5:d5:39:ea:12:09:83:a7:32:fd:1b:15:
                    26:83:49:b9:b8:d5:b3:41:91:86:66:41:55:81:8d:
                    7a:1c:59:42:b3:a3:04:74:cc:15:28:6d:dd:77:64:
                    0c:10:e7:df:f0:86:1f:42:8b:59:09:33:95:fc:61:
                    21:58:20:36:a7:34:ad:92:ee:86:dc:e4:37:1c:8b:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B8:55:4F:81:05:DC:44:E8:45:62:B8:00:E3:B7:A5:DE:F4:CB:F9
            X509v3 Authority Key Identifier:
                keyid:98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/98010fbbed6025aaf6724b7ef0d157816558a366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:81:da:e1:82:5b:59:b5:6a:09:60:f8:72:d9:c0:dd:02:
         63:d0:79:a2:0d:f8:de:c3:63:f8:7e:7b:0d:0a:90:06:47:97:
         bc:ea:57:a6:59:f3:e1:9a:b1:95:f7:1f:28:a6:fa:d4:9f:38:
         43:60:54:6f:13:62:63:f9:1a:e1:14:7d:6b:67:6c:b4:ec:b9:
         f5:b3:96:bf:37:3e:dd:75:3f:13:9b:af:52:d8:f0:92:e6:7a:
         5d:6f:c1:ed:a7:c6:b8:2b:21:82:52:9f:4b:a4:94:96:de:73:
         72:4c:c7:9f:72:69:6c:33:16:42:b6:3b:f7:ae:89:c6:8b:68:
         dc:9a:17:3f:c5:41:cb:67:2a:b8:e7:18:94:08:ec:14:14:ce:
         37:d7:4a:3e:b4:21:c5:9e:80:5e:8e:58:99:7e:78:7b:74:1f:
         de:05:2d:49:ac:f0:b0:76:b4:29:72:8a:73:07:5e:5b:5f:7a:
         9e:a3:59:1c:2c:d7:f0:43:8b:af:52:50:69:31:69:ea:1e:b2:
         bf:a1:e1:2b:68:8c:cc:7d:9f:bf:e9:a0:5a:bd:b8:bd:5a:d1:
         e2:94:ad:7e:65:6f:f3:0d:40:85:b5:bd:9d:ab:f2:2f:ee:ad:
         d3:8e:18:34:b0:4b:53:27:7f:3c:a9:fe:62:c8:98:b1:04:0e:
         c6:5f:02:2d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICKqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAx
NmRiYmIzMGY2ODEwNzZlODVjNWFhZTA1ZTdhMmUzOGUyNzRlMTAeFw0yMjA0MTIw
MzAwMDBaFw0yNDAyMDcwMzAwMDBaMDMxMTAvBgNVBAMTKDk4MDEwZmJiZWQ2MDI1
YWFmNjcyNGI3ZWYwZDE1NzgxNjU1OGEzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCLbzYOaJ1N4nxrgnUa0l4eyiEBiJo2BEZhCLdXIquLZ7dcDFDY
puwEz8Eh9nkd6+RD1H2gBWnrArCb8XE4b4C2u5CQLyA22TWqVH4IMM40gqbwseB2
vmgkgbgiVTF//Br55LwrC/kFKJ/mHmuv+jdsSKMl0IlTkOQKzV7xSqF1WLoUPVXI
dXwVf6hVuh4YfMkrA9Pla24MFzS3LULdbejJWgGe/EV4SscJUy8Hjd50a6lO+pRf
r+XVOeoSCYOnMv0bFSaDSbm41bNBkYZmQVWBjXocWUKzowR0zBUobd13ZAwQ59/w
hh9Ci1kJM5X8YSFYIDanNK2S7obc5Dcci+X5AgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUj7hVT4EF3EToRWK4AOO3pd70y/kwHwYDVR0jBBgwFoAUmH0D2pRXKbuGbTTL
hPutogGqvPswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS85MDE2ZGJi
YjMwZjY4MTA3NmU4NWM1YWFlMDVlN2EyZTM4ZTI3NGUxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wMzc0OTRhYi04YWRmLTQwMjctOTc1YS05N2E5NjA5
MzUwMmYvOTgwMTBmYmJlZDYwMjVhYWY2NzI0YjdlZjBkMTU3ODE2NTU4YTM2Ni5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzAzNzQ5NGFiLThhZGYtNDAyNy05NzVhLTk3YTk2
MDkzNTAyZi85MDE2ZGJiYjMwZjY4MTA3NmU4NWM1YWFlMDVlN2EyZTM4ZTI3NGUx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAOPEDANBgkqhkiG9w0BAQsFAAOCAQEAf56B2uGCW1m1aglg
+HLZwN0CY9B5og343sNj+H57DQqQBkeXvOpXplnz4ZqxlfcfKKb61J84Q2BUbxNi
Y/ka4RR9a2dstOy59bOWvzc+3XU/E5uvUtjwkuZ6XW/B7afGuCshglKfS6SUlt5z
ckzHn3JpbDMWQrY7966Jxoto3JoXP8VBy2cquOcYlAjsFBTON9dKPrQhxZ6AXo5Y
mX54e3Qf3gUtSazwsHa0KXKKcwdeW196nqNZHCzX8EOLr1JQaTFp6h6yv6HhK2iM
zH2fv+mgWr24vVrR4pStfmVv8w1AhbW9navyL+6t044YNLBLUyd/PKn+YsiYsQQO
xl8CLQ==
-----END CERTIFICATE-----