Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/ed2bee10979ab75058df4d523a0ce8e63de818aa.roa
File:                     ed2bee10979ab75058df4d523a0ce8e63de818aa.roa (raw, json)
Hash identifier:          4ausHdzVmAfv9Tff566DFkOPuAylsWE2ntpzM0QJsLU=
Subject key identifier:   F3:18:E1:01:A3:1B:B4:A1:D9:30:2B:4A:3D:E0:5C:76:B7:ED:87:C3
Certificate issuer:       /CN=5e93dce6c9d960936b80c36849407f9ce44df6f8
Certificate serial:       0C00B3
Authority key identifier: 1D:73:41:78:1B:BE:0E:E9:8C:07:63:19:FD:A5:81:CC:13:DE:66:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e93dce6c9d960936b80c36849407f9ce44df6f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/ed2bee10979ab75058df4d523a0ce8e63de818aa.roa
Signing time:             Wed 24 Mar 2021 14:42:20 +0000
ROA not before:           Wed 24 Mar 2021 14:42:20 +0000
ROA not after:            Tue 24 Mar 2026 14:42:20 +0000
asID:                     264773
IP address blocks:        2803:360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786611 (0xc00b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e93dce6c9d960936b80c36849407f9ce44df6f8
        Validity
            Not Before: Mar 24 14:42:20 2021 GMT
            Not After : Mar 24 14:42:20 2026 GMT
        Subject: CN=ed2bee10979ab75058df4d523a0ce8e63de818aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5b:50:8f:11:03:67:24:43:c5:7e:e8:16:02:
                    2a:57:d2:86:6b:6c:2e:40:7e:ec:9b:80:a0:ab:7a:
                    70:5c:f1:51:24:84:95:7d:d1:b9:4a:02:72:46:d1:
                    a0:ae:65:73:73:2c:46:fa:48:82:4b:49:45:c3:37:
                    b2:83:e7:e2:0e:35:c4:bf:a3:60:36:bc:be:01:50:
                    f6:b9:df:b4:69:0e:16:eb:b7:0c:18:0b:8a:71:48:
                    b6:22:ae:38:7c:a8:8a:43:9e:51:cf:66:36:b1:9f:
                    0c:af:98:c5:94:b7:7d:47:b9:85:52:00:63:ab:d7:
                    65:0f:0b:0a:29:8e:5a:26:d6:46:2f:34:b2:60:2e:
                    f0:ad:13:74:f8:98:b7:0e:3a:ca:7e:98:54:7c:95:
                    b8:1f:af:b6:33:ca:ff:bd:9a:3e:75:1f:87:92:37:
                    dd:b1:9e:70:e7:ab:4d:6f:5d:8a:32:c2:8f:7f:a5:
                    18:0b:d1:2d:b9:96:e3:89:6d:d8:07:5c:0b:67:06:
                    b6:1e:68:bd:5e:14:95:7b:9f:43:ac:1c:09:5b:f1:
                    71:61:a9:f1:d3:98:f7:20:2d:83:a1:4c:b4:cb:00:
                    af:21:ba:8f:70:79:95:e6:a7:c9:5c:3e:6f:9e:d4:
                    21:30:09:27:1c:f6:0d:c5:5f:52:aa:e5:44:01:db:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:E1:01:A3:1B:B4:A1:D9:30:2B:4A:3D:E0:5C:76:B7:ED:87:C3
            X509v3 Authority Key Identifier:
                keyid:1D:73:41:78:1B:BE:0E:E9:8C:07:63:19:FD:A5:81:CC:13:DE:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e93dce6c9d960936b80c36849407f9ce44df6f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/ed2bee10979ab75058df4d523a0ce8e63de818aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/5e93dce6c9d960936b80c36849407f9ce44df6f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:360::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:44:bd:9b:c4:83:a8:b1:88:f2:c6:4a:ff:9b:35:13:b5:e0:
         d3:2c:dd:60:4c:11:17:d8:bd:82:9c:a7:3b:f0:be:68:88:24:
         3b:e6:18:29:70:89:08:1d:4f:0c:d3:f4:43:95:fa:f8:36:77:
         ef:24:bd:db:da:2b:7b:d2:9c:a2:32:8c:64:a0:2f:b1:cd:f5:
         d3:2c:d9:53:bb:be:fd:6e:f1:91:39:63:81:91:a3:31:d6:e3:
         dc:bb:78:70:e7:9e:3c:05:63:21:c9:48:40:3f:2d:0c:51:7f:
         09:b7:ce:28:c9:38:44:7e:2f:0f:7c:fa:f4:1d:b8:02:49:41:
         08:24:fe:36:3d:4d:92:1b:25:ae:62:f3:18:bf:c8:50:a7:ab:
         55:e8:a5:b4:43:f0:bd:e5:4b:52:43:6e:66:43:80:15:f8:64:
         bf:ee:26:37:ec:65:42:ef:fa:f5:a8:1e:b7:44:f4:62:b4:cb:
         c1:10:aa:db:78:20:ed:2d:f8:99:c6:7f:7b:95:7e:a2:e6:90:
         1c:90:1b:c2:93:dd:f5:c5:e2:e5:2f:f5:7f:8d:59:c9:0b:0b:
         35:19:65:4e:ba:17:5a:f3:34:8c:2d:9b:7f:68:40:ab:a0:2e:
         49:a2:54:62:43:b0:4a:f7:7f:61:a2:7d:e1:9e:4a:3c:d6:c0:
         0b:79:e4:26
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDACzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
OTNkY2U2YzlkOTYwOTM2YjgwYzM2ODQ5NDA3ZjljZTQ0ZGY2ZjgwHhcNMjEwMzI0
MTQ0MjIwWhcNMjYwMzI0MTQ0MjIwWjAzMTEwLwYDVQQDEyhlZDJiZWUxMDk3OWFi
NzUwNThkZjRkNTIzYTBjZThlNjNkZTgxOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhVtQjxEDZyRDxX7oFgIqV9KGa2wuQH7sm4Cgq3pwXPFRJISV
fdG5SgJyRtGgrmVzcyxG+kiCS0lFwzeyg+fiDjXEv6NgNry+AVD2ud+0aQ4W67cM
GAuKcUi2Iq44fKiKQ55Rz2Y2sZ8Mr5jFlLd9R7mFUgBjq9dlDwsKKY5aJtZGLzSy
YC7wrRN0+Ji3DjrKfphUfJW4H6+2M8r/vZo+dR+HkjfdsZ5w56tNb12KMsKPf6UY
C9EtuZbjiW3YB1wLZwa2Hmi9XhSVe59DrBwJW/FxYanx05j3IC2DoUy0ywCvIbqP
cHmV5qfJXD5vntQhMAknHPYNxV9SquVEAdtAvwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPMY4QGjG7Sh2TArSj3gXHa37YfDMB8GA1UdIwQYMBaAFB1zQXgbvg7pjAdj
Gf2lgcwT3mYsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWU5M2Rj
ZTZjOWQ5NjA5MzZiODBjMzY4NDk0MDdmOWNlNDRkZjZmOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDVkZGEwODEtMTNkYi00MzFkLTgwMWMtODUxMTNj
MmVmOWIyL2VkMmJlZTEwOTc5YWI3NTA1OGRmNGQ1MjNhMGNlOGU2M2RlODE4YWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNWRkYTA4MS0xM2RiLTQzMWQtODAxYy04NTEx
M2MyZWY5YjIvNWU5M2RjZTZjOWQ5NjA5MzZiODBjMzY4NDk0MDdmOWNlNDRkZjZm
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDA2AwDQYJKoZIhvcNAQELBQADggEBAKlEvZvEg6ixiPLG
Sv+bNRO14NMs3WBMERfYvYKcpzvwvmiIJDvmGClwiQgdTwzT9EOV+vg2d+8kvdva
K3vSnKIyjGSgL7HN9dMs2VO7vv1u8ZE5Y4GRozHW49y7eHDnnjwFYyHJSEA/LQxR
fwm3zijJOER+Lw98+vQduAJJQQgk/jY9TZIbJa5i8xi/yFCnq1XopbRD8L3lS1JD
bmZDgBX4ZL/uJjfsZULv+vWoHrdE9GK0y8EQqtt4IO0t+JnGf3uVfqLmkByQG8KT
3fXF4uUv9X+NWckLCzUZZU66F1rzNIwtm39oQKugLkmiVGJDsEr3f2GifeGeSjzW
wAt55CY=
-----END CERTIFICATE-----