Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/2915a64db65db3f559d7f8d4f467e33796ace009.roa
File:                     2915a64db65db3f559d7f8d4f467e33796ace009.roa (raw, json)
Hash identifier:          He55/eWAgu9G718f0s0CDrk9wccgOoNBagw9CVo3Ol8=
Subject key identifier:   C6:AD:F4:17:1B:58:47:AB:41:4E:2F:8B:9C:CA:FE:00:57:DF:2A:4A
Certificate issuer:       /CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
Certificate serial:       0D815B
Authority key identifier: 71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/2915a64db65db3f559d7f8d4f467e33796ace009.roa
Signing time:             Wed 24 Mar 2021 14:40:16 +0000
ROA not before:           Wed 24 Mar 2021 14:40:16 +0000
ROA not after:            Tue 24 Mar 2026 14:40:16 +0000
asID:                     265787
IP address blocks:        2803:bfc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885083 (0xd815b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
        Validity
            Not Before: Mar 24 14:40:16 2021 GMT
            Not After : Mar 24 14:40:16 2026 GMT
        Subject: CN=2915a64db65db3f559d7f8d4f467e33796ace009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:cf:e4:2e:9f:1e:dd:2c:58:7b:20:95:f8:
                    95:20:eb:e2:0d:27:60:55:2c:8e:ec:ea:c5:39:21:
                    7e:3b:53:c5:4b:41:b6:e4:60:5d:c0:9e:c9:da:35:
                    05:66:f6:62:0d:bd:5e:46:fd:ba:82:49:b3:06:ca:
                    37:e0:02:cf:2f:44:87:a6:6f:c8:4a:ed:7f:c8:ba:
                    72:dd:a4:86:93:ba:d9:69:2a:99:0d:31:1b:f6:d7:
                    37:d8:cc:10:9e:4f:56:ae:d0:c2:35:32:c2:a4:34:
                    d1:03:54:d5:3a:14:a8:7c:3c:cd:32:15:91:e8:89:
                    b9:94:32:84:52:3c:9e:27:63:5b:a1:b7:33:d4:96:
                    60:b7:db:52:ad:8f:4d:93:9b:27:13:6e:2d:26:15:
                    5b:0c:ea:4e:7a:40:a6:d7:2f:fd:bd:db:ab:03:e2:
                    a6:bf:61:e1:b8:ef:a9:19:53:bf:55:c2:26:66:b1:
                    96:f2:4b:13:89:e7:63:9d:c3:8f:1a:27:dd:bc:a2:
                    be:00:97:fb:3f:2c:58:4f:14:db:57:d2:8e:0e:95:
                    12:19:70:d0:d8:3c:96:e8:75:62:10:22:50:40:d7:
                    48:1c:1f:35:08:8c:5d:8c:44:76:22:f7:e1:5d:15:
                    8f:c4:51:83:d5:81:fc:15:d3:f4:12:ad:e0:21:2f:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AD:F4:17:1B:58:47:AB:41:4E:2F:8B:9C:CA:FE:00:57:DF:2A:4A
            X509v3 Authority Key Identifier:
                keyid:71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/2915a64db65db3f559d7f8d4f467e33796ace009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:65:e1:a1:c3:09:4a:d6:12:06:e3:60:c6:a0:af:68:58:
         79:ee:74:8f:f4:07:bc:62:ad:66:69:ad:2b:c1:62:dd:6d:df:
         a6:de:3c:d4:93:91:d2:5f:8f:d0:09:2b:98:d7:86:17:c7:ff:
         6a:99:e6:58:fa:bf:71:e5:00:ca:5e:25:33:0b:2d:2e:1f:93:
         0e:75:a6:2f:73:3a:97:a8:0d:18:0d:47:92:1f:1d:75:a4:4b:
         24:ad:8e:b2:74:27:7b:f0:30:d4:c4:7d:e6:61:18:18:ab:0f:
         f3:81:4a:a4:08:e8:bb:f3:28:f5:d7:fc:69:41:ca:1c:da:a0:
         e2:b8:94:42:23:d9:2f:bf:48:36:6b:96:67:35:32:ac:48:2e:
         d1:19:68:c7:c8:71:7b:fe:2b:9d:86:5b:fa:99:75:5d:b5:e8:
         ea:6a:cd:43:5e:4a:3c:19:04:d1:66:46:d2:35:e4:71:8e:ca:
         d6:4f:5a:80:2b:0d:3e:3e:59:53:b3:ae:34:bb:be:ee:ee:b6:
         28:21:63:96:3d:36:bf:b1:7c:6e:67:65:bd:4d:bb:ed:5a:ff:
         62:da:0d:ad:31:a5:23:38:38:f5:28:9c:79:ca:45:e7:a7:a7:
         1c:e6:14:e8:0d:c7:2a:06:a0:01:c2:ce:b3:e3:ef:0d:81:e7:
         dd:ee:2c:62
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDYFbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM4
YTdhMTI0MmUxNzJhNDFjOTQ4MzRiZWZhMmVhMWU4MTc5YWJmNjgwHhcNMjEwMzI0
MTQ0MDE2WhcNMjYwMzI0MTQ0MDE2WjAzMTEwLwYDVQQDEygyOTE1YTY0ZGI2NWRi
M2Y1NTlkN2Y4ZDRmNDY3ZTMzNzk2YWNlMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgJrP5C6fHt0sWHsglfiVIOviDSdgVSyO7OrFOSF+O1PFS0G2
5GBdwJ7J2jUFZvZiDb1eRv26gkmzBso34ALPL0SHpm/ISu1/yLpy3aSGk7rZaSqZ
DTEb9tc32MwQnk9WrtDCNTLCpDTRA1TVOhSofDzNMhWR6Im5lDKEUjyeJ2Nbobcz
1JZgt9tSrY9Nk5snE24tJhVbDOpOekCm1y/9vdurA+Kmv2HhuO+pGVO/VcImZrGW
8ksTiedjncOPGifdvKK+AJf7PyxYTxTbV9KODpUSGXDQ2DyW6HViECJQQNdIHB81
CIxdjER2IvfhXRWPxFGD1YH8FdP0Eq3gIS+jxQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMat9BcbWEerQU4vi5zK/gBX3ypKMB8GA1UdIwQYMBaAFHGr0YGZfInSOsBZ
Z3rJXN0QEjl2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzhhN2Ex
MjQyZTE3MmE0MWM5NDgzNGJlZmEyZWExZTgxNzlhYmY2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNhMGQ3ZDgtZTRiZi00MGFiLTlhN2UtNjFmNWQy
NTRmOWM5LzI5MTVhNjRkYjY1ZGIzZjU1OWQ3ZjhkNGY0NjdlMzM3OTZhY2UwMDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2EwZDdkOC1lNGJmLTQwYWItOWE3ZS02MWY1
ZDI1NGY5YzkvYzhhN2ExMjQyZTE3MmE0MWM5NDgzNGJlZmEyZWExZTgxNzlhYmY2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDv8AwDQYJKoZIhvcNAQELBQADggEBACu9ZeGhwwlK1hIG
42DGoK9oWHnudI/0B7xirWZprSvBYt1t36bePNSTkdJfj9AJK5jXhhfH/2qZ5lj6
v3HlAMpeJTMLLS4fkw51pi9zOpeoDRgNR5IfHXWkSyStjrJ0J3vwMNTEfeZhGBir
D/OBSqQI6LvzKPXX/GlByhzaoOK4lEIj2S+/SDZrlmc1MqxILtEZaMfIcXv+K52G
W/qZdV216OpqzUNeSjwZBNFmRtI15HGOytZPWoArDT4+WVOzrjS7vu7utighY5Y9
Nr+xfG5nZb1Nu+1a/2LaDa0xpSM4OPUonHnKReenpxzmFOgNxyoGoAHCzrPj7w2B
593uLGI=
-----END CERTIFICATE-----