Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/319bdb1c986d1bec3b6bfc86c72fa5f3f6e4b5fc.roa
File:                     319bdb1c986d1bec3b6bfc86c72fa5f3f6e4b5fc.roa (raw, json)
Hash identifier:          UIo1XIdYyMu8qV93bmuAQWpq2LvTrc8HgI2mm73tGvY=
Subject key identifier:   34:3C:F1:94:B7:5C:00:96:65:0C:A5:F7:4C:DB:58:A1:1D:16:D2:45
Certificate issuer:       /CN=17e7a97de06776a354f146456ee6fb554ad676f2
Certificate serial:       028D
Authority key identifier: CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/319bdb1c986d1bec3b6bfc86c72fa5f3f6e4b5fc.roa
Signing time:             Tue 12 Apr 2022 18:21:09 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     272042
IP address blocks:        2803:ad10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e7a97de06776a354f146456ee6fb554ad676f2
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=319bdb1c986d1bec3b6bfc86c72fa5f3f6e4b5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:39:51:64:d7:cd:80:2e:48:8c:b0:7c:e0:
                    b7:6e:90:2e:63:48:de:b9:28:d5:db:fd:08:23:4d:
                    b6:b7:f9:8b:33:64:4a:df:8a:0c:e3:37:4e:bf:1f:
                    a1:9f:7d:ff:42:28:8a:63:55:f9:2e:92:ab:19:e0:
                    95:3e:8b:d1:7c:13:19:47:21:1a:03:04:be:90:e2:
                    56:19:5d:ff:7a:e1:c9:fe:39:fb:05:3b:ea:15:d5:
                    2f:c8:07:54:91:f7:3e:e8:ff:e0:4d:79:0b:f9:dc:
                    c3:ba:ab:df:38:83:55:a7:31:29:70:9b:3f:0a:0e:
                    7d:f2:69:b4:bb:02:42:44:aa:7b:26:77:c0:dd:c0:
                    42:0f:15:12:84:a6:f2:d5:44:c2:17:5a:7d:84:e6:
                    af:c3:06:18:20:5d:15:eb:5c:81:58:fe:56:20:59:
                    36:c9:0c:1d:80:d4:26:e8:fa:de:5e:e9:c6:73:33:
                    c1:ce:28:91:b6:4c:b7:43:d6:b3:cb:62:05:b0:f3:
                    00:81:0c:e0:12:c0:05:85:4d:d0:f4:59:1e:b6:15:
                    3e:10:ff:d7:e7:7c:24:69:08:c9:fd:86:81:e0:82:
                    68:44:23:03:09:eb:c7:80:94:d5:28:f2:11:83:48:
                    58:29:9c:c8:4f:5f:a1:4c:1c:83:31:6a:ec:77:9d:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:F1:94:B7:5C:00:96:65:0C:A5:F7:4C:DB:58:A1:1D:16:D2:45
            X509v3 Authority Key Identifier:
                keyid:CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/319bdb1c986d1bec3b6bfc86c72fa5f3f6e4b5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/17e7a97de06776a354f146456ee6fb554ad676f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad10::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:b8:62:bb:5c:54:d7:be:50:c6:ae:31:09:62:cb:41:10:
         8c:c4:44:a6:39:84:20:61:d6:71:db:12:29:15:16:3b:28:ac:
         4c:79:cd:23:7b:dd:bc:60:84:43:e5:31:25:c8:27:4c:17:35:
         60:74:74:3e:41:80:ac:30:13:0d:08:4a:fb:ad:86:07:b4:c8:
         b1:2a:13:03:44:56:7b:b5:d6:82:d0:86:0a:22:25:64:1d:c4:
         d6:b5:cf:48:fc:7b:6e:16:de:88:ce:53:be:b7:c3:94:12:5b:
         e5:23:e2:98:31:38:46:9a:2e:cf:2a:85:36:d0:93:47:88:3e:
         2e:25:8c:7c:e3:48:67:72:ab:5a:4f:c7:4e:a4:8a:1e:66:a6:
         1b:22:a8:cf:80:f8:2c:74:83:44:00:e8:2c:73:59:05:67:f9:
         ee:ce:d6:8c:6c:57:b3:22:ab:41:1e:64:7f:1c:e6:70:ea:bd:
         0b:2e:ac:9c:c6:0f:90:74:4c:bf:d4:bc:bc:34:61:8a:05:f2:
         d6:0f:77:6f:7a:c3:42:d7:cb:f1:78:aa:4a:92:76:39:8d:e9:
         35:0f:c8:c0:13:69:60:8c:c3:ab:0f:59:72:27:2d:37:bb:ec:
         3e:46:8b:17:2c:80:b8:44:98:6e:6a:99:50:3e:12:ae:7c:68:
         07:8e:05:49
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTdl
N2E5N2RlMDY3NzZhMzU0ZjE0NjQ1NmVlNmZiNTU0YWQ2NzZmMjAeFw0yMjA0MTIw
MzAwMDBaFw0yNDA0MTIwMzAwMDBaMDMxMTAvBgNVBAMTKDMxOWJkYjFjOTg2ZDFi
ZWMzYjZiZmM4NmM3MmZhNWYzZjZlNGI1ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQConTlRZNfNgC5IjLB84LdukC5jSN65KNXb/QgjTba3+YszZErf
igzjN06/H6Gfff9CKIpjVfkukqsZ4JU+i9F8ExlHIRoDBL6Q4lYZXf964cn+OfsF
O+oV1S/IB1SR9z7o/+BNeQv53MO6q984g1WnMSlwmz8KDn3yabS7AkJEqnsmd8Dd
wEIPFRKEpvLVRMIXWn2E5q/DBhggXRXrXIFY/lYgWTbJDB2A1Cbo+t5e6cZzM8HO
KJG2TLdD1rPLYgWw8wCBDOASwAWFTdD0WR62FT4Q/9fnfCRpCMn9hoHggmhEIwMJ
68eAlNUo8hGDSFgpnMhPX6FMHIMxaux3nQzRAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUNDzxlLdcAJZlDKX3TNtYoR0W0kUwHwYDVR0jBBgwFoAUzk+bd0CRm5yWZuDe
9VHw0mJqMQ4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xN2U3YTk3
ZGUwNjc3NmEzNTRmMTQ2NDU2ZWU2ZmI1NTRhZDY3NmYyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8xMGI4NzcxZi1mYjkzLTQyYWUtYWJkZC0xZGJmODg3
ZWYxZDEvMzE5YmRiMWM5ODZkMWJlYzNiNmJmYzg2YzcyZmE1ZjNmNmU0YjVmYy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzEwYjg3NzFmLWZiOTMtNDJhZS1hYmRkLTFkYmY4
ODdlZjFkMS8xN2U3YTk3ZGUwNjc3NmEzNTRmMTQ2NDU2ZWU2ZmI1NTRhZDY3NmYy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAOtEDANBgkqhkiG9w0BAQsFAAOCAQEAOPa4YrtcVNe+UMau
MQliy0EQjMREpjmEIGHWcdsSKRUWOyisTHnNI3vdvGCEQ+UxJcgnTBc1YHR0PkGA
rDATDQhK+62GB7TIsSoTA0RWe7XWgtCGCiIlZB3E1rXPSPx7bhbeiM5TvrfDlBJb
5SPimDE4RpouzyqFNtCTR4g+LiWMfONIZ3KrWk/HTqSKHmamGyKoz4D4LHSDRADo
LHNZBWf57s7WjGxXsyKrQR5kfxzmcOq9Cy6snMYPkHRMv9S8vDRhigXy1g93b3rD
QtfL8XiqSpJ2OY3pNQ/IwBNpYIzDqw9ZcictN7vsPkaLFyyAuESYbmqZUD4Srnxo
B44FSQ==
-----END CERTIFICATE-----