Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/e4bea4a6a3f5a9e8b46af99648dcc6876f58b62f.roa
File:                     e4bea4a6a3f5a9e8b46af99648dcc6876f58b62f.roa (raw, json)
Hash identifier:          uIod3zfgGgVFGVzAz+1B7DkWdYvVcAbvESDUVSxNa/4=
Subject key identifier:   35:4B:62:73:DF:79:FA:DD:31:B0:63:EB:3B:92:A4:3D:A0:BB:46:0E
Certificate issuer:       /CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
Certificate serial:       0D6E88
Authority key identifier: 73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/e4bea4a6a3f5a9e8b46af99648dcc6876f58b62f.roa
Signing time:             Wed 24 Mar 2021 14:40:21 +0000
ROA not before:           Wed 24 Mar 2021 14:40:21 +0000
ROA not after:            Tue 24 Mar 2026 14:40:21 +0000
asID:                     264668
IP address blocks:        2803:bbc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880264 (0xd6e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
        Validity
            Not Before: Mar 24 14:40:21 2021 GMT
            Not After : Mar 24 14:40:21 2026 GMT
        Subject: CN=e4bea4a6a3f5a9e8b46af99648dcc6876f58b62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:de:45:73:55:96:15:59:c7:b5:71:28:23:
                    88:fe:1b:23:4b:99:d5:bb:8d:1f:03:c7:e1:6d:1b:
                    6c:c8:0a:62:0e:98:90:ad:a0:21:fb:16:c1:db:d2:
                    46:e3:fe:aa:a8:3e:69:2e:a8:1c:ce:63:03:9a:aa:
                    34:04:71:79:8c:dc:16:b4:c5:49:30:37:3d:be:30:
                    1a:56:9d:bc:32:06:6b:90:fb:8e:2e:7f:ee:81:7a:
                    d5:36:4d:8b:2c:65:66:b5:89:28:9f:c5:da:0a:38:
                    ad:01:4d:7d:fc:c4:5c:88:8a:fd:c7:0e:29:a3:81:
                    43:bd:a1:e0:1c:c8:f6:6e:ec:81:bb:c6:62:9d:07:
                    b3:c3:1a:e7:79:96:6d:02:66:57:c3:55:95:bf:0a:
                    d4:17:e6:bd:5a:00:ba:b2:0c:ff:66:2f:7b:c1:76:
                    2d:8f:fe:1c:83:90:13:45:17:d0:f0:72:11:d5:47:
                    49:fb:33:14:4a:f0:c2:6b:c0:57:51:6b:14:de:10:
                    a1:7a:a1:44:42:cf:b3:b8:ef:97:34:1d:27:2b:55:
                    8a:00:6a:af:44:50:5e:c2:7b:f8:0f:8f:ea:fb:1b:
                    ba:f1:f2:ad:28:6c:74:1b:15:5f:ba:d2:e0:85:f6:
                    dc:44:e4:e5:e1:2e:4a:67:b7:a9:58:96:cb:c1:94:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:62:73:DF:79:FA:DD:31:B0:63:EB:3B:92:A4:3D:A0:BB:46:0E
            X509v3 Authority Key Identifier:
                keyid:73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/e4bea4a6a3f5a9e8b46af99648dcc6876f58b62f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:84:52:2a:e1:67:ab:7f:96:bb:70:21:02:81:b3:65:81:ef:
         36:1e:6d:e1:12:44:ee:d4:bd:68:78:67:ec:b8:f7:81:e2:b8:
         a2:0e:2c:59:90:0d:6d:b4:0d:23:0f:a0:50:8c:32:8a:f6:bb:
         06:e2:a6:da:4a:94:ca:9a:34:d7:de:be:be:39:a0:42:6c:bb:
         5d:90:35:12:ff:ab:56:5c:fd:d4:a3:f3:88:61:72:9a:33:8b:
         78:fe:30:13:79:27:91:0f:b7:0b:57:7b:ab:8e:10:bd:7f:39:
         62:a7:1d:9e:ef:b0:60:78:57:cf:67:29:8f:54:81:80:4f:7b:
         7f:b7:a1:a0:df:7e:ab:00:fb:c6:0c:c6:27:98:a2:99:cc:28:
         4c:b4:46:c9:7f:1a:38:4f:5d:84:df:58:68:4d:36:0c:0e:ef:
         51:c1:e0:b3:e5:4c:34:aa:ea:9f:35:5c:06:24:a8:b7:de:93:
         99:fa:f7:36:69:42:2e:09:f3:21:9f:9d:b1:6e:6a:af:ed:56:
         81:c2:cd:f2:34:b4:5b:e3:35:86:88:bd:7b:f3:d4:98:ca:9f:
         d0:8d:71:f3:4c:3b:a8:ee:60:c4:e6:b7:93:6f:dd:9c:61:fe:
         92:e2:bf:e9:4b:06:1a:c8:b9:44:b7:ff:1d:85:7d:90:3d:eb:
         09:bd:15:d3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDW6IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0
MTI4NzA3ZjZjNGQ2YTFlMjMwYWE2M2ZmNWQyMzc4ZTZlZjhiNjQwHhcNMjEwMzI0
MTQ0MDIxWhcNMjYwMzI0MTQ0MDIxWjAzMTEwLwYDVQQDEyhlNGJlYTRhNmEzZjVh
OWU4YjQ2YWY5OTY0OGRjYzY4NzZmNThiNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArXjeRXNVlhVZx7VxKCOI/hsjS5nVu40fA8fhbRtsyApiDpiQ
raAh+xbB29JG4/6qqD5pLqgczmMDmqo0BHF5jNwWtMVJMDc9vjAaVp28MgZrkPuO
Ln/ugXrVNk2LLGVmtYkon8XaCjitAU19/MRciIr9xw4po4FDvaHgHMj2buyBu8Zi
nQezwxrneZZtAmZXw1WVvwrUF+a9WgC6sgz/Zi97wXYtj/4cg5ATRRfQ8HIR1UdJ
+zMUSvDCa8BXUWsU3hCheqFEQs+zuO+XNB0nK1WKAGqvRFBewnv4D4/q+xu68fKt
KGx0GxVfutLghfbcROTl4S5KZ7epWJbLwZTi4QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDVLYnPfefrdMbBj6zuSpD2gu0YOMB8GA1UdIwQYMBaAFHNxk/+D9eQrRiFc
Q6VhhPRnvohoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDQxMjg3
MDdmNmM0ZDZhMWUyMzBhYTYzZmY1ZDIzNzhlNmVmOGI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWFjMzM4ODctYjZkMS00YzQzLTkwNWQtMTIzY2Uz
YzEyNDkxL2U0YmVhNGE2YTNmNWE5ZThiNDZhZjk5NjQ4ZGNjNjg3NmY1OGI2MmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYWMzMzg4Ny1iNmQxLTRjNDMtOTA1ZC0xMjNj
ZTNjMTI0OTEvMDQxMjg3MDdmNmM0ZDZhMWUyMzBhYTYzZmY1ZDIzNzhlNmVmOGI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDu8AwDQYJKoZIhvcNAQELBQADggEBAGSEUirhZ6t/lrtw
IQKBs2WB7zYebeESRO7UvWh4Z+y494HiuKIOLFmQDW20DSMPoFCMMor2uwbiptpK
lMqaNNfevr45oEJsu12QNRL/q1Zc/dSj84hhcpozi3j+MBN5J5EPtwtXe6uOEL1/
OWKnHZ7vsGB4V89nKY9UgYBPe3+3oaDffqsA+8YMxieYopnMKEy0Rsl/GjhPXYTf
WGhNNgwO71HB4LPlTDSq6p81XAYkqLfek5n69zZpQi4J8yGfnbFuaq/tVoHCzfI0
tFvjNYaIvXvz1JjKn9CNcfNMO6juYMTmt5Nv3Zxh/pLiv+lLBhrIuUS3/x2FfZA9
6wm9FdM=
-----END CERTIFICATE-----