Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/e2ab3d23757b7195ce566fba7656bd4e8cdc91f6.roa
File:                     e2ab3d23757b7195ce566fba7656bd4e8cdc91f6.roa (raw, json)
Hash identifier:          IjlRm2rr/tzoXYIIW104PVE3UO3QR0rmzevDfEVCtAw=
Subject key identifier:   79:3D:3D:78:6C:6A:85:70:5B:E8:54:8B:7F:83:74:BF:4F:EE:17:42
Certificate issuer:       /CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
Certificate serial:       0D6A46
Authority key identifier: 81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/e2ab3d23757b7195ce566fba7656bd4e8cdc91f6.roa
Signing time:             Wed 24 Mar 2021 14:48:14 +0000
ROA not before:           Wed 24 Mar 2021 14:48:13 +0000
ROA not after:            Tue 24 Mar 2026 14:48:13 +0000
asID:                     265641
IP address blocks:        2803:6f40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879174 (0xd6a46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
        Validity
            Not Before: Mar 24 14:48:13 2021 GMT
            Not After : Mar 24 14:48:13 2026 GMT
        Subject: CN=e2ab3d23757b7195ce566fba7656bd4e8cdc91f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:09:2e:97:c9:b0:97:8d:e2:c1:a3:03:f4:
                    5a:cd:11:e2:53:24:de:f8:6d:7f:56:9b:b9:60:c3:
                    4e:50:6a:a1:f5:3a:6d:8b:27:43:22:7c:6a:c1:3f:
                    15:df:56:85:ad:41:30:05:42:c6:80:1f:80:d6:55:
                    cf:05:95:a5:c4:8b:a7:18:e4:3d:d2:48:e8:8d:1e:
                    93:b3:4a:03:1c:b2:80:d0:cb:82:99:db:7c:a1:87:
                    52:fc:60:62:75:45:d3:98:8c:7c:9b:d2:09:de:84:
                    1e:80:06:01:65:9b:5d:5a:bf:5b:2a:a3:cb:f0:3d:
                    1f:d2:64:80:b1:9b:01:56:5a:70:7d:e5:60:ea:71:
                    bd:17:3d:ac:44:ea:a3:f6:36:99:6b:2d:b0:ce:42:
                    8e:97:5c:82:93:eb:89:ef:fe:a8:3d:f1:45:d0:95:
                    97:c7:b2:f5:73:28:7e:74:37:66:87:89:ea:e8:87:
                    e5:ae:03:e9:5b:b7:1c:9e:a5:89:bf:43:8b:5e:09:
                    fd:b2:18:8d:57:53:df:53:8b:d1:18:c0:f8:e1:07:
                    03:6c:81:89:13:87:69:45:63:a4:68:c6:fb:ca:a2:
                    71:84:3b:44:14:8b:25:72:aa:63:e5:cf:86:4f:84:
                    b4:99:60:82:6f:77:85:ac:21:9f:28:71:85:ab:75:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3D:3D:78:6C:6A:85:70:5B:E8:54:8B:7F:83:74:BF:4F:EE:17:42
            X509v3 Authority Key Identifier:
                keyid:81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/e2ab3d23757b7195ce566fba7656bd4e8cdc91f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:0e:f2:bd:6b:3c:24:c3:59:1b:b8:99:3e:f3:5c:29:fb:1e:
         be:3b:af:d1:47:ca:75:ed:54:1a:0a:c2:47:43:84:8f:d7:b2:
         47:af:db:20:67:46:2d:46:65:70:e3:8c:b0:63:d3:d7:d1:0c:
         28:05:ea:3e:51:4a:a6:07:00:23:85:d0:18:41:3d:b4:f9:45:
         b8:86:ac:a3:5d:c5:19:11:4a:6d:87:95:87:04:2f:dd:67:f9:
         c7:7e:71:30:64:41:36:75:b3:40:67:2e:c1:d5:44:c0:3c:05:
         fb:55:ff:36:fd:83:c2:03:a4:20:2e:0a:09:af:e9:52:1e:3b:
         4e:03:04:81:94:9a:4f:fe:01:d7:61:d5:03:6c:0d:96:04:2c:
         f2:b3:6e:7e:bd:02:e4:b5:f7:0c:0f:f3:e9:48:ba:2b:48:bd:
         01:e2:87:2c:48:be:f1:67:9e:ae:ac:73:a5:7d:fb:a6:df:1e:
         e0:cd:4b:cd:b8:19:c3:2a:e7:2b:a4:c1:33:6c:28:f8:91:82:
         8a:70:ea:31:52:e3:fc:c7:29:59:1c:09:72:99:bb:1c:49:6d:
         6b:ab:50:bb:5a:3f:d4:7d:2a:42:e9:7b:76:18:a8:8b:18:49:
         a6:81:24:08:65:b3:2e:03:e6:4b:84:11:c4:f1:c6:d6:b1:c6:
         46:b9:9b:4d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDWpGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMw
MzM2ZTUxZjU5YjNlYjRjOGZkY2Q2Njk3M2RhOWVhZWZjZWY0NDYwHhcNMjEwMzI0
MTQ0ODEzWhcNMjYwMzI0MTQ0ODEzWjAzMTEwLwYDVQQDEyhlMmFiM2QyMzc1N2I3
MTk1Y2U1NjZmYmE3NjU2YmQ0ZThjZGM5MWY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsjMJLpfJsJeN4sGjA/RazRHiUyTe+G1/Vpu5YMNOUGqh9Tpt
iydDInxqwT8V31aFrUEwBULGgB+A1lXPBZWlxIunGOQ90kjojR6Ts0oDHLKA0MuC
mdt8oYdS/GBidUXTmIx8m9IJ3oQegAYBZZtdWr9bKqPL8D0f0mSAsZsBVlpwfeVg
6nG9Fz2sROqj9jaZay2wzkKOl1yCk+uJ7/6oPfFF0JWXx7L1cyh+dDdmh4nq6Ifl
rgPpW7ccnqWJv0OLXgn9shiNV1PfU4vRGMD44QcDbIGJE4dpRWOkaMb7yqJxhDtE
FIslcqpj5c+GT4S0mWCCb3eFrCGfKHGFq3X3FQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHk9PXhsaoVwW+hUi3+DdL9P7hdCMB8GA1UdIwQYMBaAFIGiWhzlq1TufZ5i
BpLMx7mKT+pQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzAzMzZl
NTFmNTliM2ViNGM4ZmRjZDY2OTczZGE5ZWFlZmNlZjQ0Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWIwYmI5MzktZmM3Zi00NjUzLTkxY2MtMDMzNjkx
Zjc3MTdlL2UyYWIzZDIzNzU3YjcxOTVjZTU2NmZiYTc2NTZiZDRlOGNkYzkxZjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYjBiYjkzOS1mYzdmLTQ2NTMtOTFjYy0wMzM2
OTFmNzcxN2UvYzAzMzZlNTFmNTliM2ViNGM4ZmRjZDY2OTczZGE5ZWFlZmNlZjQ0
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDb0AwDQYJKoZIhvcNAQELBQADggEBAHkO8r1rPCTDWRu4
mT7zXCn7Hr47r9FHynXtVBoKwkdDhI/Xskev2yBnRi1GZXDjjLBj09fRDCgF6j5R
SqYHACOF0BhBPbT5RbiGrKNdxRkRSm2HlYcEL91n+cd+cTBkQTZ1s0BnLsHVRMA8
BftV/zb9g8IDpCAuCgmv6VIeO04DBIGUmk/+Addh1QNsDZYELPKzbn69AuS19wwP
8+lIuitIvQHihyxIvvFnnq6sc6V9+6bfHuDNS824GcMq5yukwTNsKPiRgopw6jFS
4/zHKVkcCXKZuxxJbWurULtaP9R9KkLpe3YYqIsYSaaBJAhlsy4D5kuEEcTxxtax
xka5m00=
-----END CERTIFICATE-----