Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/c89f05c76728ca674eee4d70b2c968672b341f79.roa
File:                     c89f05c76728ca674eee4d70b2c968672b341f79.roa (raw, json)
Hash identifier:          JRMyCA4tlQNipiF9ts4W3Zsw8NtcT98Wa1WlZba9gbg=
Subject key identifier:   B6:F1:50:D8:A5:74:E5:20:05:97:63:93:3D:5D:7F:D6:A7:2A:AA:4B
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E1E6D
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/c89f05c76728ca674eee4d70b2c968672b341f79.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     26105
IP address blocks:        2803:600::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925293 (0xe1e6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=c89f05c76728ca674eee4d70b2c968672b341f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:ae:65:57:38:b3:17:e2:54:ec:cb:f8:ca:
                    92:b9:04:8f:3d:64:fc:87:d4:f0:92:df:26:70:be:
                    99:b4:44:c5:94:24:dd:4e:04:73:dc:c2:ed:b3:f3:
                    32:61:b4:73:1f:cb:49:67:24:e8:97:4c:47:76:3a:
                    52:90:78:8c:37:56:d1:8d:9f:91:a0:aa:a2:c0:90:
                    48:57:2d:58:bf:a8:dc:a1:b3:22:6f:8d:6d:77:db:
                    18:c6:5b:63:17:62:64:e5:e0:62:de:2c:e6:e1:c9:
                    35:e1:97:37:93:e0:c1:cc:d0:3e:ad:5d:f2:0b:6f:
                    94:1b:4f:9c:39:07:a0:3b:70:f2:5f:b2:30:84:c5:
                    f0:f3:54:f3:35:57:cd:4c:b3:d8:b9:88:16:41:6c:
                    58:b1:5c:3e:3d:da:9c:8e:65:38:75:93:f8:96:15:
                    f5:7b:96:1b:ef:ba:9c:de:a5:a1:2b:c9:cb:f7:87:
                    e1:a2:99:0c:10:e6:c6:1e:c8:b2:56:5a:12:5a:ac:
                    31:86:d3:7e:4d:6f:b3:96:e1:ba:19:67:78:38:33:
                    99:9d:21:08:f2:64:62:7f:23:64:26:63:2c:df:05:
                    ec:bc:d9:76:4d:56:45:83:3b:f4:79:14:b5:6d:3e:
                    52:98:cc:5e:17:fd:97:74:6d:ef:4f:53:a2:bc:15:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F1:50:D8:A5:74:E5:20:05:97:63:93:3D:5D:7F:D6:A7:2A:AA:4B
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/c89f05c76728ca674eee4d70b2c968672b341f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:bb:d4:d5:82:0a:b1:3e:3b:6b:19:65:70:af:bf:e9:87:
         4a:61:1b:c4:45:96:b4:a6:0f:99:1c:d4:8c:9b:c9:0a:ec:50:
         91:51:29:2f:95:96:41:2d:d5:ca:ab:44:c1:10:15:f6:74:95:
         84:1b:74:58:87:4a:7e:92:97:ac:f3:57:ed:94:63:cd:cd:7e:
         73:a8:75:26:b1:ae:ad:d7:61:6f:a7:5a:25:a6:fa:cb:ff:82:
         19:b8:56:dd:a5:18:82:6a:5c:5c:85:1b:92:b2:4c:29:01:64:
         5b:c0:d2:55:ad:17:79:75:e7:c8:cd:61:9f:81:da:fc:68:b1:
         25:cb:b1:5c:0a:4b:25:12:13:59:a0:b5:2a:4b:50:75:c9:87:
         77:fc:06:6d:5c:81:31:0d:1f:02:0d:53:96:08:de:95:b8:d3:
         c2:09:1a:c1:3b:4e:e7:b2:60:4e:17:9c:c4:0f:7e:de:ff:a8:
         56:cf:3b:71:fc:27:be:ad:bf:12:a4:03:18:4c:1c:73:4b:2e:
         2a:16:dc:e0:44:3d:56:81:61:87:a0:f7:e4:0e:6d:a5:05:65:
         3a:f5:7e:f2:4f:e9:10:69:41:6b:02:c1:ac:4c:9a:d2:b8:15:
         b7:a3:42:2f:59:02:0f:89:c4:96:20:0a:06:bc:10:ce:d4:26:
         31:14:2d:80
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDh5tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjEwMzI0
MTQ0NTA5WhcNMjYwMzI0MTQ0NTA5WjAzMTEwLwYDVQQDEyhjODlmMDVjNzY3Mjhj
YTY3NGVlZTRkNzBiMmM5Njg2NzJiMzQxZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj4yuZVc4sxfiVOzL+MqSuQSPPWT8h9Twkt8mcL6ZtETFlCTd
TgRz3MLts/MyYbRzH8tJZyTol0xHdjpSkHiMN1bRjZ+RoKqiwJBIVy1Yv6jcobMi
b41td9sYxltjF2Jk5eBi3izm4ck14Zc3k+DBzNA+rV3yC2+UG0+cOQegO3DyX7Iw
hMXw81TzNVfNTLPYuYgWQWxYsVw+PdqcjmU4dZP4lhX1e5Yb77qc3qWhK8nL94fh
opkMEObGHsiyVloSWqwxhtN+TW+zluG6GWd4ODOZnSEI8mRifyNkJmMs3wXsvNl2
TVZFgzv0eRS1bT5SmMxeF/2XdG3vT1OivBXwLQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFLbxUNildOUgBZdjkz1df9anKqpLMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwL2M4OWYwNWM3NjcyOGNhNjc0ZWVlNGQ3MGIyYzk2ODY3MmIzNDFmNzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDBgAwDQYJKoZIhvcNAQELBQADggEBAGtYu9TVggqxPjtr
GWVwr7/ph0phG8RFlrSmD5kc1IybyQrsUJFRKS+VlkEt1cqrRMEQFfZ0lYQbdFiH
Sn6Sl6zzV+2UY83NfnOodSaxrq3XYW+nWiWm+sv/ghm4Vt2lGIJqXFyFG5KyTCkB
ZFvA0lWtF3l158jNYZ+B2vxosSXLsVwKSyUSE1mgtSpLUHXJh3f8Bm1cgTENHwIN
U5YI3pW408IJGsE7TueyYE4XnMQPft7/qFbPO3H8J76tvxKkAxhMHHNLLioW3OBE
PVaBYYeg9+QObaUFZTr1fvJP6RBpQWsCwaxMmtK4FbejQi9ZAg+JxJYgCga8EM7U
JjEULYA=
-----END CERTIFICATE-----