Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/37564d3a57fdcefcdbef9a2f872589e1003de4dc.roa
File:                     37564d3a57fdcefcdbef9a2f872589e1003de4dc.roa (raw, json)
Hash identifier:          ABHnej2VKNhJa2XLo16njJhN8WNbhFNV/43LlthXyDc=
Subject key identifier:   7D:56:15:0F:D5:0C:3C:86:F4:C5:F6:85:65:52:C3:CE:04:2F:CD:7B
Certificate issuer:       /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial:       0CFB4A
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/37564d3a57fdcefcdbef9a2f872589e1003de4dc.roa
Signing time:             Wed 24 Mar 2021 14:35:05 +0000
ROA not before:           Wed 24 Mar 2021 14:35:05 +0000
ROA not after:            Tue 24 Mar 2026 14:35:05 +0000
asID:                     262928
IP address blocks:        2803:2a80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850762 (0xcfb4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
        Validity
            Not Before: Mar 24 14:35:05 2021 GMT
            Not After : Mar 24 14:35:05 2026 GMT
        Subject: CN=37564d3a57fdcefcdbef9a2f872589e1003de4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:38:0d:93:fb:bf:e5:d5:48:2b:aa:90:d8:77:
                    2b:b8:1f:60:b2:bd:d7:e6:20:34:df:35:9b:89:f1:
                    9b:da:27:23:2b:17:76:52:6c:87:3b:ca:88:09:4a:
                    0b:53:72:13:00:ba:eb:47:84:4f:9b:5e:cc:0b:6b:
                    b2:97:5b:b1:d3:a3:4b:e2:4f:2d:b0:d6:13:4d:86:
                    82:f2:55:18:d4:43:62:33:2f:20:1c:ea:8c:8e:9c:
                    b1:dd:64:2e:fe:92:60:b0:3f:2f:d8:93:f8:23:e2:
                    9f:b4:26:67:5d:4c:64:ea:9d:a6:69:32:92:d0:39:
                    65:cb:5f:a6:ce:cb:a3:3d:a7:50:ec:4b:90:a1:21:
                    1d:90:6f:ce:88:c2:50:74:f9:78:f9:cb:6d:7b:32:
                    ac:7d:16:7a:01:c7:d8:15:bf:af:b5:31:3f:a6:81:
                    04:5d:b9:39:65:5d:ae:3d:fe:3a:71:b5:eb:dd:4f:
                    6a:fc:bd:d8:3e:21:9f:88:ba:c5:38:ad:cb:c4:ee:
                    bc:7c:61:24:93:2e:13:78:95:07:83:58:53:ad:e9:
                    8a:7c:d8:61:b7:43:00:9a:3a:e1:5a:f2:b2:6a:73:
                    2a:4a:fb:6d:01:5d:29:32:97:ac:5d:85:1f:d1:16:
                    44:1b:b5:41:a1:84:d5:c6:ed:cb:1d:e0:6e:33:0b:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:15:0F:D5:0C:3C:86:F4:C5:F6:85:65:52:C3:CE:04:2F:CD:7B
            X509v3 Authority Key Identifier:
                keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/37564d3a57fdcefcdbef9a2f872589e1003de4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:07:5a:af:5a:91:67:99:f5:b2:14:b0:22:b0:28:12:f3:9a:
         d0:2d:ee:82:55:39:0c:f0:d5:c4:80:d9:c6:a4:1b:40:28:ec:
         b5:df:a8:4f:cd:36:94:69:e0:79:ed:0b:f7:15:f3:e1:59:fe:
         f3:de:d0:69:63:19:10:20:6a:f6:68:05:67:40:dd:9e:b5:86:
         23:14:c8:17:aa:b7:8b:6c:e3:6b:5d:3c:ad:e7:2c:ba:8c:b7:
         ea:51:ea:19:e2:bc:e9:c0:bf:bd:d8:92:bb:0a:6f:66:bc:06:
         bd:86:de:49:25:ba:c1:45:32:ec:23:28:b2:f9:92:04:ea:fb:
         b9:e1:42:b6:8c:2c:78:6f:46:f5:2a:17:23:b5:1e:ca:f5:b0:
         15:b1:1e:21:b5:c3:fa:18:70:83:90:5b:ff:4a:63:61:75:93:
         8d:62:b6:a6:f3:44:61:f2:c4:49:57:0a:40:b4:d1:e6:bb:d9:
         7b:ca:43:8a:0d:8f:65:c9:83:b1:b8:7c:a0:f3:53:19:80:bf:
         cb:f9:f4:9b:c8:24:8e:cf:2b:0c:3d:41:94:d6:04:81:8b:c3:
         cd:67:a8:10:78:0c:08:47:d2:c6:4e:dd:64:a5:d7:fa:54:4d:
         7e:df:7b:f2:41:d5:a5:53:80:ce:a2:b0:49:01:b6:84:47:1a:
         48:fb:6e:3e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDPtKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM2
ZTE5MmI1NWNiNTZkZGIzMjdlMThhMDkwZmE3NTcwMDA2ODYyNDkwHhcNMjEwMzI0
MTQzNTA1WhcNMjYwMzI0MTQzNTA1WjAzMTEwLwYDVQQDEygzNzU2NGQzYTU3ZmRj
ZWZjZGJlZjlhMmY4NzI1ODllMTAwM2RlNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5zgNk/u/5dVIK6qQ2HcruB9gsr3X5iA03zWbifGb2icjKxd2
UmyHO8qICUoLU3ITALrrR4RPm17MC2uyl1ux06NL4k8tsNYTTYaC8lUY1ENiMy8g
HOqMjpyx3WQu/pJgsD8v2JP4I+KftCZnXUxk6p2maTKS0Dlly1+mzsujPadQ7EuQ
oSEdkG/OiMJQdPl4+cttezKsfRZ6AcfYFb+vtTE/poEEXbk5ZV2uPf46cbXr3U9q
/L3YPiGfiLrFOK3LxO68fGEkky4TeJUHg1hTremKfNhht0MAmjrhWvKyanMqSvtt
AV0pMpesXYUf0RZEG7VBoYTVxu3LHeBuMwvsSwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFH1WFQ/VDDyG9MX2hWVSw84EL817MB8GA1UdIwQYMBaAFHXQfZ6RrFEsSTga
yI5oWp53q8NbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzZlMTky
YjU1Y2I1NmRkYjMyN2UxOGEwOTBmYTc1NzAwMDY4NjI0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjI4YzQxMGQtOWU1ZS00ZjFlLWEzNTUtYTQwNzM0
MzVjYTE0LzM3NTY0ZDNhNTdmZGNlZmNkYmVmOWEyZjg3MjU4OWUxMDAzZGU0ZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMjhjNDEwZC05ZTVlLTRmMWUtYTM1NS1hNDA3
MzQzNWNhMTQvMzZlMTkyYjU1Y2I1NmRkYjMyN2UxOGEwOTBmYTc1NzAwMDY4NjI0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDKoAwDQYJKoZIhvcNAQELBQADggEBABMHWq9akWeZ9bIU
sCKwKBLzmtAt7oJVOQzw1cSA2cakG0Ao7LXfqE/NNpRp4HntC/cV8+FZ/vPe0Glj
GRAgavZoBWdA3Z61hiMUyBeqt4ts42tdPK3nLLqMt+pR6hnivOnAv73YkrsKb2a8
Br2G3kklusFFMuwjKLL5kgTq+7nhQraMLHhvRvUqFyO1Hsr1sBWxHiG1w/oYcIOQ
W/9KY2F1k41itqbzRGHyxElXCkC00ea72XvKQ4oNj2XJg7G4fKDzUxmAv8v59JvI
JI7PKww9QZTWBIGLw81nqBB4DAhH0sZO3WSl1/pUTX7fe/JB1aVTgM6isEkBtoRH
Gkj7bj4=
-----END CERTIFICATE-----