Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/9b3f682a70c59476a04ab16d52cb887a22137f46.roa
File:                     9b3f682a70c59476a04ab16d52cb887a22137f46.roa (raw, json)
Hash identifier:          w+2QWhMoeU8g4NhLRSvL2Dv8qh7zDsCoVZrHnIRPOOo=
Subject key identifier:   FB:B4:6B:AB:2F:FC:78:E1:D2:BE:96:99:10:8E:04:0F:C3:70:1F:AC
Certificate issuer:       /CN=b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d
Certificate serial:       04F935
Authority key identifier: FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/9b3f682a70c59476a04ab16d52cb887a22137f46.roa
Signing time:             Wed 24 Mar 2021 14:46:35 +0000
ROA not before:           Wed 24 Mar 2021 14:46:35 +0000
ROA not after:            Tue 24 Mar 2026 14:46:35 +0000
asID:                     16592
IP address blocks:        2803:9200::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325941 (0x4f935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d
        Validity
            Not Before: Mar 24 14:46:35 2021 GMT
            Not After : Mar 24 14:46:35 2026 GMT
        Subject: CN=9b3f682a70c59476a04ab16d52cb887a22137f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:81:b8:f9:61:15:ac:5b:37:50:04:c1:7f:
                    ca:70:e3:1f:fe:78:28:62:04:fc:5c:32:0b:66:88:
                    00:72:d2:3d:f2:9b:7e:35:88:ca:6c:84:0a:fd:78:
                    23:e4:b4:38:62:46:c9:a0:f4:7c:da:16:75:4e:6b:
                    e7:33:5d:da:ed:4c:18:5a:1b:95:3d:8a:4b:92:71:
                    2d:28:85:0c:fe:ac:c2:2e:25:69:e6:9a:01:97:c6:
                    51:d2:47:54:d6:78:4b:01:fb:ff:ca:ba:26:26:9f:
                    bb:44:99:bc:26:7d:ab:5c:6f:07:86:37:6f:fd:fa:
                    4a:80:84:fa:ef:a8:f4:d3:d3:16:23:8c:08:0f:e8:
                    a1:50:9f:b0:12:1d:c2:9d:1f:b2:90:e9:04:99:df:
                    4f:dd:4e:e8:f0:72:1a:12:07:b2:63:a9:bd:b1:fb:
                    51:4d:0d:be:23:55:73:a7:24:50:68:44:92:c9:55:
                    85:f3:17:97:cf:a1:54:72:e5:c3:ab:7c:79:10:db:
                    1d:31:dc:87:0a:92:31:d0:0c:c4:d8:2b:d2:40:55:
                    5a:87:4a:19:f1:fb:9d:ba:06:f6:ce:20:70:c9:56:
                    d7:8e:83:d9:58:d8:25:7c:2c:81:48:29:62:9c:48:
                    ac:53:d2:f0:d0:e6:4a:6b:5c:f5:a1:98:ef:83:cd:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:6B:AB:2F:FC:78:E1:D2:BE:96:99:10:8E:04:0F:C3:70:1F:AC
            X509v3 Authority Key Identifier:
                keyid:FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/9b3f682a70c59476a04ab16d52cb887a22137f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9200::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:4f:d8:29:68:b5:b3:7d:80:af:66:b1:44:b5:ca:d6:af:
         98:27:48:68:5a:c8:75:16:8a:52:e3:df:0d:12:94:27:6e:07:
         3f:f9:c9:de:6f:42:4e:f6:70:a1:1e:a8:4e:7b:94:b9:48:70:
         a3:98:e0:00:b9:88:73:4b:d7:25:a6:5e:ea:e8:cc:b8:2d:97:
         a7:3a:41:98:9e:6e:da:84:4d:01:06:4d:ec:1f:21:7c:90:f2:
         c9:69:72:ab:45:ff:17:29:99:8e:1e:f9:20:f6:6d:9d:5a:df:
         e3:25:b2:b6:a9:20:38:5f:f0:6b:35:40:68:eb:86:c6:43:65:
         26:cb:dc:65:29:69:c1:55:16:39:7c:2d:87:52:e6:af:bf:a1:
         fb:19:e9:ad:ec:b6:1f:c7:06:41:88:d1:09:ad:ff:a4:af:b3:
         bb:ca:20:70:f6:eb:03:c1:d4:08:4d:15:8d:8f:31:e7:8a:ef:
         fb:bf:42:8a:63:e7:6d:3c:ec:56:b7:6f:a8:63:24:f9:50:f5:
         70:79:ee:db:91:91:96:88:5d:23:34:1f:c3:5c:2e:57:04:72:
         b9:fb:c2:87:ae:e3:6c:e9:92:18:fa:e4:c1:a9:ef:6b:4f:24:
         ea:e8:eb:e3:e5:73:b7:43:d5:aa:b2:53:93:62:91:ba:f5:85:
         f1:41:f7:36
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBPk1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI2
NWNhN2EwYTNiOThhNmI0M2U1ZmZkZDAwNDgyOTQ2MmFiNjhlMmQwHhcNMjEwMzI0
MTQ0NjM1WhcNMjYwMzI0MTQ0NjM1WjAzMTEwLwYDVQQDEyg5YjNmNjgyYTcwYzU5
NDc2YTA0YWIxNmQ1MmNiODg3YTIyMTM3ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjr+BuPlhFaxbN1AEwX/KcOMf/ngoYgT8XDILZogActI98pt+
NYjKbIQK/Xgj5LQ4YkbJoPR82hZ1TmvnM13a7UwYWhuVPYpLknEtKIUM/qzCLiVp
5poBl8ZR0kdU1nhLAfv/yromJp+7RJm8Jn2rXG8Hhjdv/fpKgIT676j009MWI4wI
D+ihUJ+wEh3CnR+ykOkEmd9P3U7o8HIaEgeyY6m9sftRTQ2+I1VzpyRQaESSyVWF
8xeXz6FUcuXDq3x5ENsdMdyHCpIx0AzE2CvSQFVah0oZ8fudugb2ziBwyVbXjoPZ
WNglfCyBSClinEisU9Lw0OZKa1z1oZjvg82PCwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPu0a6sv/Hjh0r6WmRCOBA/DcB+sMB8GA1UdIwQYMBaAFP6zLwb2JNpyk4G/
IfXTJ2t0EgeGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjY1Y2E3
YTBhM2I5OGE2YjQzZTVmZmRkMDA0ODI5NDYyYWI2OGUyZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjc1MzVjZmQtN2Q0NS00ZDVlLWI0OTAtNTViZTc5
ZGUxYmVhLzliM2Y2ODJhNzBjNTk0NzZhMDRhYjE2ZDUyY2I4ODdhMjIxMzdmNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNzUzNWNmZC03ZDQ1LTRkNWUtYjQ5MC01NWJl
NzlkZTFiZWEvYjY1Y2E3YTBhM2I5OGE2YjQzZTVmZmRkMDA0ODI5NDYyYWI2OGUy
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDkgAwDQYJKoZIhvcNAQELBQADggEBAAO1T9gpaLWzfYCv
ZrFEtcrWr5gnSGhayHUWilLj3w0SlCduBz/5yd5vQk72cKEeqE57lLlIcKOY4AC5
iHNL1yWmXurozLgtl6c6QZiebtqETQEGTewfIXyQ8slpcqtF/xcpmY4e+SD2bZ1a
3+MlsrapIDhf8Gs1QGjrhsZDZSbL3GUpacFVFjl8LYdS5q+/ofsZ6a3sth/HBkGI
0Qmt/6Svs7vKIHD26wPB1AhNFY2PMeeK7/u/Qopj52087Fa3b6hjJPlQ9XB57tuR
kZaIXSM0H8NcLlcEcrn7woeu42zpkhj65MGp72tPJOro6+Plc7dD1aqyU5Nikbr1
hfFB9zY=
-----END CERTIFICATE-----