Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/bee19c57508758cc232aabac033109a0192ac996.roa
File:                     bee19c57508758cc232aabac033109a0192ac996.roa (raw, json)
Hash identifier:          7rClc7KjVrr0lKdSx/C7IhYCqd1ae2Cus3KHeM4fC8s=
Subject key identifier:   E1:DD:21:C9:2C:3E:31:53:CD:71:A3:8A:B4:07:47:15:CD:BF:C4:67
Certificate issuer:       /CN=6903b9f59c9133cf1913c5de49b07f345c8247eb
Certificate serial:       0BED8C
Authority key identifier: 80:21:37:00:CF:17:87:43:AA:F6:9D:10:BC:F7:84:17:60:28:36:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6903b9f59c9133cf1913c5de49b07f345c8247eb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/bee19c57508758cc232aabac033109a0192ac996.roa
Signing time:             Wed 24 Mar 2021 14:30:34 +0000
ROA not before:           Wed 24 Mar 2021 14:30:34 +0000
ROA not after:            Tue 24 Mar 2026 14:30:34 +0000
asID:                     264832
IP address blocks:        2803:82c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781708 (0xbed8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6903b9f59c9133cf1913c5de49b07f345c8247eb
        Validity
            Not Before: Mar 24 14:30:34 2021 GMT
            Not After : Mar 24 14:30:34 2026 GMT
        Subject: CN=bee19c57508758cc232aabac033109a0192ac996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:55:6f:ba:33:30:30:83:28:52:4c:41:b7:
                    b4:10:b6:c9:db:f5:e6:c0:69:d2:50:f4:a7:35:0d:
                    9e:64:fd:2b:56:05:59:77:57:bc:e5:26:2f:c3:a8:
                    51:42:b6:c6:f6:ce:84:05:d6:e4:5c:5d:06:57:6a:
                    c9:13:c9:10:f1:46:4c:18:74:ca:f5:37:d4:10:ba:
                    de:76:20:49:38:c6:c0:35:44:f3:be:79:a5:8c:4e:
                    e0:71:70:69:d1:b4:4b:86:b3:32:bb:4a:4a:ed:28:
                    67:12:73:8c:96:f9:e3:98:2a:a5:5b:bd:8a:f6:d2:
                    27:6f:33:2d:30:e1:46:ff:00:b3:04:85:34:60:a8:
                    e7:3e:5b:f4:c4:0b:c1:bd:3e:2e:98:7f:ce:55:ab:
                    7c:c0:f4:59:4e:19:77:d2:b5:18:f8:a9:e9:e3:b4:
                    cd:0c:03:7f:fd:12:e1:fa:e2:20:dd:d0:d2:bb:af:
                    c6:81:ca:6a:b0:e5:40:fe:1f:6f:31:e1:ee:35:15:
                    7c:30:09:4c:1c:f6:27:bc:41:82:2a:df:c2:d9:3a:
                    e8:3c:44:14:dd:81:1f:a6:44:f9:15:0a:e4:ec:d0:
                    d9:44:72:18:58:09:c6:b8:b8:64:56:fd:8c:6c:ef:
                    40:78:88:d7:fa:fe:5a:6b:b7:57:32:e8:5f:73:a2:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DD:21:C9:2C:3E:31:53:CD:71:A3:8A:B4:07:47:15:CD:BF:C4:67
            X509v3 Authority Key Identifier:
                keyid:80:21:37:00:CF:17:87:43:AA:F6:9D:10:BC:F7:84:17:60:28:36:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6903b9f59c9133cf1913c5de49b07f345c8247eb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/bee19c57508758cc232aabac033109a0192ac996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dbf97af-7b75-4a4d-857a-4d734541ebbb/6903b9f59c9133cf1913c5de49b07f345c8247eb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:82c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:63:a7:56:46:9c:8d:3c:49:bc:bf:b3:08:37:1a:aa:01:
         18:d1:8f:b6:2a:9c:68:f9:3f:4f:47:af:8d:95:d8:ea:e1:c3:
         4f:ad:b2:a5:e4:a2:c2:49:f2:b7:40:3d:31:ce:8b:2c:42:74:
         e9:76:ec:05:54:1b:ac:2e:2e:c0:26:fb:3e:4a:aa:95:e9:69:
         7f:c3:5f:9b:f0:ca:bf:4f:06:ed:3c:14:07:b2:fb:67:f6:96:
         e1:a3:65:16:fa:2e:27:ec:73:05:f4:53:d0:29:20:90:dd:cb:
         a3:72:6c:e4:4e:a8:06:47:e8:0d:fb:bc:df:ac:32:b1:b0:a1:
         cb:2e:d1:53:50:bb:ee:4f:68:7f:18:2f:16:6b:6a:0b:ff:4c:
         e1:47:88:21:3b:38:29:3f:97:8b:d1:96:49:d4:7e:fc:c3:1d:
         3f:c3:20:f4:54:f7:8d:76:a2:27:ab:fd:d3:65:fe:6c:7a:5a:
         b9:9c:55:85:9d:6f:b5:16:17:69:ca:fd:86:05:2e:e7:d5:3b:
         00:7c:95:6a:11:7c:7f:27:73:56:52:eb:d5:35:d6:26:7b:d0:
         2d:ce:5e:f3:8a:1a:8a:f2:a6:06:7b:54:d2:88:f7:7d:f3:d1:
         48:96:5c:18:e1:c0:ec:7d:7d:36:4f:e2:b2:0a:4d:a0:6c:cb:
         fc:cd:9f:04
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDC+2MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
MDNiOWY1OWM5MTMzY2YxOTEzYzVkZTQ5YjA3ZjM0NWM4MjQ3ZWIwHhcNMjEwMzI0
MTQzMDM0WhcNMjYwMzI0MTQzMDM0WjAzMTEwLwYDVQQDEyhiZWUxOWM1NzUwODc1
OGNjMjMyYWFiYWMwMzMxMDlhMDE5MmFjOTk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhmFVb7ozMDCDKFJMQbe0ELbJ2/XmwGnSUPSnNQ2eZP0rVgVZ
d1e85SYvw6hRQrbG9s6EBdbkXF0GV2rJE8kQ8UZMGHTK9TfUELrediBJOMbANUTz
vnmljE7gcXBp0bRLhrMyu0pK7ShnEnOMlvnjmCqlW72K9tInbzMtMOFG/wCzBIU0
YKjnPlv0xAvBvT4umH/OVat8wPRZThl30rUY+Knp47TNDAN//RLh+uIg3dDSu6/G
gcpqsOVA/h9vMeHuNRV8MAlMHPYnvEGCKt/C2TroPEQU3YEfpkT5FQrk7NDZRHIY
WAnGuLhkVv2MbO9AeIjX+v5aa7dXMuhfc6LeDwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOHdIcksPjFTzXGjirQHRxXNv8RnMB8GA1UdIwQYMBaAFIAhNwDPF4dDqvad
ELz3hBdgKDY5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjkwM2I5
ZjU5YzkxMzNjZjE5MTNjNWRlNDliMDdmMzQ1YzgyNDdlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmRiZjk3YWYtN2I3NS00YTRkLTg1N2EtNGQ3MzQ1
NDFlYmJiL2JlZTE5YzU3NTA4NzU4Y2MyMzJhYWJhYzAzMzEwOWEwMTkyYWM5OTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZGJmOTdhZi03Yjc1LTRhNGQtODU3YS00ZDcz
NDU0MWViYmIvNjkwM2I5ZjU5YzkxMzNjZjE5MTNjNWRlNDliMDdmMzQ1YzgyNDdl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDgsAwDQYJKoZIhvcNAQELBQADggEBAAOpY6dWRpyNPEm8
v7MINxqqARjRj7YqnGj5P09Hr42V2Orhw0+tsqXkosJJ8rdAPTHOiyxCdOl27AVU
G6wuLsAm+z5KqpXpaX/DX5vwyr9PBu08FAey+2f2luGjZRb6LifscwX0U9ApIJDd
y6NybOROqAZH6A37vN+sMrGwocsu0VNQu+5PaH8YLxZragv/TOFHiCE7OCk/l4vR
lknUfvzDHT/DIPRU9412oier/dNl/mx6WrmcVYWdb7UWF2nK/YYFLufVOwB8lWoR
fH8nc1ZS69U11iZ70C3OXvOKGorypgZ7VNKI933z0UiWXBjhwOx9fTZP4rIKTaBs
y/zNnwQ=
-----END CERTIFICATE-----