Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/e9b12ca610fdd2bb525310f99585e14ea9de55a8.roa
File:                     e9b12ca610fdd2bb525310f99585e14ea9de55a8.roa (raw, json)
Hash identifier:          hhs5SvI9QqNfcOagLEAEY4dVkza1yASr2slBhH4oD08=
Subject key identifier:   92:78:77:90:C7:88:DF:64:F8:06:34:B9:18:EF:9B:52:C3:A9:0C:18
Certificate issuer:       /CN=e58627f336cb5c55bc61f9db9ff0b11701078350
Certificate serial:       123382
Authority key identifier: 54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/e9b12ca610fdd2bb525310f99585e14ea9de55a8.roa
Signing time:             Tue 12 Oct 2021 13:19:34 +0000
ROA not before:           Tue 12 Oct 2021 03:00:00 +0000
ROA not after:            Thu 12 Oct 2023 03:00:00 +0000
asID:                     52389
IP address blocks:        2803:1600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192834 (0x123382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58627f336cb5c55bc61f9db9ff0b11701078350
        Validity
            Not Before: Oct 12 03:00:00 2021 GMT
            Not After : Oct 12 03:00:00 2023 GMT
        Subject: CN=e9b12ca610fdd2bb525310f99585e14ea9de55a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:9a:b1:81:ab:90:23:17:cc:ae:be:81:a3:
                    6e:a9:1a:25:df:a6:90:27:f4:7f:a4:ac:30:c8:22:
                    e1:e5:d2:c6:71:f6:0d:33:d7:dd:28:e9:27:00:7a:
                    d3:ef:80:78:c1:3e:fa:00:28:cc:b0:95:d6:29:25:
                    be:ab:b3:f0:1d:e5:5d:c5:c9:80:01:d0:b9:74:93:
                    fd:cb:3c:7e:7a:e1:28:d2:bd:7b:d9:41:b1:ca:d5:
                    b3:7f:85:49:15:79:7f:2a:cf:a5:5b:cb:a1:3b:60:
                    b4:46:02:79:4e:d4:be:7a:40:b5:d9:87:5f:da:27:
                    07:d0:0a:8a:fa:21:ef:c9:94:ad:27:28:fe:51:b9:
                    56:82:e4:00:dc:98:62:a1:5f:f2:e7:39:71:fa:16:
                    5d:3c:8a:51:be:d1:25:42:a4:be:85:9b:8d:3e:1d:
                    56:b0:9c:2b:21:c4:94:98:86:62:40:33:ee:f3:83:
                    4f:f2:4c:32:1b:eb:53:c4:c1:7d:95:c3:9f:92:b8:
                    0a:e3:34:16:67:e2:12:38:eb:e7:8c:99:3a:ce:1c:
                    3f:3c:e9:cb:98:aa:8c:7a:3f:55:5d:74:1f:91:22:
                    14:88:43:f7:3b:13:c8:e0:a1:15:92:47:da:ed:b0:
                    36:cf:23:88:16:7f:d8:5c:1f:53:a0:f4:4e:5e:5d:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:78:77:90:C7:88:DF:64:F8:06:34:B9:18:EF:9B:52:C3:A9:0C:18
            X509v3 Authority Key Identifier:
                keyid:54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/e9b12ca610fdd2bb525310f99585e14ea9de55a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/e58627f336cb5c55bc61f9db9ff0b11701078350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:08:13:b5:20:99:3a:93:c9:a6:dd:3e:1a:a1:be:a4:64:09:
         bd:7e:31:57:11:e7:19:39:d5:6b:1d:fc:3c:9d:57:61:3b:35:
         f6:ce:37:ff:42:e4:d3:fc:75:0d:e5:9a:77:e1:bb:f4:77:1f:
         08:96:91:31:86:db:eb:b3:2c:04:43:62:93:d8:85:4f:40:cf:
         09:88:86:b3:5a:49:1e:19:c9:e1:2f:49:41:f5:8d:8c:85:89:
         53:ef:8c:37:0b:ea:73:58:2d:d0:7a:39:2f:e4:43:9d:cd:35:
         b0:d7:03:05:2e:4e:9e:67:98:b5:05:68:31:06:4d:81:10:80:
         47:77:d7:55:b9:5e:96:25:75:75:04:ab:d1:d6:79:e2:da:bc:
         46:2d:75:67:ba:25:3f:f5:55:bf:c8:5e:6c:45:93:b1:cd:af:
         a3:45:a8:fc:ea:98:32:ce:53:ea:3a:78:29:7d:12:d4:3c:d5:
         c8:64:00:a9:94:18:d2:76:43:aa:10:43:3b:b1:c9:1b:6c:1c:
         6f:f3:15:80:b4:58:3b:78:52:c0:be:5c:f8:4e:d1:9b:c7:7f:
         5a:d5:4a:b3:23:c3:c2:a6:14:a4:2b:4f:d7:a8:a7:9b:de:d1:
         62:61:e9:7f:15:bc:fa:52:04:0c:63:69:8a:ac:3c:f5:75:e4:
         69:4e:2a:b6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEjOCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ODYyN2YzMzZjYjVjNTViYzYxZjlkYjlmZjBiMTE3MDEwNzgzNTAwHhcNMjExMDEy
MDMwMDAwWhcNMjMxMDEyMDMwMDAwWjAzMTEwLwYDVQQDEyhlOWIxMmNhNjEwZmRk
MmJiNTI1MzEwZjk5NTg1ZTE0ZWE5ZGU1NWE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgX6asYGrkCMXzK6+gaNuqRol36aQJ/R/pKwwyCLh5dLGcfYN
M9fdKOknAHrT74B4wT76ACjMsJXWKSW+q7PwHeVdxcmAAdC5dJP9yzx+euEo0r17
2UGxytWzf4VJFXl/Ks+lW8uhO2C0RgJ5TtS+ekC12Ydf2icH0AqK+iHvyZStJyj+
UblWguQA3JhioV/y5zlx+hZdPIpRvtElQqS+hZuNPh1WsJwrIcSUmIZiQDPu84NP
8kwyG+tTxMF9lcOfkrgK4zQWZ+ISOOvnjJk6zhw/POnLmKqMej9VXXQfkSIUiEP3
OxPI4KEVkkfa7bA2zyOIFn/YXB9ToPROXl12mwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJJ4d5DHiN9k+AY0uRjvm1LDqQwYMB8GA1UdIwQYMBaAFFQiDCo+FNcBFmHY
APobeRpojmreMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTU4NjI3
ZjMzNmNiNWM1NWJjNjFmOWRiOWZmMGIxMTcwMTA3ODM1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzZjZDI1NjMtMzQ5OC00OTg5LWJmMDctMWE0NWFk
ZGExYWYxL2U5YjEyY2E2MTBmZGQyYmI1MjUzMTBmOTk1ODVlMTRlYTlkZTU1YTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNmNkMjU2My0zNDk4LTQ5ODktYmYwNy0xYTQ1
YWRkYTFhZjEvZTU4NjI3ZjMzNmNiNWM1NWJjNjFmOWRiOWZmMGIxMTcwMTA3ODM1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDFgAwDQYJKoZIhvcNAQELBQADggEBAA0IE7UgmTqTyabd
PhqhvqRkCb1+MVcR5xk51Wsd/DydV2E7NfbON/9C5NP8dQ3lmnfhu/R3HwiWkTGG
2+uzLARDYpPYhU9AzwmIhrNaSR4ZyeEvSUH1jYyFiVPvjDcL6nNYLdB6OS/kQ53N
NbDXAwUuTp5nmLUFaDEGTYEQgEd311W5XpYldXUEq9HWeeLavEYtdWe6JT/1Vb/I
XmxFk7HNr6NFqPzqmDLOU+o6eCl9EtQ81chkAKmUGNJ2Q6oQQzuxyRtsHG/zFYC0
WDt4UsC+XPhO0ZvHf1rVSrMjw8KmFKQrT9eop5ve0WJh6X8VvPpSBAxjaYqsPPV1
5GlOKrY=
-----END CERTIFICATE-----