Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/f40e53b189a7c00808164adc1eef3eaa088c707b.roa
File:                     f40e53b189a7c00808164adc1eef3eaa088c707b.roa (raw, json)
Hash identifier:          hzhlAeSRNId/mAHyy3SVb8PD4yxL1copd4YxUjDHhpQ=
Subject key identifier:   2B:E9:A5:9F:69:67:F7:A6:1F:F8:09:EA:F8:03:F5:B6:6D:F6:42:87
Certificate issuer:       /CN=e5978807b07e58b52b1198ef3101e155c00a7924
Certificate serial:       0C995F
Authority key identifier: 81:58:E7:02:78:01:5F:4E:FA:04:58:C3:3A:11:A4:C2:EA:7A:48:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5978807b07e58b52b1198ef3101e155c00a7924.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/f40e53b189a7c00808164adc1eef3eaa088c707b.roa
Signing time:             Wed 24 Mar 2021 14:39:19 +0000
ROA not before:           Wed 24 Mar 2021 14:39:19 +0000
ROA not after:            Tue 24 Mar 2026 14:39:19 +0000
asID:                     266904
IP address blocks:        2803:f6a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825695 (0xc995f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5978807b07e58b52b1198ef3101e155c00a7924
        Validity
            Not Before: Mar 24 14:39:19 2021 GMT
            Not After : Mar 24 14:39:19 2026 GMT
        Subject: CN=f40e53b189a7c00808164adc1eef3eaa088c707b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:71:d3:50:d5:19:74:94:c4:f6:42:c2:58:
                    d9:b3:41:bd:64:15:26:ee:f7:ca:1d:73:41:24:95:
                    12:17:a8:b3:2f:0b:54:cc:41:19:da:66:77:6f:8b:
                    a9:cc:28:9e:45:57:47:3e:52:ec:8a:da:bf:f6:84:
                    24:47:53:0c:d1:b9:b7:93:46:e6:ff:95:11:40:50:
                    c5:25:5c:69:a2:36:25:69:d5:74:3a:05:e3:9e:9e:
                    d5:9e:d8:a0:20:e6:f7:f4:c8:c2:e8:20:06:e6:c8:
                    a0:70:19:fb:47:99:98:e5:b2:dc:05:37:69:27:a8:
                    f6:7e:ea:5e:20:51:ea:1d:0f:54:c4:4d:31:43:98:
                    fc:58:7d:ed:3e:b2:4e:30:1a:15:62:b7:97:59:39:
                    11:bd:93:ce:c0:d6:d2:d1:e8:b0:c2:9b:25:41:89:
                    63:19:8e:76:e0:86:2e:d3:d5:df:c7:98:b0:3b:2d:
                    3b:41:68:8b:12:7d:83:8c:2f:2f:6f:b1:b1:ad:3f:
                    10:d9:75:cd:54:cc:21:4b:5f:80:71:c6:e2:d7:82:
                    ac:29:13:88:a6:f0:ea:34:dc:69:81:d7:55:c4:2b:
                    7f:ef:cb:48:2c:7b:a8:a2:6c:4f:f8:b5:4a:82:3d:
                    9f:5e:41:1c:f2:ad:2f:b7:d2:cf:9b:61:70:2b:db:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:A5:9F:69:67:F7:A6:1F:F8:09:EA:F8:03:F5:B6:6D:F6:42:87
            X509v3 Authority Key Identifier:
                keyid:81:58:E7:02:78:01:5F:4E:FA:04:58:C3:3A:11:A4:C2:EA:7A:48:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5978807b07e58b52b1198ef3101e155c00a7924.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/f40e53b189a7c00808164adc1eef3eaa088c707b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/491a6ad5-73c7-4d62-8462-524571890d91/e5978807b07e58b52b1198ef3101e155c00a7924.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:84:fa:d7:f7:8b:b9:96:06:dc:2c:5b:3a:a6:27:39:c0:5e:
         94:a8:15:77:56:45:6c:e7:09:c3:34:23:cb:d4:17:fc:61:0a:
         cd:4e:f3:b4:3f:ef:8a:c5:c6:24:f1:f5:ff:5a:d2:55:b8:19:
         02:09:3a:8b:3d:d9:eb:4a:ad:39:c2:84:de:e8:f4:3e:49:70:
         64:0b:de:48:85:b5:9a:7d:67:92:c4:b1:d1:dd:86:82:87:e2:
         54:26:f7:b3:51:d7:90:3b:c0:e4:36:d6:ca:1a:4d:3c:19:8e:
         4c:55:2f:13:df:e7:23:a2:74:6a:43:d1:dc:55:90:4d:59:90:
         c8:2e:ff:1b:d6:0c:08:96:7d:70:49:03:c9:95:8a:7e:9b:8b:
         18:6e:ce:26:02:30:07:bc:e6:e1:ec:62:80:d2:29:0f:2d:46:
         ef:72:7b:74:11:45:7e:5a:1f:9f:6e:42:40:b3:69:49:b9:9f:
         79:e7:91:c4:36:50:84:17:ae:bf:a3:78:8f:ff:ab:ff:48:6d:
         a1:d7:8b:4b:a9:68:9a:27:03:ed:18:22:74:80:bd:91:50:39:
         d8:f7:0f:bf:ed:bd:bd:ef:7f:d4:fa:90:01:5b:98:26:a2:3f:
         c7:d1:85:b9:0b:81:64:36:0d:bb:d6:d9:8d:0e:42:33:6f:fa:
         5f:cc:95:6e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDJlfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
OTc4ODA3YjA3ZTU4YjUyYjExOThlZjMxMDFlMTU1YzAwYTc5MjQwHhcNMjEwMzI0
MTQzOTE5WhcNMjYwMzI0MTQzOTE5WjAzMTEwLwYDVQQDEyhmNDBlNTNiMTg5YTdj
MDA4MDgxNjRhZGMxZWVmM2VhYTA4OGM3MDdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqhdx01DVGXSUxPZCwljZs0G9ZBUm7vfKHXNBJJUSF6izLwtU
zEEZ2mZ3b4upzCieRVdHPlLsitq/9oQkR1MM0bm3k0bm/5URQFDFJVxpojYladV0
OgXjnp7VntigIOb39MjC6CAG5sigcBn7R5mY5bLcBTdpJ6j2fupeIFHqHQ9UxE0x
Q5j8WH3tPrJOMBoVYreXWTkRvZPOwNbS0eiwwpslQYljGY524IYu09Xfx5iwOy07
QWiLEn2DjC8vb7GxrT8Q2XXNVMwhS1+Accbi14KsKROIpvDqNNxpgddVxCt/78tI
LHuoomxP+LVKgj2fXkEc8q0vt9LPm2FwK9vJXQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCvppZ9pZ/emH/gJ6vgD9bZt9kKHMB8GA1UdIwQYMBaAFIFY5wJ4AV9O+gRY
wzoRpMLqekgZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTU5Nzg4
MDdiMDdlNThiNTJiMTE5OGVmMzEwMWUxNTVjMDBhNzkyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDkxYTZhZDUtNzNjNy00ZDYyLTg0NjItNTI0NTcx
ODkwZDkxL2Y0MGU1M2IxODlhN2MwMDgwODE2NGFkYzFlZWYzZWFhMDg4YzcwN2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80OTFhNmFkNS03M2M3LTRkNjItODQ2Mi01MjQ1
NzE4OTBkOTEvZTU5Nzg4MDdiMDdlNThiNTJiMTE5OGVmMzEwMWUxNTVjMDBhNzky
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD9qAwDQYJKoZIhvcNAQELBQADggEBABCE+tf3i7mWBtws
WzqmJznAXpSoFXdWRWznCcM0I8vUF/xhCs1O87Q/74rFxiTx9f9a0lW4GQIJOos9
2etKrTnChN7o9D5JcGQL3kiFtZp9Z5LEsdHdhoKH4lQm97NR15A7wOQ21soaTTwZ
jkxVLxPf5yOidGpD0dxVkE1ZkMgu/xvWDAiWfXBJA8mVin6bixhuziYCMAe85uHs
YoDSKQ8tRu9ye3QRRX5aH59uQkCzaUm5n3nnkcQ2UIQXrr+jeI//q/9IbaHXi0up
aJonA+0YInSAvZFQOdj3D7/tvb3vf9T6kAFbmCaiP8fRhbkLgWQ2DbvW2Y0OQjNv
+l/MlW4=
-----END CERTIFICATE-----