Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/f933cbf924642756aa0b93d2fc98f87f4a50dd57.roa
File:                     f933cbf924642756aa0b93d2fc98f87f4a50dd57.roa (raw, json)
Hash identifier:          T5hJNRiY1PO2XrjtIppmcmXLSX/lB9fECdAT0KB1vjA=
Subject key identifier:   E9:93:31:E6:22:6A:A0:FA:FF:79:0F:66:73:56:0B:FD:57:2C:E7:93
Certificate issuer:       /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial:       0D0EDC
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/f933cbf924642756aa0b93d2fc98f87f4a50dd57.roa
Signing time:             Wed 24 Mar 2021 14:35:28 +0000
ROA not before:           Wed 24 Mar 2021 14:35:28 +0000
ROA not after:            Tue 24 Mar 2026 14:35:28 +0000
asID:                     262191
IP address blocks:        2803:84c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855772 (0xd0edc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
        Validity
            Not Before: Mar 24 14:35:28 2021 GMT
            Not After : Mar 24 14:35:28 2026 GMT
        Subject: CN=f933cbf924642756aa0b93d2fc98f87f4a50dd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:3e:8b:f0:03:13:31:3e:f3:29:8c:ec:ad:
                    f4:de:a5:f6:0b:1f:84:bc:a9:64:45:4e:60:81:ce:
                    53:49:fc:e5:45:2d:17:81:82:f0:72:46:d8:a5:d2:
                    27:fb:bc:8b:f1:e2:a6:b0:b6:59:47:a0:5c:80:5a:
                    53:7a:03:97:42:93:32:a6:49:bc:ea:06:14:82:6c:
                    f6:f8:8a:14:63:6b:99:97:29:75:60:fb:68:91:ae:
                    59:ed:2f:e5:75:6c:ce:d4:db:b5:0a:6d:7a:43:38:
                    54:2d:a2:0c:06:87:e6:eb:ff:8d:aa:24:0b:e5:eb:
                    ee:8a:f3:75:5b:85:4c:ff:9c:5c:3c:b7:c0:97:e4:
                    d7:70:fa:bd:6b:0a:c5:35:95:7d:0c:88:db:83:c4:
                    fc:29:24:19:19:48:be:87:51:b2:9b:b1:29:09:ee:
                    36:fb:1f:f1:62:49:9c:c8:ee:85:e9:c8:d1:2d:50:
                    0a:de:a4:06:4c:4d:f1:13:b5:ee:f6:43:f9:a8:3b:
                    24:29:16:f3:e0:de:64:98:a9:58:4e:33:13:92:20:
                    37:17:08:c9:d1:e6:7c:c5:60:09:b8:d9:41:5d:c1:
                    f9:61:8b:38:fd:79:5f:d7:93:51:f5:c8:fd:af:9a:
                    65:27:02:10:44:43:62:d2:66:36:3b:fe:45:e6:f1:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:93:31:E6:22:6A:A0:FA:FF:79:0F:66:73:56:0B:FD:57:2C:E7:93
            X509v3 Authority Key Identifier:
                keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/f933cbf924642756aa0b93d2fc98f87f4a50dd57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:4b:73:7a:e5:d2:d9:f4:cf:43:73:b3:7c:04:7f:78:6c:
         63:fc:cc:d2:77:02:bb:33:2b:17:7b:ef:21:47:dc:00:6f:3a:
         33:99:38:27:60:92:98:61:ce:9e:24:d4:41:c4:9f:97:4c:71:
         ad:10:de:bc:54:03:85:e9:4e:d7:0c:69:d3:8c:78:28:52:a5:
         8f:b0:75:bc:ef:1d:34:51:cc:21:cc:71:d7:d4:3a:9d:83:9f:
         1b:d3:6c:8a:ee:16:ca:f1:ad:c7:a3:8f:9a:07:0d:fd:3a:bc:
         8a:25:64:e6:d0:bf:aa:d1:c2:74:dd:90:26:3c:4d:b8:c4:f5:
         01:2c:74:6d:6d:c8:df:68:44:69:25:9d:b9:4f:9f:1d:b4:90:
         da:89:5a:be:e1:1b:40:ec:67:e3:27:70:2e:35:a8:49:60:c3:
         43:a9:e4:4b:49:c1:f0:7d:ff:99:2d:18:bd:01:44:eb:e9:0f:
         e5:af:fe:6a:0f:c1:9e:ec:57:4b:f6:60:f1:ce:0f:b5:02:be:
         07:06:6b:12:82:b0:9b:0e:e5:33:fa:59:c7:ad:26:8e:23:91:
         c5:01:72:a2:d1:a0:d0:ba:c1:6c:71:64:2f:86:2f:d4:cb:b0:
         d5:16:ba:92:b7:28:71:1d:30:5a:f5:ba:f1:8b:a0:7b:28:6c:
         5e:02:95:c9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDQ7cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
MmIxODcyOWRiMDUwOTgyYjZmNzQ1YjRjNzkxNDc1Yzg4YmEwMDkwHhcNMjEwMzI0
MTQzNTI4WhcNMjYwMzI0MTQzNTI4WjAzMTEwLwYDVQQDEyhmOTMzY2JmOTI0NjQy
NzU2YWEwYjkzZDJmYzk4Zjg3ZjRhNTBkZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo1Q+i/ADEzE+8ymM7K303qX2Cx+EvKlkRU5ggc5TSfzlRS0X
gYLwckbYpdIn+7yL8eKmsLZZR6BcgFpTegOXQpMypkm86gYUgmz2+IoUY2uZlyl1
YPtoka5Z7S/ldWzO1Nu1Cm16QzhULaIMBofm6/+NqiQL5evuivN1W4VM/5xcPLfA
l+TXcPq9awrFNZV9DIjbg8T8KSQZGUi+h1Gym7EpCe42+x/xYkmcyO6F6cjRLVAK
3qQGTE3xE7Xu9kP5qDskKRbz4N5kmKlYTjMTkiA3FwjJ0eZ8xWAJuNlBXcH5YYs4
/Xlf15NR9cj9r5plJwIQRENi0mY2O/5F5vFflQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOmTMeYiaqD6/3kPZnNWC/1XLOeTMB8GA1UdIwQYMBaAFA8lbcDHwvmKUQRW
oRM5iAG6Tp1RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjUyYjE4
NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGM4OThlZmYtNzg4My00YjIzLTkyNDMtYzJkNzJl
NjNiNGVlL2Y5MzNjYmY5MjQ2NDI3NTZhYTBiOTNkMmZjOThmODdmNGE1MGRkNTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80Yzg5OGVmZi03ODgzLTRiMjMtOTI0My1jMmQ3
MmU2M2I0ZWUvNjUyYjE4NzI5ZGIwNTA5ODJiNmY3NDViNGM3OTE0NzVjODhiYTAw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDhMAwDQYJKoZIhvcNAQELBQADggEBAAP2S3N65dLZ9M9D
c7N8BH94bGP8zNJ3ArszKxd77yFH3ABvOjOZOCdgkphhzp4k1EHEn5dMca0Q3rxU
A4XpTtcMadOMeChSpY+wdbzvHTRRzCHMcdfUOp2DnxvTbIruFsrxrcejj5oHDf06
vIolZObQv6rRwnTdkCY8TbjE9QEsdG1tyN9oRGklnblPnx20kNqJWr7hG0DsZ+Mn
cC41qElgw0Op5EtJwfB9/5ktGL0BROvpD+Wv/moPwZ7sV0v2YPHOD7UCvgcGaxKC
sJsO5TP6WcetJo4jkcUBcqLRoNC6wWxxZC+GL9TLsNUWupK3KHEdMFr1uvGLoHso
bF4Clck=
-----END CERTIFICATE-----