Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa
File:                     c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa (raw, json)
Hash identifier:          SpTvBg+ca/gctbzk3wNyqjOrkLKTyWdshhfJFWfH5iw=
Subject key identifier:   76:E5:24:17:B7:A0:F5:47:F2:63:24:98:E5:C5:91:77:AB:6A:50:8B
Certificate issuer:       /CN=aa134f8d8f5b4c61a240144257c6a28362862251
Certificate serial:       0D8F38
Authority key identifier: 6B:74:19:97:DF:25:D3:EF:E6:CB:6F:D3:D6:58:F8:36:3A:EE:C4:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa134f8d8f5b4c61a240144257c6a28362862251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa
Signing time:             Wed 24 Mar 2021 14:37:17 +0000
ROA not before:           Wed 24 Mar 2021 14:37:17 +0000
ROA not after:            Tue 24 Mar 2026 14:37:17 +0000
asID:                     263785
IP address blocks:        2803:b440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888632 (0xd8f38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa134f8d8f5b4c61a240144257c6a28362862251
        Validity
            Not Before: Mar 24 14:37:17 2021 GMT
            Not After : Mar 24 14:37:17 2026 GMT
        Subject: CN=c808234c9b388a3ada5cd84d5c7bafa51a4990ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:8f:90:ca:5f:3e:4a:1a:f2:a3:67:78:62:
                    cf:3f:cf:e2:b4:e9:6f:c5:f8:52:4c:59:5e:da:13:
                    a7:47:cd:b4:9a:43:8a:b3:1b:7a:8f:db:08:92:c7:
                    85:3f:c3:5e:3e:5e:79:d0:a4:ae:5f:a7:70:8a:db:
                    89:3e:b2:b7:e7:e9:52:fd:4a:de:44:4c:8d:fc:78:
                    2d:30:a4:d3:95:b5:c1:98:85:c2:dc:b4:e0:76:b0:
                    a5:6b:11:06:91:d2:d2:5f:10:b7:9f:b0:bc:c3:2b:
                    09:67:2f:96:c9:8e:77:55:4d:ae:c6:52:b3:a1:e6:
                    bc:44:29:34:74:10:77:68:47:01:b7:4e:0b:92:45:
                    cb:e0:3e:89:10:55:50:7d:c3:2c:3a:9b:6b:2d:b3:
                    e4:43:ed:59:76:10:61:c2:db:37:d5:29:52:43:7a:
                    b5:58:bf:f7:0c:6f:e4:9c:12:cc:6a:d2:ff:68:b9:
                    ff:12:7f:6f:b0:25:48:9a:bf:6a:82:a4:f5:e1:e2:
                    30:9a:fe:32:57:a5:91:41:90:ee:29:6a:e9:6b:ae:
                    aa:1b:a3:b4:a0:cd:c9:30:30:63:8b:2f:8f:67:d9:
                    aa:7d:bc:e8:69:1c:39:d1:30:0e:66:cc:0b:93:38:
                    95:c9:58:90:24:98:55:3e:ba:eb:2c:9e:d8:ed:a8:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E5:24:17:B7:A0:F5:47:F2:63:24:98:E5:C5:91:77:AB:6A:50:8B
            X509v3 Authority Key Identifier:
                keyid:6B:74:19:97:DF:25:D3:EF:E6:CB:6F:D3:D6:58:F8:36:3A:EE:C4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa134f8d8f5b4c61a240144257c6a28362862251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/c808234c9b388a3ada5cd84d5c7bafa51a4990ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e1a2898-5ff4-456c-8898-61d61e8e0fe5/aa134f8d8f5b4c61a240144257c6a28362862251.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b440::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:2b:b5:e0:d3:ab:4d:d8:b3:a2:b5:a5:ae:15:0e:e8:47:c1:
         34:d6:25:3b:d4:0c:f1:3a:88:1a:50:79:cd:a7:41:cd:c3:48:
         36:5b:8e:78:0f:47:bf:56:48:87:01:27:77:74:93:97:cc:38:
         b5:04:fd:77:1f:a3:a4:d8:60:f3:81:1e:75:f4:56:20:22:ee:
         0e:c9:da:83:6b:eb:77:a2:bb:3b:b8:be:2f:a3:21:46:09:b8:
         c0:5e:02:be:7a:c8:91:1e:81:a8:96:27:0c:41:f2:1c:5d:14:
         fc:24:91:29:a2:4d:32:3a:9e:96:a8:b1:de:66:a0:3e:c0:9b:
         d5:09:d7:c2:74:f2:1c:e8:95:a5:6c:7a:e2:51:a0:ed:62:78:
         e4:01:eb:eb:cd:56:b0:10:ff:83:17:64:ac:74:c3:38:aa:a0:
         23:d7:e6:f0:00:49:bc:39:ac:8a:4e:ca:6c:41:4c:4a:20:37:
         63:5f:88:4f:d2:fe:ef:67:9f:04:d7:d0:7b:42:bb:42:82:23:
         67:d4:34:42:4d:8e:73:0a:1c:8f:24:0a:8c:c5:58:94:3e:59:
         43:ef:b1:14:61:c2:d1:43:21:b1:8f:7c:20:de:6c:8a:fb:f4:
         ed:83:8c:bc:32:46:05:cf:cd:5e:36:6d:98:3c:64:6d:db:1a:
         f1:14:31:90
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDY84MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
MTM0ZjhkOGY1YjRjNjFhMjQwMTQ0MjU3YzZhMjgzNjI4NjIyNTEwHhcNMjEwMzI0
MTQzNzE3WhcNMjYwMzI0MTQzNzE3WjAzMTEwLwYDVQQDEyhjODA4MjM0YzliMzg4
YTNhZGE1Y2Q4NGQ1YzdiYWZhNTFhNDk5MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApvCPkMpfPkoa8qNneGLPP8/itOlvxfhSTFle2hOnR820mkOK
sxt6j9sIkseFP8NePl550KSuX6dwituJPrK35+lS/UreREyN/HgtMKTTlbXBmIXC
3LTgdrClaxEGkdLSXxC3n7C8wysJZy+WyY53VU2uxlKzoea8RCk0dBB3aEcBt04L
kkXL4D6JEFVQfcMsOptrLbPkQ+1ZdhBhwts31SlSQ3q1WL/3DG/knBLMatL/aLn/
En9vsCVImr9qgqT14eIwmv4yV6WRQZDuKWrpa66qG6O0oM3JMDBjiy+PZ9mqfbzo
aRw50TAOZswLkziVyViQJJhVPrrrLJ7Y7aimfQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHblJBe3oPVH8mMkmOXFkXeralCLMB8GA1UdIwQYMBaAFGt0GZffJdPv5stv
09ZY+DY67sRoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWExMzRm
OGQ4ZjViNGM2MWEyNDAxNDQyNTdjNmEyODM2Mjg2MjI1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGUxYTI4OTgtNWZmNC00NTZjLTg4OTgtNjFkNjFl
OGUwZmU1L2M4MDgyMzRjOWIzODhhM2FkYTVjZDg0ZDVjN2JhZmE1MWE0OTkwZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTFhMjg5OC01ZmY0LTQ1NmMtODg5OC02MWQ2
MWU4ZTBmZTUvYWExMzRmOGQ4ZjViNGM2MWEyNDAxNDQyNTdjNmEyODM2Mjg2MjI1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDtEAwDQYJKoZIhvcNAQELBQADggEBAEArteDTq03Ys6K1
pa4VDuhHwTTWJTvUDPE6iBpQec2nQc3DSDZbjngPR79WSIcBJ3d0k5fMOLUE/Xcf
o6TYYPOBHnX0ViAi7g7J2oNr63eiuzu4vi+jIUYJuMBeAr56yJEegaiWJwxB8hxd
FPwkkSmiTTI6npaosd5moD7Am9UJ18J08hzolaVseuJRoO1ieOQB6+vNVrAQ/4MX
ZKx0wziqoCPX5vAASbw5rIpOymxBTEogN2NfiE/S/u9nnwTX0HtCu0KCI2fUNEJN
jnMKHI8kCozFWJQ+WUPvsRRhwtFDIbGPfCDebIr79O2DjLwyRgXPzV42bZg8ZG3b
GvEUMZA=
-----END CERTIFICATE-----