Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/df08e4ae1d1901edd9dea56ddb2114ee15b23e6e.roa
File:                     df08e4ae1d1901edd9dea56ddb2114ee15b23e6e.roa (raw, json)
Hash identifier:          KffAE1IF55Yi+++zDhxqdVOc5y1hChLSOSIfWT28ArI=
Subject key identifier:   B1:9E:2F:0E:B3:91:50:E8:CB:DD:6E:BE:02:3D:F9:A8:9F:6E:CD:75
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       9DBC
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/df08e4ae1d1901edd9dea56ddb2114ee15b23e6e.roa
Signing time:             Sun 18 Jul 2021 23:15:48 +0000
ROA not before:           Tue 13 Jul 2021 03:00:00 +0000
ROA not after:            Thu 13 Jul 2023 03:00:00 +0000
asID:                     271927
IP address blocks:        2803:ea10:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40380 (0x9dbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jul 13 03:00:00 2021 GMT
            Not After : Jul 13 03:00:00 2023 GMT
        Subject: CN=df08e4ae1d1901edd9dea56ddb2114ee15b23e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:94:88:a0:a1:9d:6e:de:d3:42:f2:94:6f:
                    8f:2a:ef:31:0b:06:00:b5:93:b9:8c:ae:85:4e:5a:
                    29:4a:9b:24:f6:52:47:2a:cf:fa:4b:4b:9a:74:12:
                    9c:b7:6f:51:f5:04:41:6f:81:f2:c3:00:09:5d:93:
                    76:06:92:36:35:07:b4:d8:d9:df:1a:05:0a:d3:a0:
                    57:fd:f0:08:0a:3a:1c:8f:ac:19:fa:74:75:e5:79:
                    14:7d:e3:18:e0:32:25:6e:bc:fd:69:83:f2:9a:8d:
                    ec:da:16:83:ee:7b:99:5c:06:2a:b8:20:5f:77:fb:
                    4f:f8:d2:dc:51:b7:5c:35:a4:73:53:f5:d4:89:ae:
                    2c:cf:b5:e5:1c:84:c8:82:22:57:22:68:21:8c:62:
                    93:e3:aa:b5:b7:d8:04:94:fd:5a:46:4a:bb:a8:0c:
                    95:4b:ca:e0:99:75:41:3f:6d:f0:e6:c1:97:f7:95:
                    33:75:e6:a8:ab:db:9e:dd:a5:5d:b4:29:ab:57:27:
                    9d:3a:4b:fd:d9:5f:e2:9e:3e:21:e0:cd:69:96:72:
                    d6:bd:06:23:48:28:ac:c1:03:db:5a:26:67:5a:54:
                    ab:60:3d:08:a4:8e:2f:a1:e3:de:11:7d:09:29:66:
                    e0:7a:b2:ea:7c:ad:c5:bc:58:cf:e7:e7:a7:00:8c:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9E:2F:0E:B3:91:50:E8:CB:DD:6E:BE:02:3D:F9:A8:9F:6E:CD:75
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/df08e4ae1d1901edd9dea56ddb2114ee15b23e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:12:67:47:9e:a2:4b:ec:34:f1:77:e8:d8:aa:a1:ff:2f:6e:
         80:a1:08:45:0a:68:8a:99:fe:21:c0:64:b3:7a:7a:22:18:46:
         01:36:7f:15:d0:ad:c8:73:ba:37:5a:b1:6e:54:77:46:d8:4c:
         64:0f:d2:c2:4b:92:35:3e:50:f9:e7:4c:d0:db:50:1b:e0:1e:
         eb:1f:03:3e:78:0d:ac:a8:6e:db:1d:d0:cd:4e:fa:a6:99:8c:
         b6:33:4f:14:e7:57:47:99:20:84:5b:f2:bf:25:36:ca:68:48:
         d7:e2:9c:08:09:36:ab:8f:bc:bb:be:a1:5c:58:fc:93:91:b2:
         49:8f:47:9c:0f:29:9f:fd:24:31:cc:0c:8d:90:73:9d:ed:d1:
         4a:3f:8b:bb:e3:a4:04:4a:fa:c4:c1:93:13:80:63:79:df:98:
         c5:55:04:10:d5:a5:9e:9f:b6:11:2c:7a:36:1b:73:6f:ba:13:
         c6:32:31:5a:90:ac:c8:4d:ce:ef:3b:4d:3e:44:c2:da:fb:d5:
         f8:3f:5d:74:67:ce:b5:94:74:0d:bc:de:ab:09:de:a4:8b:64:
         ba:e1:c9:66:41:4f:bb:44:aa:3f:93:13:9b:25:77:f9:d5:6a:
         6c:01:eb:0f:fd:1e:ab:f0:a8:21:7d:62:fb:4b:b9:45:3e:e1:
         d7:21:37:f5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAJ28MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
NzI2M2FlOTk2MDIyYWI1NWUxNGI3ZGI2OWE4NTg1NTdhMWJhYzUwHhcNMjEwNzEz
MDMwMDAwWhcNMjMwNzEzMDMwMDAwWjAzMTEwLwYDVQQDEyhkZjA4ZTRhZTFkMTkw
MWVkZDlkZWE1NmRkYjIxMTRlZTE1YjIzZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnfmUiKChnW7e00LylG+PKu8xCwYAtZO5jK6FTlopSpsk9lJH
Ks/6S0uadBKct29R9QRBb4HywwAJXZN2BpI2NQe02NnfGgUK06BX/fAICjocj6wZ
+nR15XkUfeMY4DIlbrz9aYPymo3s2haD7nuZXAYquCBfd/tP+NLcUbdcNaRzU/XU
ia4sz7XlHITIgiJXImghjGKT46q1t9gElP1aRkq7qAyVS8rgmXVBP23w5sGX95Uz
deaoq9ue3aVdtCmrVyedOkv92V/inj4h4M1plnLWvQYjSCiswQPbWiZnWlSrYD0I
pI4voePeEX0JKWbgerLqfK3FvFjP5+enAIxEzQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLGeLw6zkVDoy91uvgI9+aifbs11MB8GA1UdIwQYMBaAFJUCnDfzt53sfsgK
pfPiSArGdpYHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGI3MjYz
YWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFjNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGUyMzdhMWYtNWM3Zi00MjFmLWFmYzAtNTlmYjRm
MzMwNjk2L2RmMDhlNGFlMWQxOTAxZWRkOWRlYTU2ZGRiMjExNGVlMTViMjNlNmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTIzN2ExZi01YzdmLTQyMWYtYWZjMC01OWZi
NGYzMzA2OTYvNGI3MjYzYWU5OTYwMjJhYjU1ZTE0YjdkYjY5YTg1ODU1N2ExYmFj
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD6hAAATANBgkqhkiG9w0BAQsFAAOCAQEAdRJnR56iS+w0
8Xfo2Kqh/y9ugKEIRQpoipn+IcBks3p6IhhGATZ/FdCtyHO6N1qxblR3RthMZA/S
wkuSNT5Q+edM0NtQG+Ae6x8DPngNrKhu2x3QzU76ppmMtjNPFOdXR5kghFvyvyU2
ymhI1+KcCAk2q4+8u76hXFj8k5GySY9HnA8pn/0kMcwMjZBzne3RSj+Lu+OkBEr6
xMGTE4Bjed+YxVUEENWlnp+2ESx6Nhtzb7oTxjIxWpCsyE3O7ztNPkTC2vvV+D9d
dGfOtZR0DbzeqwnepItkuuHJZkFPu0SqP5MTmyV3+dVqbAHrD/0eq/CoIX1i+0u5
RT7h1yE39Q==
-----END CERTIFICATE-----