Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/5a72ce60853b42308de34f691e705a8651a84a34.roa
File:                     5a72ce60853b42308de34f691e705a8651a84a34.roa (raw, json)
Hash identifier:          P3TDwETLsgmy+RBX8XQI624uonyb+TlXZKGrzW1DWr8=
Subject key identifier:   D9:44:5C:A8:31:45:75:F5:9B:DD:43:DB:E8:0E:F9:C1:DD:42:B7:FB
Certificate issuer:       /CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
Certificate serial:       0D0CD1
Authority key identifier: BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/5a72ce60853b42308de34f691e705a8651a84a34.roa
Signing time:             Wed 24 Mar 2021 14:37:24 +0000
ROA not before:           Wed 24 Mar 2021 14:37:24 +0000
ROA not after:            Tue 24 Mar 2026 14:37:24 +0000
asID:                     262184
IP address blocks:        2803:9ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855249 (0xd0cd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bba00c9e212b68aac90a0d26d072a417cd9bbab
        Validity
            Not Before: Mar 24 14:37:24 2021 GMT
            Not After : Mar 24 14:37:24 2026 GMT
        Subject: CN=5a72ce60853b42308de34f691e705a8651a84a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:7e:17:37:4e:54:52:12:46:4d:cc:cd:af:
                    3b:ef:a6:64:ab:b0:43:ba:4a:96:ba:03:16:f7:70:
                    9b:26:90:56:fc:e4:42:98:27:77:2c:15:d2:fa:c0:
                    fb:58:12:fd:e7:2f:ea:4b:68:7c:72:ed:5d:ed:50:
                    45:2e:a3:08:50:5c:8a:8b:48:4d:f7:98:ec:db:56:
                    02:c2:11:0b:a9:4d:85:6d:fa:b5:50:04:a2:4b:52:
                    3d:6c:12:ab:93:20:f1:79:91:ce:e8:7a:a4:78:3c:
                    7c:67:40:8f:6e:48:90:48:c1:3a:01:eb:fe:3a:b2:
                    67:53:19:0d:fa:66:df:de:05:ff:9e:35:34:46:c3:
                    05:d2:22:ca:64:0f:b0:3c:8b:60:12:e7:30:5e:2c:
                    cd:a8:ea:8e:9c:a9:6f:37:fd:9c:23:28:dc:4e:2c:
                    55:c8:84:83:3b:3a:c9:d8:ce:0f:06:ae:6e:b5:b8:
                    1f:f5:70:b8:ec:bd:a6:c4:e1:1c:74:3a:ed:46:de:
                    58:e0:9f:49:d9:ec:2a:45:42:34:81:44:46:47:6b:
                    7e:8e:9b:0d:0d:1d:5b:d9:95:6c:44:fd:fe:a8:dd:
                    b8:d6:bd:83:a0:9f:d6:b2:04:81:4b:f8:6d:1f:dc:
                    d5:0e:73:19:2f:8c:4b:20:45:ff:b8:1d:65:8c:05:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:44:5C:A8:31:45:75:F5:9B:DD:43:DB:E8:0E:F9:C1:DD:42:B7:FB
            X509v3 Authority Key Identifier:
                keyid:BD:89:59:86:22:5C:5F:7F:D7:F1:AB:31:56:D0:93:42:4D:9B:52:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bba00c9e212b68aac90a0d26d072a417cd9bbab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/5a72ce60853b42308de34f691e705a8651a84a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/550a25a6-947a-40cb-afe1-00cbe658b906/0bba00c9e212b68aac90a0d26d072a417cd9bbab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:34:e3:91:0f:e2:b2:e6:6c:63:a1:43:88:ec:fe:b3:48:d4:
         12:8d:59:90:d1:75:f5:8a:e9:df:d9:0a:65:73:95:e1:a3:0b:
         98:2f:32:77:75:fb:b6:e0:72:06:92:f1:e1:e3:76:79:3f:30:
         42:63:ea:9b:8a:8d:5f:63:97:61:aa:7c:61:bd:4f:59:a5:9f:
         fa:57:14:94:43:0f:db:59:7e:84:5e:d2:32:36:e7:13:63:35:
         9d:ff:9d:1a:10:74:8b:ac:9a:96:df:98:8c:41:06:01:b8:b0:
         54:b0:a0:a0:f9:ac:e3:a5:34:0c:bb:62:a4:81:9b:83:05:dd:
         65:8d:61:3f:91:f9:55:2e:45:23:16:62:91:a2:28:4d:5d:45:
         13:2a:e1:3f:9b:4f:06:10:ec:54:40:66:88:45:b2:e0:06:c0:
         53:88:7b:43:3b:42:73:5f:bc:81:7f:90:2d:32:4e:71:96:a8:
         98:2f:61:be:1b:6c:f4:58:8c:6c:6b:09:75:cc:9e:28:31:3f:
         bb:5d:a1:bc:56:4e:80:51:b1:24:1d:9a:5a:19:c8:2d:ff:42:
         20:9c:2a:22:af:a9:7a:d4:59:b5:e8:b7:3e:33:27:f4:94:9a:
         cf:18:27:80:b3:ba:f3:11:3e:ac:a8:ef:06:89:9d:47:7a:f7:
         5a:fa:a9:1b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDQzRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBi
YmEwMGM5ZTIxMmI2OGFhYzkwYTBkMjZkMDcyYTQxN2NkOWJiYWIwHhcNMjEwMzI0
MTQzNzI0WhcNMjYwMzI0MTQzNzI0WjAzMTEwLwYDVQQDEyg1YTcyY2U2MDg1M2I0
MjMwOGRlMzRmNjkxZTcwNWE4NjUxYTg0YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwgh+FzdOVFISRk3Mza8776Zkq7BDukqWugMW93CbJpBW/ORC
mCd3LBXS+sD7WBL95y/qS2h8cu1d7VBFLqMIUFyKi0hN95js21YCwhELqU2Fbfq1
UASiS1I9bBKrkyDxeZHO6HqkeDx8Z0CPbkiQSME6Aev+OrJnUxkN+mbf3gX/njU0
RsMF0iLKZA+wPItgEucwXizNqOqOnKlvN/2cIyjcTixVyISDOzrJ2M4PBq5utbgf
9XC47L2mxOEcdDrtRt5Y4J9J2ewqRUI0gURGR2t+jpsNDR1b2ZVsRP3+qN241r2D
oJ/WsgSBS/htH9zVDnMZL4xLIEX/uB1ljAVvawIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFNlEXKgxRXX1m91D2+gO+cHdQrf7MB8GA1UdIwQYMBaAFL2JWYYiXF9/1/Gr
MVbQk0JNm1JqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGJiYTAw
YzllMjEyYjY4YWFjOTBhMGQyNmQwNzJhNDE3Y2Q5YmJhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTUwYTI1YTYtOTQ3YS00MGNiLWFmZTEtMDBjYmU2
NThiOTA2LzVhNzJjZTYwODUzYjQyMzA4ZGUzNGY2OTFlNzA1YTg2NTFhODRhMzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NTBhMjVhNi05NDdhLTQwY2ItYWZlMS0wMGNi
ZTY1OGI5MDYvMGJiYTAwYzllMjEyYjY4YWFjOTBhMGQyNmQwNzJhNDE3Y2Q5YmJh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDnsAwDQYJKoZIhvcNAQELBQADggEBAJo045EP4rLmbGOh
Q4js/rNI1BKNWZDRdfWK6d/ZCmVzleGjC5gvMnd1+7bgcgaS8eHjdnk/MEJj6puK
jV9jl2GqfGG9T1mln/pXFJRDD9tZfoRe0jI25xNjNZ3/nRoQdIusmpbfmIxBBgG4
sFSwoKD5rOOlNAy7YqSBm4MF3WWNYT+R+VUuRSMWYpGiKE1dRRMq4T+bTwYQ7FRA
ZohFsuAGwFOIe0M7QnNfvIF/kC0yTnGWqJgvYb4bbPRYjGxrCXXMnigxP7tdobxW
ToBRsSQdmloZyC3/QiCcKiKvqXrUWbXotz4zJ/SUms8YJ4CzuvMRPqyo7waJnUd6
91r6qRs=
-----END CERTIFICATE-----