Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/b2a4fdccca7e4f353ae21e471d20d192890044dd.roa
File:                     b2a4fdccca7e4f353ae21e471d20d192890044dd.roa (raw, json)
Hash identifier:          YVTwXOb58yjB6EDzg4JlspKzrbMnQB1OuJqipJss+BI=
Subject key identifier:   CA:D7:26:C2:C3:12:CF:67:37:42:D9:1C:B6:C2:5E:E6:07:C1:65:33
Certificate issuer:       /CN=16e5ae4164aa29d5bd6483552f9d80c8333d29b9
Certificate serial:       10259B
Authority key identifier: BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/b2a4fdccca7e4f353ae21e471d20d192890044dd.roa
Signing time:             Mon 20 Sep 2021 11:27:09 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     267845
IP address blocks:        2803:4c60::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058203 (0x10259b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e5ae4164aa29d5bd6483552f9d80c8333d29b9
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=b2a4fdccca7e4f353ae21e471d20d192890044dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:cd:80:85:d9:8d:9e:f1:9a:73:3f:47:e9:
                    8d:b9:74:59:af:64:f2:a9:85:af:81:49:d8:8d:01:
                    d8:08:c9:45:14:c6:18:4f:96:2e:a8:fc:6c:d1:00:
                    8d:ac:31:3d:de:44:57:2f:d1:b6:86:db:ca:49:da:
                    f1:4b:e0:d3:a9:60:79:58:f8:6d:ad:70:ae:fe:33:
                    40:fc:dc:55:aa:58:26:2c:81:c1:6f:44:5b:74:b1:
                    fe:2c:dc:e9:67:45:53:49:4c:ff:32:20:65:c2:e3:
                    a8:b3:e8:32:df:ec:cf:57:0f:f6:61:47:33:ef:24:
                    61:5f:37:a8:c9:a0:9d:f6:a8:66:c4:dd:f3:6f:b8:
                    0f:1c:29:c5:1b:7e:1a:d5:e8:22:29:63:1e:b7:9a:
                    ee:12:19:2b:90:7d:64:6a:5d:27:85:19:fa:db:3e:
                    1b:6a:84:cf:92:f1:29:5f:2a:9d:d1:d8:50:4c:25:
                    7b:0c:c1:6c:27:76:83:be:51:ac:00:78:bc:d7:bf:
                    19:29:c3:e3:87:f5:d8:dd:12:46:b9:0f:12:54:8f:
                    5d:44:ea:27:5f:2a:e7:da:e5:7f:ef:57:81:96:9d:
                    3e:09:3a:bd:d1:79:7d:ff:39:1f:c6:dc:cf:4d:a7:
                    ef:f6:1d:8a:24:5e:5b:17:4d:3e:a1:7e:e5:f3:d7:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:26:C2:C3:12:CF:67:37:42:D9:1C:B6:C2:5E:E6:07:C1:65:33
            X509v3 Authority Key Identifier:
                keyid:BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/b2a4fdccca7e4f353ae21e471d20d192890044dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c60::/45

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:1f:17:15:16:b8:b9:a7:72:da:11:d0:81:78:cf:bb:2c:
         28:00:00:d7:6c:fe:cd:fd:93:d2:19:ab:16:db:c8:c9:f4:56:
         44:e3:58:00:b2:4e:9d:be:f7:80:13:4f:58:b5:1c:df:6e:3d:
         20:e8:1e:f5:6e:5f:ff:9b:6a:cc:e9:61:2f:98:3e:40:b4:01:
         cb:62:ba:59:e7:cd:f1:81:79:ab:6c:94:5e:cf:90:fe:af:d8:
         98:94:63:4e:53:ff:7e:64:44:95:08:85:58:66:84:45:13:2f:
         03:e0:cb:aa:af:30:4b:a0:af:1f:e6:31:87:43:17:3e:0f:59:
         17:3b:50:25:28:e9:1b:6e:91:f2:4b:6e:23:df:79:b7:06:18:
         4e:a0:18:9f:8c:f5:ef:f5:10:b2:6d:60:a3:b0:36:fc:b0:bd:
         4c:57:78:db:b1:4a:3a:f1:2a:46:31:45:53:45:0b:91:0d:ea:
         63:a5:20:85:50:ff:50:25:bd:16:5b:d6:a0:4f:ee:e6:e5:c1:
         51:e4:e9:16:79:e0:9c:59:e3:b7:7e:ad:bf:e1:ea:0e:51:13:
         0b:03:a4:90:e4:0b:2a:58:4f:90:9f:58:9f:24:1d:8e:37:7b:
         ce:35:ae:ce:4a:5e:5c:c5:e7:9a:fe:10:53:16:80:b8:07:cd:
         eb:52:af:17
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDECWbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
ZTVhZTQxNjRhYTI5ZDViZDY0ODM1NTJmOWQ4MGM4MzMzZDI5YjkwHhcNMjEwOTIw
MDMwMDAwWhcNMjMwOTIwMDMwMDAwWjAzMTEwLwYDVQQDEyhiMmE0ZmRjY2NhN2U0
ZjM1M2FlMjFlNDcxZDIwZDE5Mjg5MDA0NGRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt7XNgIXZjZ7xmnM/R+mNuXRZr2TyqYWvgUnYjQHYCMlFFMYY
T5YuqPxs0QCNrDE93kRXL9G2htvKSdrxS+DTqWB5WPhtrXCu/jNA/NxVqlgmLIHB
b0RbdLH+LNzpZ0VTSUz/MiBlwuOos+gy3+zPVw/2YUcz7yRhXzeoyaCd9qhmxN3z
b7gPHCnFG34a1egiKWMet5ruEhkrkH1kal0nhRn62z4baoTPkvEpXyqd0dhQTCV7
DMFsJ3aDvlGsAHi8178ZKcPjh/XY3RJGuQ8SVI9dROonXyrn2uV/71eBlp0+CTq9
0Xl9/zkfxtzPTafv9h2KJF5bF00+oX7l89cvNwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMrXJsLDEs9nN0LZHLbCXuYHwWUzMB8GA1UdIwQYMBaAFLzZLmjeuXnw6nRd
HcabEQkJxoCSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTZlNWFl
NDE2NGFhMjlkNWJkNjQ4MzU1MmY5ZDgwYzgzMzNkMjliOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWFiYzY4N2MtYzgzMi00Nzg2LWJjYzItZTAxODk0
YWQyYTBhL2IyYTRmZGNjY2E3ZTRmMzUzYWUyMWU0NzFkMjBkMTkyODkwMDQ0ZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YWJjNjg3Yy1jODMyLTQ3ODYtYmNjMi1lMDE4
OTRhZDJhMGEvMTZlNWFlNDE2NGFhMjlkNWJkNjQ4MzU1MmY5ZDgwYzgzMzNkMjli
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHAygDTGAAADANBgkqhkiG9w0BAQsFAAOCAQEAAjofFxUWuLmn
ctoR0IF4z7ssKAAA12z+zf2T0hmrFtvIyfRWRONYALJOnb73gBNPWLUc3249IOge
9W5f/5tqzOlhL5g+QLQBy2K6WefN8YF5q2yUXs+Q/q/YmJRjTlP/fmRElQiFWGaE
RRMvA+DLqq8wS6CvH+Yxh0MXPg9ZFztQJSjpG26R8ktuI995twYYTqAYn4z17/UQ
sm1go7A2/LC9TFd427FKOvEqRjFFU0ULkQ3qY6UghVD/UCW9FlvWoE/u5uXBUeTp
FnngnFnjt36tv+HqDlETCwOkkOQLKlhPkJ9YnyQdjjd7zjWuzkpeXMXnmv4QUxaA
uAfN61KvFw==
-----END CERTIFICATE-----