Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/b88767fbecbd015d889cf17853baa594143619eb.roa
File:                     b88767fbecbd015d889cf17853baa594143619eb.roa (raw, json)
Hash identifier:          +Us7JZZDAD1cML0nG+wpiWmmnMhPqmSi3/Wz0S+ODc4=
Subject key identifier:   C6:9B:D1:5C:41:B5:F3:E8:C6:34:72:7D:31:DC:FC:77:F6:D7:B2:CB
Certificate issuer:       /CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
Certificate serial:       07FFF3
Authority key identifier: C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/b88767fbecbd015d889cf17853baa594143619eb.roa
Signing time:             Wed 24 Mar 2021 14:29:41 +0000
ROA not before:           Wed 24 Mar 2021 14:29:40 +0000
ROA not after:            Tue 24 Mar 2026 14:29:40 +0000
asID:                     28093
IP address blocks:        2803:6b80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524275 (0x7fff3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
        Validity
            Not Before: Mar 24 14:29:40 2021 GMT
            Not After : Mar 24 14:29:40 2026 GMT
        Subject: CN=b88767fbecbd015d889cf17853baa594143619eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:9b:41:b2:5c:18:20:af:4b:e8:79:a2:2f:
                    5e:5d:07:43:68:c1:05:84:e2:13:fa:0a:2c:e9:4a:
                    24:5c:53:48:4a:20:4e:ca:7e:b1:2d:b5:a3:68:aa:
                    e5:d0:dd:39:99:3f:33:e8:8a:e1:c6:a4:37:f5:2c:
                    1c:a0:92:cd:d7:79:27:ec:dc:76:55:49:7c:90:9e:
                    50:f1:86:e6:6c:af:96:36:71:c8:71:5a:0d:20:c7:
                    5b:59:23:67:db:cd:d1:df:5a:cc:0c:ef:9c:5c:33:
                    25:3e:93:11:75:4c:ef:f7:78:4d:99:b7:92:f4:0d:
                    52:95:42:d3:5c:c8:ae:a9:34:ad:43:98:4e:98:ef:
                    4a:c8:59:0c:bd:30:a6:73:31:29:f9:14:b1:ef:5a:
                    83:fc:4e:88:40:b3:42:3c:30:01:9b:f7:28:e3:40:
                    1b:4e:28:6a:03:52:d0:6c:be:a1:f7:f2:22:6b:26:
                    64:01:f9:4f:0c:b4:0e:62:2e:81:5d:3b:b1:c7:69:
                    0c:82:1a:90:87:c3:7c:d5:64:9e:15:2b:70:cc:17:
                    6f:6e:0c:98:66:e5:7f:3f:56:a8:88:1b:dc:33:04:
                    e4:d9:9b:89:ff:11:05:ce:46:77:f0:80:91:98:58:
                    6b:c9:6a:5c:94:dd:b1:f6:84:d4:65:7d:6d:46:7f:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:D1:5C:41:B5:F3:E8:C6:34:72:7D:31:DC:FC:77:F6:D7:B2:CB
            X509v3 Authority Key Identifier:
                keyid:C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/b88767fbecbd015d889cf17853baa594143619eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/ad1db2aa734e6dcb93a8797a98a422a7f542f512.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:af:08:cf:46:da:6b:dc:4e:bf:ec:96:38:d6:a0:82:86:f6:
         e4:77:4d:ff:be:df:fe:45:31:be:55:29:63:d4:92:0b:b4:8c:
         93:60:2b:67:dc:04:de:5d:00:7e:63:81:a2:bb:f6:a9:89:3a:
         af:13:f5:ab:97:49:e8:0b:c0:4e:7f:8b:9e:96:21:ad:2d:4a:
         03:7f:07:70:fc:83:f3:6a:d2:5f:39:60:d0:20:22:9e:7c:bd:
         9e:91:56:d3:ea:d1:e7:93:34:58:50:d4:78:d6:ad:c7:90:49:
         7c:85:b5:63:c7:f8:cf:82:d4:80:35:65:c5:76:02:af:8b:9f:
         11:32:03:91:d6:99:eb:69:1e:f8:1f:60:99:fb:1c:59:ef:c5:
         c2:31:f7:55:63:54:a9:2b:54:68:bc:74:b6:fb:c6:9d:8c:cb:
         87:2b:0d:5e:84:31:dd:02:50:d6:88:78:40:80:c4:18:a0:cd:
         3d:70:64:6f:4f:75:6d:a5:d2:92:2d:a2:1d:78:bc:b7:42:12:
         b2:de:23:43:5e:c2:99:86:f3:fa:18:e3:b3:41:73:57:4d:52:
         d9:d1:18:c1:bc:c4:50:92:2f:7c:38:09:d0:48:e3:ed:97:25:
         08:d8:52:f6:53:37:1e:d2:84:d8:1e:17:c3:3c:4e:6a:f1:3b:
         99:48:4b:96
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDB//zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
MWRiMmFhNzM0ZTZkY2I5M2E4Nzk3YTk4YTQyMmE3ZjU0MmY1MTIwHhcNMjEwMzI0
MTQyOTQwWhcNMjYwMzI0MTQyOTQwWjAzMTEwLwYDVQQDEyhiODg3NjdmYmVjYmQw
MTVkODg5Y2YxNzg1M2JhYTU5NDE0MzYxOWViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqYGbQbJcGCCvS+h5oi9eXQdDaMEFhOIT+gos6UokXFNISiBO
yn6xLbWjaKrl0N05mT8z6IrhxqQ39SwcoJLN13kn7Nx2VUl8kJ5Q8YbmbK+WNnHI
cVoNIMdbWSNn283R31rMDO+cXDMlPpMRdUzv93hNmbeS9A1SlULTXMiuqTStQ5hO
mO9KyFkMvTCmczEp+RSx71qD/E6IQLNCPDABm/co40AbTihqA1LQbL6h9/IiayZk
AflPDLQOYi6BXTuxx2kMghqQh8N81WSeFStwzBdvbgyYZuV/P1aoiBvcMwTk2ZuJ
/xEFzkZ38ICRmFhryWpclN2x9oTUZX1tRn8D6QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMab0VxBtfPoxjRyfTHc/Hf217LLMB8GA1UdIwQYMBaAFMipL17DIvfrSR6q
C7hrMaijLO7EMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWQxZGIy
YWE3MzRlNmRjYjkzYTg3OTdhOThhNDIyYTdmNTQyZjUxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWRhYWQ5YTctMjMyZC00ZmU5LWI0ZDQtOWJmYTEw
NWIxNDE3L2I4ODc2N2ZiZWNiZDAxNWQ4ODljZjE3ODUzYmFhNTk0MTQzNjE5ZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZGFhZDlhNy0yMzJkLTRmZTktYjRkNC05YmZh
MTA1YjE0MTcvYWQxZGIyYWE3MzRlNmRjYjkzYTg3OTdhOThhNDIyYTdmNTQyZjUx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDa4AwDQYJKoZIhvcNAQELBQADggEBADivCM9G2mvcTr/s
ljjWoIKG9uR3Tf++3/5FMb5VKWPUkgu0jJNgK2fcBN5dAH5jgaK79qmJOq8T9auX
SegLwE5/i56WIa0tSgN/B3D8g/Nq0l85YNAgIp58vZ6RVtPq0eeTNFhQ1HjWrceQ
SXyFtWPH+M+C1IA1ZcV2Aq+LnxEyA5HWmetpHvgfYJn7HFnvxcIx91VjVKkrVGi8
dLb7xp2My4crDV6EMd0CUNaIeECAxBigzT1wZG9PdW2l0pItoh14vLdCErLeI0Ne
wpmG8/oY47NBc1dNUtnRGMG8xFCSL3w4CdBI4+2XJQjYUvZTNx7ShNgeF8M8Tmrx
O5lIS5Y=
-----END CERTIFICATE-----