Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/04f6678104c6698e6a9307d11ce51f3ba45820d7.roa
File:                     04f6678104c6698e6a9307d11ce51f3ba45820d7.roa (raw, json)
Hash identifier:          L8xxQg0oeVu3E7Y4tdvdxwjY/UUyRHBHYkhPijp6Dro=
Subject key identifier:   FF:12:D1:AE:4E:EB:1C:88:84:84:D1:FE:89:39:E5:4C:44:E2:BA:5E
Certificate issuer:       /CN=0fe522831a6a9d7d5f746b14f259a0f8a24782ac
Certificate serial:       0D3C1B
Authority key identifier: BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/04f6678104c6698e6a9307d11ce51f3ba45820d7.roa
Signing time:             Wed 24 Mar 2021 14:31:24 +0000
ROA not before:           Wed 24 Mar 2021 14:31:24 +0000
ROA not after:            Tue 24 Mar 2026 14:31:24 +0000
asID:                     52399
IP address blocks:        2803:6d40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867355 (0xd3c1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe522831a6a9d7d5f746b14f259a0f8a24782ac
        Validity
            Not Before: Mar 24 14:31:24 2021 GMT
            Not After : Mar 24 14:31:24 2026 GMT
        Subject: CN=04f6678104c6698e6a9307d11ce51f3ba45820d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:28:53:7b:47:34:3e:2d:d2:b5:ad:75:f7:
                    39:bd:9a:c5:ee:09:e5:20:49:b0:dd:ee:95:6f:84:
                    e4:f7:e8:b5:e2:16:79:ec:5d:82:b0:6a:bc:ca:74:
                    da:10:83:36:0a:24:22:d8:52:5b:ae:b5:2a:49:45:
                    2f:40:25:df:c9:81:97:d5:3f:bb:4c:40:1f:d4:65:
                    6d:bb:4e:78:4d:2c:d6:5a:41:d0:83:25:1c:14:f4:
                    a0:a1:84:df:5b:eb:0e:51:5a:ec:37:26:92:b4:45:
                    38:7e:1d:8a:84:85:f9:bc:0e:67:91:10:50:81:3d:
                    8a:82:34:8f:dd:3f:ab:e4:2d:c8:75:f2:82:9f:bb:
                    d3:61:7b:44:37:dd:49:46:92:f0:7a:fd:29:1c:e7:
                    60:a7:c1:6d:2d:aa:e4:92:62:89:90:0c:2a:48:d7:
                    dd:01:1b:94:2e:bb:5a:65:f5:c3:ca:1d:21:7b:f2:
                    ba:a9:1c:05:7a:4b:56:fa:e4:45:a0:f8:47:2f:f5:
                    05:96:b7:c2:0c:aa:8e:fc:bc:0b:8e:34:3a:e1:dc:
                    41:c3:09:cd:b9:42:61:58:74:ab:15:a2:12:c5:36:
                    77:ee:43:86:81:24:37:91:a1:c0:79:ab:73:0a:0c:
                    62:b2:0a:81:30:48:69:3f:bb:8a:fc:fe:3e:ac:40:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:12:D1:AE:4E:EB:1C:88:84:84:D1:FE:89:39:E5:4C:44:E2:BA:5E
            X509v3 Authority Key Identifier:
                keyid:BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/04f6678104c6698e6a9307d11ce51f3ba45820d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:82:b3:ba:7a:86:26:a6:e7:e2:24:f7:f9:15:ed:4f:dc:4f:
         6b:08:b5:ac:3f:3b:28:35:8e:3d:16:56:cd:0f:6b:82:78:09:
         23:dd:9a:4d:e2:5c:b9:3d:89:ac:f9:a0:e5:3b:c1:22:3f:4a:
         4c:8b:27:7a:7a:b2:c5:15:75:09:a1:3f:8c:1a:3b:6e:78:85:
         58:80:d7:7c:c2:0e:97:af:ab:2c:f9:2d:0c:0c:a5:bb:54:d7:
         ed:37:f9:11:95:24:d1:37:a1:d3:9f:82:78:bb:bb:14:ee:bc:
         c2:a0:53:a6:6c:4b:5f:f8:86:18:63:3b:2a:0f:08:93:ad:ca:
         a0:59:f7:d5:e2:d8:e4:73:69:51:8b:f6:15:61:45:2d:91:72:
         60:ab:b8:2d:53:30:d6:0c:26:b0:85:b7:93:18:7e:99:75:a2:
         08:b9:64:1d:2a:3e:5c:34:e5:26:08:0d:fa:02:f2:e6:d8:3a:
         53:eb:f4:1d:c5:0b:1c:9c:58:17:02:6e:69:9a:07:1b:91:c6:
         e6:ca:6a:04:7b:60:c8:81:bf:3d:4f:f9:11:bd:c9:98:b4:2a:
         c3:64:22:06:4d:4c:1a:1d:00:3a:2f:4f:18:07:6e:87:31:35:
         cf:93:53:43:20:19:15:0f:68:f0:08:34:29:59:a1:b0:c9:ab:
         a2:89:04:a9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDTwbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
ZTUyMjgzMWE2YTlkN2Q1Zjc0NmIxNGYyNTlhMGY4YTI0NzgyYWMwHhcNMjEwMzI0
MTQzMTI0WhcNMjYwMzI0MTQzMTI0WjAzMTEwLwYDVQQDEygwNGY2Njc4MTA0YzY2
OThlNmE5MzA3ZDExY2U1MWYzYmE0NTgyMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkmsoU3tHND4t0rWtdfc5vZrF7gnlIEmw3e6Vb4Tk9+i14hZ5
7F2CsGq8ynTaEIM2CiQi2FJbrrUqSUUvQCXfyYGX1T+7TEAf1GVtu054TSzWWkHQ
gyUcFPSgoYTfW+sOUVrsNyaStEU4fh2KhIX5vA5nkRBQgT2KgjSP3T+r5C3IdfKC
n7vTYXtEN91JRpLwev0pHOdgp8FtLarkkmKJkAwqSNfdARuULrtaZfXDyh0he/K6
qRwFektW+uRFoPhHL/UFlrfCDKqO/LwLjjQ64dxBwwnNuUJhWHSrFaISxTZ37kOG
gSQ3kaHAeatzCgxisgqBMEhpP7uK/P4+rEBqSQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFP8S0a5O6xyIhITR/ok55UxE4rpeMB8GA1UdIwQYMBaAFL6f4gCHl9q1vz2D
S3LSx+jwjm1ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGZlNTIy
ODMxYTZhOWQ3ZDVmNzQ2YjE0ZjI1OWEwZjhhMjQ3ODJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIzM2ZiZjEtMzI2OS00OTZhLWE5M2QtZDNmNjlk
NzNhODVhLzA0ZjY2NzgxMDRjNjY5OGU2YTkzMDdkMTFjZTUxZjNiYTQ1ODIwZDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjMzZmJmMS0zMjY5LTQ5NmEtYTkzZC1kM2Y2
OWQ3M2E4NWEvMGZlNTIyODMxYTZhOWQ3ZDVmNzQ2YjE0ZjI1OWEwZjhhMjQ3ODJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDbUAwDQYJKoZIhvcNAQELBQADggEBADiCs7p6hiam5+Ik
9/kV7U/cT2sItaw/Oyg1jj0WVs0Pa4J4CSPdmk3iXLk9iaz5oOU7wSI/SkyLJ3p6
ssUVdQmhP4waO254hViA13zCDpevqyz5LQwMpbtU1+03+RGVJNE3odOfgni7uxTu
vMKgU6ZsS1/4hhhjOyoPCJOtyqBZ99Xi2ORzaVGL9hVhRS2RcmCruC1TMNYMJrCF
t5MYfpl1ogi5ZB0qPlw05SYIDfoC8ubYOlPr9B3FCxycWBcCbmmaBxuRxubKagR7
YMiBvz1P+RG9yZi0KsNkIgZNTBodADovTxgHbocxNc+TU0MgGRUPaPAINClZobDJ
q6KJBKk=
-----END CERTIFICATE-----