Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/b21eecd67e126669f5e42c9c04627d2982aea5e4.roa
File:                     b21eecd67e126669f5e42c9c04627d2982aea5e4.roa (raw, json)
Hash identifier:          gL5u0zFyuKRb7pxkx42m3EECwtgkxXicF/XZr+2h6Zc=
Subject key identifier:   3B:BC:EE:8B:79:D5:93:FB:0C:A2:71:23:9E:5D:8D:B8:07:80:3B:09
Certificate issuer:       /CN=b0dc41738b385a57fce144119e9f086e5efc1042
Certificate serial:       0D02C1
Authority key identifier: D1:AC:D3:9A:54:A4:49:6D:F6:99:E2:43:FC:F0:2E:72:D9:70:B6:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dc41738b385a57fce144119e9f086e5efc1042.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/b21eecd67e126669f5e42c9c04627d2982aea5e4.roa
Signing time:             Wed 24 Mar 2021 14:33:57 +0000
ROA not before:           Wed 24 Mar 2021 14:33:56 +0000
ROA not after:            Tue 24 Mar 2026 14:33:56 +0000
asID:                     21765
IP address blocks:        2801:17:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852673 (0xd02c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dc41738b385a57fce144119e9f086e5efc1042
        Validity
            Not Before: Mar 24 14:33:56 2021 GMT
            Not After : Mar 24 14:33:56 2026 GMT
        Subject: CN=b21eecd67e126669f5e42c9c04627d2982aea5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:c0:81:f0:94:58:f9:a5:d3:12:48:8e:3c:
                    d1:52:aa:c4:00:42:e8:c8:e0:3a:df:50:ff:22:71:
                    58:87:b0:d8:7b:95:2b:42:88:1d:f1:e9:1f:69:fd:
                    15:71:60:8e:e8:6b:20:52:89:1c:58:d5:f1:f2:31:
                    36:d0:1c:7f:08:97:91:6f:7d:f9:af:f0:86:ca:49:
                    1d:9f:eb:1f:15:e4:1e:3a:13:4c:8e:e6:bb:96:6f:
                    cc:42:c3:28:bc:85:33:ff:84:d9:56:e5:3e:fb:07:
                    8c:ba:41:dd:af:00:2c:9d:85:29:9e:56:14:4d:1e:
                    18:a1:21:8c:69:2a:d7:36:66:6b:16:fb:85:af:43:
                    d2:db:45:fb:7d:a8:81:79:56:1f:b0:96:a0:29:ca:
                    6b:4f:0b:45:03:75:9a:f0:ac:34:4c:2f:5f:ab:a9:
                    f0:88:f9:22:12:ff:7c:27:8d:3a:5b:91:00:86:43:
                    dc:67:7c:e4:74:1b:3b:21:c1:c5:89:f7:e4:18:3a:
                    a2:79:ea:7a:05:4d:d2:b6:89:21:6e:49:6f:83:38:
                    14:1d:f6:50:f1:22:95:49:d2:1e:8f:05:33:ae:55:
                    ba:24:a0:80:31:8b:df:f7:17:62:17:44:c5:61:a3:
                    48:03:40:e1:da:26:f2:85:f9:e2:c0:0c:3d:bb:40:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BC:EE:8B:79:D5:93:FB:0C:A2:71:23:9E:5D:8D:B8:07:80:3B:09
            X509v3 Authority Key Identifier:
                keyid:D1:AC:D3:9A:54:A4:49:6D:F6:99:E2:43:FC:F0:2E:72:D9:70:B6:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dc41738b385a57fce144119e9f086e5efc1042.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/b21eecd67e126669f5e42c9c04627d2982aea5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64978138-3b90-4dd8-b7a1-226b2c2d0ae5/b0dc41738b385a57fce144119e9f086e5efc1042.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:7e:2d:7a:bb:a6:60:4a:b5:97:bb:ac:4d:bc:91:67:f7:
         ef:e5:58:f3:54:11:e8:f7:70:e7:c6:8c:e9:bb:43:27:04:0b:
         6d:97:c4:c7:1a:9f:0e:fd:af:f9:5c:0d:e2:c8:cf:ac:67:c9:
         74:22:99:d9:0d:0d:a1:60:9a:d0:6d:0d:6f:33:71:bd:c7:3b:
         50:99:dd:47:ba:c5:0f:d5:06:ea:8f:f9:3a:aa:ea:ed:8f:ec:
         b4:a5:95:60:04:80:c6:ed:b0:db:02:8e:c5:a7:a1:e1:7b:61:
         05:d5:24:a5:0d:1f:26:4f:96:d5:6d:3a:30:a5:4f:f9:6f:bd:
         1d:44:49:18:c8:92:b3:33:e2:94:c8:d4:2e:e5:57:1a:00:32:
         45:d5:14:f0:7a:ac:b9:a0:5b:8d:05:65:96:58:b9:44:a7:9a:
         2f:18:c7:3e:a4:65:2e:ec:38:46:d9:9a:b9:34:27:e0:10:ef:
         cf:44:8c:8b:b3:60:b7:64:fd:78:83:4a:17:d7:fc:27:5f:3d:
         30:ab:4f:61:8b:80:86:5b:ae:86:36:df:5d:33:ad:be:bb:07:
         7f:6b:6b:56:ee:6d:44:69:87:1f:a2:29:7f:d8:27:4a:0d:9a:
         33:35:4d:91:27:d5:38:e9:0e:73:ec:84:be:47:27:9e:46:8d:
         8a:44:14:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDQLBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZGM0MTczOGIzODVhNTdmY2UxNDQxMTllOWYwODZlNWVmYzEwNDIwHhcNMjEwMzI0
MTQzMzU2WhcNMjYwMzI0MTQzMzU2WjAzMTEwLwYDVQQDEyhiMjFlZWNkNjdlMTI2
NjY5ZjVlNDJjOWMwNDYyN2QyOTgyYWVhNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtm3AgfCUWPml0xJIjjzRUqrEAELoyOA631D/InFYh7DYe5Ur
Qogd8ekfaf0VcWCO6GsgUokcWNXx8jE20Bx/CJeRb335r/CGykkdn+sfFeQeOhNM
jua7lm/MQsMovIUz/4TZVuU++weMukHdrwAsnYUpnlYUTR4YoSGMaSrXNmZrFvuF
r0PS20X7faiBeVYfsJagKcprTwtFA3Wa8Kw0TC9fq6nwiPkiEv98J406W5EAhkPc
Z3zkdBs7IcHFiffkGDqieep6BU3StokhbklvgzgUHfZQ8SKVSdIejwUzrlW6JKCA
MYvf9xdiF0TFYaNIA0Dh2ibyhfniwAw9u0CxswIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFDu87ot51ZP7DKJxI55djbgHgDsJMB8GA1UdIwQYMBaAFNGs05pUpElt9pni
Q/zwLnLZcLapMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBkYzQx
NzM4YjM4NWE1N2ZjZTE0NDExOWU5ZjA4NmU1ZWZjMTA0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjQ5NzgxMzgtM2I5MC00ZGQ4LWI3YTEtMjI2YjJj
MmQwYWU1L2IyMWVlY2Q2N2UxMjY2NjlmNWU0MmM5YzA0NjI3ZDI5ODJhZWE1ZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NDk3ODEzOC0zYjkwLTRkZDgtYjdhMS0yMjZi
MmMyZDBhZTUvYjBkYzQxNzM4YjM4NWE1N2ZjZTE0NDExOWU5ZjA4NmU1ZWZjMTA0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABcwADANBgkqhkiG9w0BAQsFAAOCAQEASLZ+LXq7pmBK
tZe7rE28kWf37+VY81QR6Pdw58aM6btDJwQLbZfExxqfDv2v+VwN4sjPrGfJdCKZ
2Q0NoWCa0G0NbzNxvcc7UJndR7rFD9UG6o/5Oqrq7Y/stKWVYASAxu2w2wKOxaeh
4XthBdUkpQ0fJk+W1W06MKVP+W+9HURJGMiSszPilMjULuVXGgAyRdUU8HqsuaBb
jQVllli5RKeaLxjHPqRlLuw4RtmauTQn4BDvz0SMi7Ngt2T9eINKF9f8J189MKtP
YYuAhluuhjbfXTOtvrsHf2trVu5tRGmHH6Ipf9gnSg2aMzVNkSfVOOkOc+yEvkcn
nkaNikQUEA==
-----END CERTIFICATE-----