Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/9743abb8dd49a47f4b2655da3ccb88b5639b6bb4.roa
File:                     9743abb8dd49a47f4b2655da3ccb88b5639b6bb4.roa (raw, json)
Hash identifier:          pGLrA9fbLjVuBEluzep61Xi/RWM+TZwfLkzja0SleqI=
Subject key identifier:   81:2B:77:76:4B:E6:9B:49:B1:2C:C7:AA:72:E8:44:36:35:CF:D9:F9
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       F9D2
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/9743abb8dd49a47f4b2655da3ccb88b5639b6bb4.roa
Signing time:             Mon 25 Oct 2021 13:07:28 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     271956
IP address blocks:        2803:7610:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63954 (0xf9d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=9743abb8dd49a47f4b2655da3ccb88b5639b6bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:9c:fc:c3:8f:b3:7a:52:7f:a7:8f:81:de:
                    1f:6a:52:50:92:d8:a4:1c:99:42:36:50:ac:d6:8c:
                    45:19:ff:54:67:16:15:07:c8:45:cb:f2:6b:df:62:
                    49:9d:72:09:58:c3:97:b1:ef:ea:52:5b:34:b9:ed:
                    75:e7:f8:c7:e4:5d:10:58:d2:31:da:cf:49:95:7f:
                    ce:b5:91:6e:c3:a1:37:92:de:e4:28:29:fa:f8:bc:
                    c1:63:f9:37:eb:e0:d7:76:a1:ce:d4:03:20:7a:f0:
                    c4:b8:40:a2:10:dd:da:63:0e:e8:f3:be:e9:b3:ad:
                    46:df:c3:3a:c9:ff:cd:23:49:dc:15:99:a4:41:d2:
                    14:5a:a2:6e:30:f9:32:d3:ac:1b:18:36:1c:ce:ea:
                    4c:1e:fc:6d:b9:34:97:61:8e:eb:0c:92:be:28:ce:
                    c2:0d:f6:13:f0:6a:4a:48:17:d4:f5:31:e7:33:a4:
                    c9:f5:f2:79:2a:3e:19:68:6f:cf:8a:bc:11:2e:dd:
                    e2:65:b8:45:7b:56:81:2d:15:2f:21:50:e2:d4:8f:
                    57:5b:57:40:50:28:d7:2e:a8:79:60:50:db:7d:f7:
                    d5:c4:97:86:a4:a7:a2:6a:ab:4c:a8:d4:41:97:96:
                    aa:1e:0e:c8:68:05:36:14:c1:30:cb:8b:1c:0c:57:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:77:76:4B:E6:9B:49:B1:2C:C7:AA:72:E8:44:36:35:CF:D9:F9
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/9743abb8dd49a47f4b2655da3ccb88b5639b6bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:5a:7c:ed:a1:86:ad:80:33:12:07:ab:e9:69:8d:18:84:
         53:43:d6:3b:d1:f9:bd:e7:bc:2f:71:23:64:90:31:6b:c5:31:
         f1:ec:3c:13:87:5c:9e:e3:3c:79:f4:6e:6d:d0:8e:1e:d4:6b:
         cb:ac:02:a7:e4:4b:7f:37:8e:6b:22:68:9f:91:9c:d9:8f:6d:
         66:33:a4:8b:d2:40:1e:00:0b:a7:a5:a2:ce:5f:df:4f:46:e7:
         37:7e:7d:32:28:3b:d1:ca:b0:3d:7d:4a:7c:d6:b6:e3:55:b5:
         68:6a:6b:22:4b:05:b9:c9:57:f6:0b:b3:c9:9d:e0:dc:a3:ca:
         94:75:14:0e:9f:01:a6:5e:a9:a2:4e:85:36:a0:d5:d5:e3:fe:
         cf:7c:07:d8:54:d2:72:0e:5d:a9:85:4e:f3:8e:5d:c9:63:ed:
         97:41:3c:fa:37:90:9e:85:a5:a2:29:9e:d0:7c:aa:76:65:2f:
         68:f0:fa:ca:4f:5a:28:47:8b:74:99:4f:35:53:28:bc:ae:ea:
         3a:d7:64:b3:ba:45:08:9b:9f:16:46:20:5d:fb:2c:d0:d7:44:
         a9:60:91:ea:71:37:ab:7e:8f:cc:fa:a9:e5:24:11:8c:2c:2d:
         8c:0d:17:23:d1:09:f1:1f:91:d4:04:41:2a:0d:9b:5c:d7:cd:
         95:07:3b:8e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAPnSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
N2E4YjVhMGMxNTgyNGQ2ZTNjZDBhMTUyODIyMWEwYTdhNDdjZTAwHhcNMjExMDI1
MDMwMDAwWhcNMjMxMDI1MDMwMDAwWjAzMTEwLwYDVQQDEyg5NzQzYWJiOGRkNDlh
NDdmNGIyNjU1ZGEzY2NiODhiNTYzOWI2YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArFKc/MOPs3pSf6ePgd4falJQktikHJlCNlCs1oxFGf9UZxYV
B8hFy/Jr32JJnXIJWMOXse/qUls0ue115/jH5F0QWNIx2s9JlX/OtZFuw6E3kt7k
KCn6+LzBY/k36+DXdqHO1AMgevDEuECiEN3aYw7o877ps61G38M6yf/NI0ncFZmk
QdIUWqJuMPky06wbGDYczupMHvxtuTSXYY7rDJK+KM7CDfYT8GpKSBfU9THnM6TJ
9fJ5Kj4ZaG/PirwRLt3iZbhFe1aBLRUvIVDi1I9XW1dAUCjXLqh5YFDbfffVxJeG
pKeiaqtMqNRBl5aqHg7IaAU2FMEwy4scDFeV+wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIErd3ZL5ptJsSzHqnLoRDY1z9n5MB8GA1UdIwQYMBaAFNovRy7d3oArABJo
64PhvtMbJSMjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U3YThi
NWEwYzE1ODI0ZDZlM2NkMGExNTI4MjIxYTBhN2E0N2NlMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmVlMzExNGMtNGU5MS00YzNmLWI3YzItYzIxZWU2
YTA2MzE2Lzk3NDNhYmI4ZGQ0OWE0N2Y0YjI2NTVkYTNjY2I4OGI1NjM5YjZiYjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZWUzMTE0Yy00ZTkxLTRjM2YtYjdjMi1jMjFl
ZTZhMDYzMTYvY2U3YThiNWEwYzE1ODI0ZDZlM2NkMGExNTI4MjIxYTBhN2E0N2Nl
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDdhAABDANBgkqhkiG9w0BAQsFAAOCAQEAHNRafO2hhq2A
MxIHq+lpjRiEU0PWO9H5vee8L3EjZJAxa8Ux8ew8E4dcnuM8efRubdCOHtRry6wC
p+RLfzeOayJon5Gc2Y9tZjOki9JAHgALp6Wizl/fT0bnN359Mig70cqwPX1KfNa2
41W1aGprIksFuclX9guzyZ3g3KPKlHUUDp8Bpl6pok6FNqDV1eP+z3wH2FTScg5d
qYVO845dyWPtl0E8+jeQnoWloime0HyqdmUvaPD6yk9aKEeLdJlPNVMovK7qOtdk
s7pFCJufFkYgXfss0NdEqWCR6nE3q36PzPqp5SQRjCwtjA0XI9EJ8R+R1ARBKg2b
XNfNlQc7jg==
-----END CERTIFICATE-----