Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/6f82d3b91121905ef0471494b0c5e240ac901203.roa
File:                     6f82d3b91121905ef0471494b0c5e240ac901203.roa (raw, json)
Hash identifier:          IsxDvibz8uDDR4zXX3lWp9aBROVbEJjDtQN6tWp9yXw=
Subject key identifier:   9D:21:D2:0E:68:76:62:61:7B:2E:DE:C5:BA:4E:1F:F5:EA:35:2F:32
Certificate issuer:       /CN=2114c12558d3e7c70c4a1a25a2c8de34959f5ec4
Certificate serial:       16A276
Authority key identifier: 3C:5A:35:90:43:FA:D7:3A:F7:D0:0A:73:22:2A:9D:CB:73:06:05:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/6f82d3b91121905ef0471494b0c5e240ac901203.roa
Signing time:             Thu 31 Mar 2022 18:47:08 +0000
ROA not before:           Wed 30 Mar 2022 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262223
IP address blocks:        2803:ab10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483382 (0x16a276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114c12558d3e7c70c4a1a25a2c8de34959f5ec4
        Validity
            Not Before: Mar 30 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=6f82d3b91121905ef0471494b0c5e240ac901203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:dc:50:fc:f6:6b:c1:27:5d:3c:e5:02:d6:
                    6b:b5:55:22:b6:8d:ce:58:02:b3:d9:39:eb:2f:9a:
                    87:48:59:53:99:6a:78:d6:2f:7e:db:24:fe:f5:c0:
                    49:a7:99:22:d5:bf:dc:38:e0:7e:47:8b:a6:9c:88:
                    eb:fb:9e:d5:21:7f:5e:83:bd:ae:51:61:8e:f0:78:
                    9b:53:a7:37:62:ad:dd:48:59:99:26:f7:77:56:4c:
                    79:a4:70:cf:a4:2f:74:1b:4b:89:f2:bc:b8:87:eb:
                    04:57:ee:57:a6:8b:d8:24:a2:fb:03:69:ca:39:f9:
                    8d:fc:88:60:c1:a8:61:9c:83:b5:c6:80:8a:9f:d9:
                    17:77:94:c5:8f:20:ee:22:81:7e:cd:cf:42:eb:1d:
                    30:c3:bb:2f:da:c5:68:54:aa:69:ee:68:fa:26:b5:
                    ed:1d:13:55:df:d7:b6:6e:5e:b3:4f:bf:22:f5:db:
                    f5:cd:da:f0:e0:67:71:15:08:6f:b7:48:03:4a:19:
                    35:ee:0a:32:f8:68:89:86:03:81:15:5b:50:04:bd:
                    a9:ff:62:e9:31:9b:35:2c:81:1f:1e:f7:ef:be:b7:
                    87:d5:65:7d:10:fb:78:c8:23:83:8e:a6:97:e2:89:
                    de:f6:d8:b5:ae:f9:1e:91:6f:a4:5d:d2:a1:77:70:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:21:D2:0E:68:76:62:61:7B:2E:DE:C5:BA:4E:1F:F5:EA:35:2F:32
            X509v3 Authority Key Identifier:
                keyid:3C:5A:35:90:43:FA:D7:3A:F7:D0:0A:73:22:2A:9D:CB:73:06:05:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/6f82d3b91121905ef0471494b0c5e240ac901203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab10::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:c2:bc:3a:6f:7c:e3:97:48:0c:e0:23:e3:bb:ed:d6:62:
         61:a5:3d:f7:8f:11:2a:b4:0f:3a:49:3d:2b:a4:f7:94:ac:af:
         c3:37:89:a6:3e:ac:8c:79:b2:87:7a:c3:e8:52:ac:c0:56:f1:
         5c:20:3b:81:18:84:6f:6a:a0:0a:47:11:9a:38:4a:bd:98:fe:
         cb:73:1f:e0:09:9d:bc:59:c0:81:ca:36:c2:59:46:fc:27:0d:
         20:cf:be:df:da:f0:d5:d7:9e:62:fb:38:22:d9:2a:4a:54:9c:
         4f:bc:cd:b6:5a:ba:68:b3:4e:a0:e0:f8:4e:d9:4f:97:ec:e6:
         5a:3d:0b:3f:a6:10:20:d0:11:a1:d5:01:25:67:0b:b1:e5:ad:
         d7:bb:4d:73:c0:2f:af:0a:87:dc:c8:91:9d:97:5d:00:84:0d:
         2b:5d:bd:c0:a9:06:b6:5e:03:29:88:e6:38:5f:21:04:42:f1:
         f5:bf:35:ac:18:44:8f:24:0e:2d:ef:f9:e6:b8:44:cd:47:ec:
         56:57:4f:af:f0:c8:ff:04:f0:fd:e0:88:3c:cd:ed:53:39:46:
         83:d7:ba:b1:4a:ac:73:9b:bf:0c:7d:30:08:f2:e7:b0:3d:ce:
         f1:2d:94:57:9d:df:58:7a:57:c3:e6:4d:8a:ea:14:06:bc:e5:
         26:d8:15:e7
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDFqJ2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTRjMTI1NThkM2U3YzcwYzRhMWEyNWEyYzhkZTM0OTU5ZjVlYzQwHhcNMjIwMzMw
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2ZjgyZDNiOTExMjE5
MDVlZjA0NzE0OTRiMGM1ZTI0MGFjOTAxMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkiHcUPz2a8EnXTzlAtZrtVUito3OWAKz2TnrL5qHSFlTmWp4
1i9+2yT+9cBJp5ki1b/cOOB+R4umnIjr+57VIX9eg72uUWGO8HibU6c3Yq3dSFmZ
Jvd3Vkx5pHDPpC90G0uJ8ry4h+sEV+5XpovYJKL7A2nKOfmN/IhgwahhnIO1xoCK
n9kXd5TFjyDuIoF+zc9C6x0ww7sv2sVoVKpp7mj6JrXtHRNV39e2bl6zT78i9dv1
zdrw4GdxFQhvt0gDShk17goy+GiJhgOBFVtQBL2p/2LpMZs1LIEfHvfvvreH1WV9
EPt4yCODjqaX4one9ti1rvkekW+kXdKhd3AUIQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJ0h0g5odmJhey7exbpOH/XqNS8yMB8GA1UdIwQYMBaAFDxaNZBD+tc699AK
cyIqnctzBgWTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExNGMx
MjU1OGQzZTdjNzBjNGExYTI1YTJjOGRlMzQ5NTlmNWVjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzQ3M2IzMzktNWZlYS00YmM0LTg0YzgtMzc1ZmQz
OWNjN2E3LzZmODJkM2I5MTEyMTkwNWVmMDQ3MTQ5NGIwYzVlMjQwYWM5MDEyMDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NDczYjMzOS01ZmVhLTRiYzQtODRjOC0zNzVm
ZDM5Y2M3YTcvMjExNGMxMjU1OGQzZTdjNzBjNGExYTI1YTJjOGRlMzQ5NTlmNWVj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDqxAwDQYJKoZIhvcNAQELBQADggEBAB2fwrw6b3zjl0gM
4CPju+3WYmGlPfePESq0DzpJPSuk95Ssr8M3iaY+rIx5sod6w+hSrMBW8VwgO4EY
hG9qoApHEZo4Sr2Y/stzH+AJnbxZwIHKNsJZRvwnDSDPvt/a8NXXnmL7OCLZKkpU
nE+8zbZaumizTqDg+E7ZT5fs5lo9Cz+mECDQEaHVASVnC7Hlrde7TXPAL68Kh9zI
kZ2XXQCEDStdvcCpBrZeAymI5jhfIQRC8fW/NawYRI8kDi3v+ea4RM1H7FZXT6/w
yP8E8P3giDzN7VM5RoPXurFKrHObvwx9MAjy57A9zvEtlFed31h6V8PmTYrqFAa8
5SbYFec=
-----END CERTIFICATE-----