Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/f825a11170bd482d287627486d24e77d6c7be755.roa
File:                     f825a11170bd482d287627486d24e77d6c7be755.roa (raw, json)
Hash identifier:          9H4ZR6+HD2BK+bab3mUP95wbkH8LHvF5rLIPL3sIxLE=
Subject key identifier:   9F:E5:BE:3E:2E:1A:8A:44:B7:7B:E0:95:FC:C0:84:A2:37:0D:CE:67
Certificate issuer:       /CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
Certificate serial:       0D9D04
Authority key identifier: 8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/f825a11170bd482d287627486d24e77d6c7be755.roa
Signing time:             Wed 24 Mar 2021 14:30:59 +0000
ROA not before:           Wed 24 Mar 2021 14:30:58 +0000
ROA not after:            Tue 24 Mar 2026 14:30:58 +0000
asID:                     61493
IP address blocks:        2803:eb80::/34 maxlen: 34
                          2803:eb80:4000::/34 maxlen: 34
                          2803:eb80:8000::/34 maxlen: 34
                          2803:eb80:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892164 (0xd9d04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
        Validity
            Not Before: Mar 24 14:30:58 2021 GMT
            Not After : Mar 24 14:30:58 2026 GMT
        Subject: CN=f825a11170bd482d287627486d24e77d6c7be755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:28:c6:7e:84:c4:58:2d:12:46:82:91:8d:
                    da:a4:64:5a:68:d3:56:76:70:a8:12:61:db:a2:0b:
                    85:b5:d2:dd:e7:3d:65:46:ef:29:16:92:1c:22:a0:
                    c0:fa:11:43:27:1a:cb:11:3e:4b:6b:43:c4:75:a0:
                    3f:05:74:97:17:88:13:64:99:d0:08:a9:fd:6f:99:
                    fd:22:04:4a:aa:81:e3:94:db:4f:22:25:91:fd:7e:
                    09:cf:60:ed:55:cc:0a:06:d6:86:5e:a9:84:2d:2f:
                    9c:64:e5:14:12:da:62:13:76:28:32:49:96:f7:a0:
                    ca:27:f7:18:fe:79:61:27:8d:de:c4:66:e0:3c:b9:
                    1d:45:a7:53:00:eb:b6:22:64:61:33:85:88:16:dd:
                    53:2d:6d:6b:c4:e8:e2:6e:2d:65:12:54:da:d0:a0:
                    1f:b9:31:02:90:02:aa:ed:f2:a3:03:57:b3:cb:49:
                    88:0e:30:41:f7:09:6e:8c:36:eb:a5:fa:b8:39:4a:
                    35:f8:42:96:d0:05:42:ff:0a:54:23:4d:66:92:06:
                    ea:8a:c0:e3:88:74:56:4b:24:57:b0:7c:0b:50:94:
                    eb:06:62:d6:58:3e:62:58:2d:03:72:bb:e3:7b:64:
                    3f:5e:cc:37:bd:08:4b:9f:0d:2b:a9:01:52:b6:4d:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:BE:3E:2E:1A:8A:44:B7:7B:E0:95:FC:C0:84:A2:37:0D:CE:67
            X509v3 Authority Key Identifier:
                keyid:8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/f825a11170bd482d287627486d24e77d6c7be755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/cf47512a1a6566f37a0da36f74206b83a801d6d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:99:16:34:6c:38:ab:87:3d:5e:d7:62:7d:8b:35:1b:91:f0:
         2c:9a:6b:8c:34:38:e9:9a:f3:de:86:7e:d4:46:0b:4f:b5:51:
         0f:45:07:f4:d0:a4:6b:c5:92:d9:0b:9b:0b:c8:6b:0a:2f:7e:
         dc:1c:67:f1:31:0f:d0:04:33:f8:9f:b9:9a:81:0c:35:19:3e:
         70:04:79:9f:e9:13:e4:76:93:98:c0:89:1f:d7:39:ad:4c:58:
         17:18:03:d2:8a:da:db:37:23:f4:17:db:71:3b:3c:9f:9b:1a:
         f6:c8:2a:14:e5:f9:4e:29:b4:d2:2e:2e:53:d7:32:42:95:47:
         90:8c:78:e5:3d:b3:19:54:6d:c9:22:cb:3a:40:24:a4:5f:99:
         15:ef:6b:37:74:ee:0e:6b:06:34:93:fb:16:59:63:44:85:e8:
         6f:b3:3d:25:25:c7:50:82:f1:f8:74:c5:ac:1d:26:95:54:aa:
         1f:bb:97:5e:82:9d:80:f0:97:37:1d:47:06:15:01:bf:86:c3:
         5f:f2:d6:95:2d:dc:5c:eb:16:b3:5f:a6:31:30:5d:8c:0b:a8:
         ad:8c:65:96:6c:6e:aa:76:35:3f:fd:27:74:ae:b6:af:95:29:
         0c:55:da:aa:26:78:42:55:c3:59:2f:63:43:8a:ee:b3:ec:40:
         c2:00:27:53
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDZ0EMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
NDc1MTJhMWE2NTY2ZjM3YTBkYTM2Zjc0MjA2YjgzYTgwMWQ2ZDkwHhcNMjEwMzI0
MTQzMDU4WhcNMjYwMzI0MTQzMDU4WjAzMTEwLwYDVQQDEyhmODI1YTExMTcwYmQ0
ODJkMjg3NjI3NDg2ZDI0ZTc3ZDZjN2JlNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnXsoxn6ExFgtEkaCkY3apGRaaNNWdnCoEmHboguFtdLd5z1l
Ru8pFpIcIqDA+hFDJxrLET5La0PEdaA/BXSXF4gTZJnQCKn9b5n9IgRKqoHjlNtP
IiWR/X4Jz2DtVcwKBtaGXqmELS+cZOUUEtpiE3YoMkmW96DKJ/cY/nlhJ43exGbg
PLkdRadTAOu2ImRhM4WIFt1TLW1rxOjibi1lElTa0KAfuTECkAKq7fKjA1ezy0mI
DjBB9wlujDbrpfq4OUo1+EKW0AVC/wpUI01mkgbqisDjiHRWSyRXsHwLUJTrBmLW
WD5iWC0Dcrvje2Q/Xsw3vQhLnw0rqQFStk16FQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJ/lvj4uGopEt3vglfzAhKI3Dc5nMB8GA1UdIwQYMBaAFIwL8ddSzk7Z4kDU
70gPvnHb3YBaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2Y0NzUx
MmExYTY1NjZmMzdhMGRhMzZmNzQyMDZiODNhODAxZDZkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzY1Mjc1ZjktODdlMi00MTM2LWI0NjQtMTY3ZTll
NTFlOTAyL2Y4MjVhMTExNzBiZDQ4MmQyODc2Mjc0ODZkMjRlNzdkNmM3YmU3NTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NjUyNzVmOS04N2UyLTQxMzYtYjQ2NC0xNjdl
OWU1MWU5MDIvY2Y0NzUxMmExYTY1NjZmMzdhMGRhMzZmNzQyMDZiODNhODAxZDZk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD64AwDQYJKoZIhvcNAQELBQADggEBAIWZFjRsOKuHPV7X
Yn2LNRuR8Cyaa4w0OOma896GftRGC0+1UQ9FB/TQpGvFktkLmwvIawovftwcZ/Ex
D9AEM/ifuZqBDDUZPnAEeZ/pE+R2k5jAiR/XOa1MWBcYA9KK2ts3I/QX23E7PJ+b
GvbIKhTl+U4ptNIuLlPXMkKVR5CMeOU9sxlUbckiyzpAJKRfmRXvazd07g5rBjST
+xZZY0SF6G+zPSUlx1CC8fh0xawdJpVUqh+7l16CnYDwlzcdRwYVAb+Gw1/y1pUt
3FzrFrNfpjEwXYwLqK2MZZZsbqp2NT/9J3Sutq+VKQxV2qomeEJVw1kvY0OK7rPs
QMIAJ1M=
-----END CERTIFICATE-----