Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/2e2e22a9b2fcaeda18603732ac67098df6f2925b.roa
File:                     2e2e22a9b2fcaeda18603732ac67098df6f2925b.roa (raw, json)
Hash identifier:          hZY8RW6Wx65riwDg6U5VWmkze83nto/UvDE/ZCKW2Fw=
Subject key identifier:   FE:7A:AE:85:52:35:45:28:05:B8:83:71:06:14:2B:F7:BC:47:ED:66
Certificate issuer:       /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial:       0DB185
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/2e2e22a9b2fcaeda18603732ac67098df6f2925b.roa
Signing time:             Wed 24 Mar 2021 14:37:30 +0000
ROA not before:           Wed 24 Mar 2021 14:37:30 +0000
ROA not after:            Tue 24 Mar 2026 14:37:30 +0000
asID:                     264763
IP address blocks:        2803:50c0:105::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897413 (0xdb185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
        Validity
            Not Before: Mar 24 14:37:30 2021 GMT
            Not After : Mar 24 14:37:30 2026 GMT
        Subject: CN=2e2e22a9b2fcaeda18603732ac67098df6f2925b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:0e:f5:2d:84:c0:65:45:a3:3e:88:19:93:
                    e5:04:40:cf:7a:20:a2:69:89:db:95:e1:64:f0:58:
                    c3:22:66:b7:43:30:10:43:31:3b:16:8f:8a:12:69:
                    30:30:bb:03:21:5d:4a:71:38:e6:12:20:89:88:5a:
                    22:c0:4a:e4:91:4a:55:ed:67:0b:cb:6a:f4:74:f4:
                    53:36:73:2d:4d:0d:34:fc:d8:e9:23:41:07:56:a1:
                    08:48:e5:38:48:cc:b8:c9:2f:31:ea:3b:2f:20:b1:
                    8f:e4:25:eb:df:2b:ba:84:b7:9c:8d:56:79:17:bf:
                    be:ba:7f:50:5e:b8:8a:c7:e0:cc:ef:48:e3:5d:88:
                    27:f2:67:e8:b3:24:80:ce:0f:5d:ae:f4:35:68:f6:
                    6b:89:90:3a:8c:fb:03:91:61:ef:36:fc:ae:4d:a4:
                    ac:56:dc:d8:7f:e8:26:5c:ab:c6:82:27:9a:62:f5:
                    ba:35:a7:2e:32:1f:b5:9e:4c:2d:fc:18:be:8d:68:
                    54:bc:da:a4:a1:ac:90:b3:5d:b7:d9:fd:4e:57:37:
                    8c:45:89:42:43:d9:75:c6:f7:5a:ec:cc:ef:08:c3:
                    17:b8:f3:c7:45:01:a8:e2:bc:51:c5:bd:8d:99:c6:
                    76:51:40:52:c1:51:ef:75:45:fe:b3:59:72:d2:d1:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7A:AE:85:52:35:45:28:05:B8:83:71:06:14:2B:F7:BC:47:ED:66
            X509v3 Authority Key Identifier:
                keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/2e2e22a9b2fcaeda18603732ac67098df6f2925b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50c0:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:36:28:0a:99:58:22:a0:c1:e7:2b:c5:ac:b7:10:5f:e6:
         52:00:aa:e4:19:27:a8:54:9d:a9:f5:85:c5:ce:18:b5:71:09:
         50:51:ae:2a:61:bd:f6:ae:28:a4:25:4c:c7:db:ae:20:6b:12:
         e8:29:59:b6:70:de:28:03:df:44:a2:c8:55:aa:73:ab:53:b6:
         12:e1:2d:14:3c:19:70:e4:69:7a:01:0e:5c:de:aa:ac:5e:6d:
         55:e8:80:62:0d:b7:ba:67:ae:ef:fa:f6:c5:bb:7e:9d:9e:10:
         96:61:87:c8:f5:af:26:ed:68:a7:73:44:55:6d:ca:04:02:a7:
         f5:e8:49:0f:c1:e8:aa:af:80:5f:b4:c6:63:04:92:fb:a1:29:
         03:6d:84:d7:a5:65:3f:ef:e5:54:34:f0:31:fa:b2:92:e7:ef:
         56:c4:93:50:1e:56:54:3a:ed:00:fa:32:0f:75:e7:31:68:4c:
         3b:e8:03:39:6f:6e:7e:53:31:b4:f7:1e:dd:05:c6:0c:37:4a:
         52:7b:9c:7c:0b:fa:04:0c:f0:25:88:a0:85:df:6e:3e:d4:12:
         dc:83:28:c1:ad:0b:b4:8c:b7:2c:00:90:f8:48:8b:39:87:cb:
         b7:ad:7b:35:01:89:74:88:42:84:27:ec:e2:c3:c4:e4:7d:d4:
         38:0f:fa:eb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDbGFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
YjA1YzkyMTJkNmIzM2IzOTBjODFmM2ZjODk1OGFmNzA1MGI4OTYwHhcNMjEwMzI0
MTQzNzMwWhcNMjYwMzI0MTQzNzMwWjAzMTEwLwYDVQQDEygyZTJlMjJhOWIyZmNh
ZWRhMTg2MDM3MzJhYzY3MDk4ZGY2ZjI5MjViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh2UO9S2EwGVFoz6IGZPlBEDPeiCiaYnbleFk8FjDIma3QzAQ
QzE7Fo+KEmkwMLsDIV1KcTjmEiCJiFoiwErkkUpV7WcLy2r0dPRTNnMtTQ00/Njp
I0EHVqEISOU4SMy4yS8x6jsvILGP5CXr3yu6hLecjVZ5F7++un9QXriKx+DM70jj
XYgn8mfosySAzg9drvQ1aPZriZA6jPsDkWHvNvyuTaSsVtzYf+gmXKvGgieaYvW6
NacuMh+1nkwt/Bi+jWhUvNqkoayQs1232f1OVzeMRYlCQ9l1xvda7MzvCMMXuPPH
RQGo4rxRxb2NmcZ2UUBSwVHvdUX+s1ly0tHJJwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFP56roVSNUUoBbiDcQYUK/e8R+1mMB8GA1UdIwQYMBaAFMVhOS6xbdlt+xS/
wyaCOKjpgYMeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODliMDVj
OTIxMmQ2YjMzYjM5MGM4MWYzZmM4OTU4YWY3MDUwYjg5Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2RkMmMxMDAtZGMzMC00MGFjLTg1ZDItNTE4MjU3
MGFjMmJlLzJlMmUyMmE5YjJmY2FlZGExODYwMzczMmFjNjcwOThkZjZmMjkyNWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZGQyYzEwMC1kYzMwLTQwYWMtODVkMi01MTgy
NTcwYWMyYmUvODliMDVjOTIxMmQ2YjMzYjM5MGM4MWYzZmM4OTU4YWY3MDUwYjg5
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDUMABBTANBgkqhkiG9w0BAQsFAAOCAQEAGwQ2KAqZWCKg
wecrxay3EF/mUgCq5BknqFSdqfWFxc4YtXEJUFGuKmG99q4opCVMx9uuIGsS6ClZ
tnDeKAPfRKLIVapzq1O2EuEtFDwZcORpegEOXN6qrF5tVeiAYg23umeu7/r2xbt+
nZ4QlmGHyPWvJu1op3NEVW3KBAKn9ehJD8Hoqq+AX7TGYwSS+6EpA22E16VlP+/l
VDTwMfqykufvVsSTUB5WVDrtAPoyD3XnMWhMO+gDOW9uflMxtPce3QXGDDdKUnuc
fAv6BAzwJYighd9uPtQS3IMowa0LtIy3LACQ+EiLOYfLt617NQGJdIhChCfs4sPE
5H3UOA/66w==
-----END CERTIFICATE-----