Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/ad0e1ca912da7bdad5cfa28d42cb4a957b281acc.roa
File:                     ad0e1ca912da7bdad5cfa28d42cb4a957b281acc.roa (raw, json)
Hash identifier:          FaoCFZ0heC2nZvMD7HrHa6rer8VtUUJRMxdzRVv1h08=
Subject key identifier:   5F:D0:BB:18:1E:55:B4:0C:49:A7:40:09:10:7B:81:58:94:E9:46:D3
Certificate issuer:       /CN=92107f32f7512ff7c8629e32c158eed42fc5f6a2
Certificate serial:       0D441D
Authority key identifier: 61:C3:9C:F3:67:E5:00:20:D0:05:66:E7:D8:E2:46:6C:2A:C3:E3:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92107f32f7512ff7c8629e32c158eed42fc5f6a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/ad0e1ca912da7bdad5cfa28d42cb4a957b281acc.roa
Signing time:             Wed 24 Mar 2021 14:37:32 +0000
ROA not before:           Wed 24 Mar 2021 14:37:30 +0000
ROA not after:            Tue 24 Mar 2026 14:37:30 +0000
asID:                     262242
IP address blocks:        2803:a6c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869405 (0xd441d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92107f32f7512ff7c8629e32c158eed42fc5f6a2
        Validity
            Not Before: Mar 24 14:37:30 2021 GMT
            Not After : Mar 24 14:37:30 2026 GMT
        Subject: CN=ad0e1ca912da7bdad5cfa28d42cb4a957b281acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:b8:20:49:13:b7:cb:11:a3:95:ca:86:fa:
                    6f:ea:10:50:ac:72:00:ca:02:db:5d:76:8a:ae:8d:
                    fe:aa:b0:bb:f1:26:b1:54:f5:9b:f2:b7:f2:8a:a6:
                    8a:1a:75:fa:5f:df:03:c8:3b:3e:35:3c:29:01:e3:
                    b8:ba:2f:02:bf:bd:ad:42:76:d1:28:f3:f9:19:17:
                    0d:64:f5:10:74:71:c1:5b:db:90:45:0f:8f:9b:5c:
                    cc:26:e9:bc:97:ab:c0:2d:7a:7d:be:b9:d6:8d:6e:
                    d1:79:ec:70:b4:2a:6c:01:22:97:68:f5:34:69:ab:
                    dd:7e:52:c6:96:ad:2b:7b:74:09:42:71:89:e4:16:
                    c2:fe:44:a1:6c:11:aa:09:91:72:e8:a0:b1:f8:3f:
                    83:6d:46:b9:3f:5d:19:07:40:a0:7c:20:3b:e0:5d:
                    a8:4d:8e:59:c6:58:84:1c:50:7e:dd:db:b7:8a:17:
                    3e:78:7c:1c:85:33:83:41:ea:41:02:fe:ca:f4:19:
                    59:56:d6:7b:b9:00:1c:5e:db:b1:77:eb:89:0b:8d:
                    cc:ec:ab:8a:71:6a:4c:91:94:ce:aa:26:5c:12:63:
                    da:d7:8f:90:12:7a:6b:7e:b0:57:e0:17:ba:19:a7:
                    b3:3d:a1:ad:d4:a4:da:dc:ac:6a:84:af:a9:ab:ec:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:BB:18:1E:55:B4:0C:49:A7:40:09:10:7B:81:58:94:E9:46:D3
            X509v3 Authority Key Identifier:
                keyid:61:C3:9C:F3:67:E5:00:20:D0:05:66:E7:D8:E2:46:6C:2A:C3:E3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92107f32f7512ff7c8629e32c158eed42fc5f6a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/ad0e1ca912da7bdad5cfa28d42cb4a957b281acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83fbc5ae-3df1-406b-b4a9-6c39fdc29573/92107f32f7512ff7c8629e32c158eed42fc5f6a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:f8:a5:72:4c:26:4f:95:a6:65:64:fd:00:28:90:6f:18:
         52:f4:be:4a:7c:9b:e0:50:d8:38:ad:64:31:7e:da:e5:d7:d6:
         c0:44:16:f0:46:2f:52:b3:bd:55:bb:ab:54:ee:53:25:e6:a1:
         69:64:36:06:0f:e8:d4:54:69:05:14:20:f2:c2:2b:8f:2d:70:
         77:14:9b:35:b1:d7:56:fc:a5:4b:69:d6:02:c6:2b:33:1a:b4:
         f5:ab:55:1e:b9:a0:00:99:fc:42:c4:f6:b2:d5:6d:46:5c:2b:
         76:55:a0:bd:41:44:cf:58:7d:31:6c:e2:86:23:6f:7b:aa:9c:
         55:31:cf:33:48:2a:61:9d:ee:00:e8:ec:d3:a4:b0:72:17:cb:
         db:a5:6c:7d:41:10:7f:cc:4a:c2:d0:7c:b9:a7:30:c1:c8:cc:
         f2:7d:75:2b:c2:a5:59:8c:57:d1:4f:47:ae:17:63:6d:d5:8b:
         9f:b6:a7:7f:1f:2e:82:78:a8:39:49:9c:05:25:75:a9:40:d3:
         b3:db:56:f8:3e:05:1e:e3:7c:90:d3:64:5d:d5:69:01:61:32:
         bb:86:2f:87:28:d9:d5:0c:36:04:1d:11:46:eb:c2:db:14:b8:
         ef:c1:55:bc:b4:5b:5b:da:8a:af:74:b8:3a:52:69:e8:9e:69:
         31:d2:d4:32
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDUQdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
MTA3ZjMyZjc1MTJmZjdjODYyOWUzMmMxNThlZWQ0MmZjNWY2YTIwHhcNMjEwMzI0
MTQzNzMwWhcNMjYwMzI0MTQzNzMwWjAzMTEwLwYDVQQDEyhhZDBlMWNhOTEyZGE3
YmRhZDVjZmEyOGQ0MmNiNGE5NTdiMjgxYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1Vm4IEkTt8sRo5XKhvpv6hBQrHIAygLbXXaKro3+qrC78Sax
VPWb8rfyiqaKGnX6X98DyDs+NTwpAeO4ui8Cv72tQnbRKPP5GRcNZPUQdHHBW9uQ
RQ+Pm1zMJum8l6vALXp9vrnWjW7ReexwtCpsASKXaPU0aavdflLGlq0re3QJQnGJ
5BbC/kShbBGqCZFy6KCx+D+DbUa5P10ZB0CgfCA74F2oTY5ZxliEHFB+3du3ihc+
eHwchTODQepBAv7K9BlZVtZ7uQAcXtuxd+uJC43M7KuKcWpMkZTOqiZcEmPa14+Q
EnprfrBX4Be6GaezPaGt1KTa3KxqhK+pq+zM6wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFF/QuxgeVbQMSadACRB7gViU6UbTMB8GA1UdIwQYMBaAFGHDnPNn5QAg0AVm
59jiRmwqw+NtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTIxMDdm
MzJmNzUxMmZmN2M4NjI5ZTMyYzE1OGVlZDQyZmM1ZjZhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODNmYmM1YWUtM2RmMS00MDZiLWI0YTktNmMzOWZk
YzI5NTczL2FkMGUxY2E5MTJkYTdiZGFkNWNmYTI4ZDQyY2I0YTk1N2IyODFhY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84M2ZiYzVhZS0zZGYxLTQwNmItYjRhOS02YzM5
ZmRjMjk1NzMvOTIxMDdmMzJmNzUxMmZmN2M4NjI5ZTMyYzE1OGVlZDQyZmM1ZjZh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDpsAwDQYJKoZIhvcNAQELBQADggEBAGvv+KVyTCZPlaZl
ZP0AKJBvGFL0vkp8m+BQ2DitZDF+2uXX1sBEFvBGL1KzvVW7q1TuUyXmoWlkNgYP
6NRUaQUUIPLCK48tcHcUmzWx11b8pUtp1gLGKzMatPWrVR65oACZ/ELE9rLVbUZc
K3ZVoL1BRM9YfTFs4oYjb3uqnFUxzzNIKmGd7gDo7NOksHIXy9ulbH1BEH/MSsLQ
fLmnMMHIzPJ9dSvCpVmMV9FPR64XY23Vi5+2p38fLoJ4qDlJnAUldalA07PbVvg+
BR7jfJDTZF3VaQFhMruGL4co2dUMNgQdEUbrwtsUuO/BVby0W1vaiq90uDpSaeie
aTHS1DI=
-----END CERTIFICATE-----