Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/b5647057e1fade8beef5a59061a56ef8c5360e4b.roa
File:                     b5647057e1fade8beef5a59061a56ef8c5360e4b.roa (raw, json)
Hash identifier:          n/isnKHkbLBkbE14vqFzL51AKmbVFGu1+UzPLEWauEA=
Subject key identifier:   26:F5:FC:42:BD:01:61:3C:B3:05:A1:BE:91:49:98:C7:9C:DE:EF:E3
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       0BFFF3
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/b5647057e1fade8beef5a59061a56ef8c5360e4b.roa
Signing time:             Wed 24 Mar 2021 14:47:32 +0000
ROA not before:           Wed 24 Mar 2021 14:47:32 +0000
ROA not after:            Tue 24 Mar 2026 14:47:32 +0000
asID:                     267811
IP address blocks:        2803:e3a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786419 (0xbfff3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Mar 24 14:47:32 2021 GMT
            Not After : Mar 24 14:47:32 2026 GMT
        Subject: CN=b5647057e1fade8beef5a59061a56ef8c5360e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:a5:02:ee:14:6d:24:8b:c6:e2:c3:95:c9:
                    b6:43:2c:75:8f:32:88:da:7f:c0:53:8c:7e:aa:4a:
                    e2:18:1c:ea:94:47:44:f8:a0:ea:ce:89:72:aa:6d:
                    ab:11:9e:68:ec:b7:aa:8f:dd:9b:a9:0f:55:2f:e2:
                    ee:13:1e:ab:7f:8a:8e:1a:8e:19:b7:4a:30:52:60:
                    5a:2d:dc:49:dd:3b:98:57:f0:33:9a:fc:cb:71:2d:
                    3e:9a:a9:c2:c1:12:42:82:e9:d3:32:8a:75:3a:97:
                    d0:fe:b3:35:5d:66:a9:09:9c:d7:35:d6:01:51:51:
                    21:97:68:6a:52:c3:c0:de:d0:85:80:f7:9c:0f:e9:
                    90:74:3f:bd:77:21:a2:02:7d:9d:27:67:cf:77:5f:
                    e2:22:6c:c7:75:b3:03:cd:39:74:be:e9:9a:cc:3a:
                    dc:3b:e1:87:b9:11:f0:ba:9c:e0:84:1e:c4:28:3e:
                    dd:2b:ae:d0:7a:42:f3:6e:c7:89:a7:48:52:21:6c:
                    b8:d0:fb:09:73:44:c8:73:99:34:30:40:81:e7:e0:
                    01:f4:5b:09:5a:20:31:d4:f3:da:6f:1a:e7:bc:e4:
                    76:ce:30:cc:9b:5e:5d:3e:0c:af:7d:a7:ff:ef:e9:
                    41:13:a8:60:e9:63:8d:f7:85:2e:e0:ad:54:36:a5:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F5:FC:42:BD:01:61:3C:B3:05:A1:BE:91:49:98:C7:9C:DE:EF:E3
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/b5647057e1fade8beef5a59061a56ef8c5360e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:12:8f:50:76:2b:3d:48:2f:a7:23:b3:8f:fa:1f:67:ad:e8:
         60:c7:3d:0f:68:99:29:43:90:6a:34:0b:0b:07:c8:7f:7c:aa:
         1b:47:bf:bb:45:f9:f2:53:f3:74:7f:54:4e:cc:ee:fb:f2:1e:
         e6:6f:64:1a:f8:d8:e7:9d:67:ce:47:cf:1f:90:89:e8:89:1f:
         37:fd:1b:28:5e:a0:02:fc:f6:4a:63:d0:94:1b:76:1d:3d:85:
         87:3e:ba:f3:6a:c5:a8:8e:e5:90:6d:29:d7:c3:71:43:ae:d5:
         73:3e:5d:9c:c4:25:ca:c1:62:f6:d9:b1:a0:22:83:7f:dd:a3:
         0d:3c:11:b2:1f:2d:2a:c0:f1:1c:b6:a6:55:ad:a9:4f:03:b7:
         43:2b:69:47:77:3e:ce:55:c2:c2:d5:35:3e:1f:29:87:27:d8:
         de:12:3c:43:29:8d:cb:bd:cf:ae:b2:62:21:eb:09:60:eb:8c:
         08:53:4b:a1:e1:21:00:1a:36:10:be:71:76:06:77:ce:f6:3f:
         e9:28:65:bb:15:77:6f:81:7b:96:5d:33:cb:42:5d:f8:8a:8a:
         62:e1:fb:1c:21:a3:98:7f:2a:0e:dc:aa:e8:09:77:ae:b0:84:
         12:69:05:8a:f6:6d:44:9d:ee:9e:bf:3e:40:72:ad:11:aa:92:
         d9:19:89:45
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDC//zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
NzE0ZDA3M2Y0ZDUyMGQ5ZGZiOWQ2ZDhhYzYyNWIzYzlhMDJjYWYwHhcNMjEwMzI0
MTQ0NzMyWhcNMjYwMzI0MTQ0NzMyWjAzMTEwLwYDVQQDEyhiNTY0NzA1N2UxZmFk
ZThiZWVmNWE1OTA2MWE1NmVmOGM1MzYwZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkEGlAu4UbSSLxuLDlcm2Qyx1jzKI2n/AU4x+qkriGBzqlEdE
+KDqzolyqm2rEZ5o7Leqj92bqQ9VL+LuEx6rf4qOGo4Zt0owUmBaLdxJ3TuYV/Az
mvzLcS0+mqnCwRJCgunTMop1OpfQ/rM1XWapCZzXNdYBUVEhl2hqUsPA3tCFgPec
D+mQdD+9dyGiAn2dJ2fPd1/iImzHdbMDzTl0vumazDrcO+GHuRHwupzghB7EKD7d
K67QekLzbseJp0hSIWy40PsJc0TIc5k0MECB5+AB9FsJWiAx1PPabxrnvOR2zjDM
m15dPgyvfaf/7+lBE6hg6WON94Uu4K1UNqUarwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCb1/EK9AWE8swWhvpFJmMec3u/jMB8GA1UdIwQYMBaAFF+ZchhDtfl9VKRs
iG2PGrxFdUq/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3MTRk
MDczZjRkNTIwZDlkZmI5ZDZkOGFjNjI1YjNjOWEwMmNhZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGMxYjYzNDMtOGJmYS00MTNmLWFiMDktN2FmZDc4
MzZjYzZlL2I1NjQ3MDU3ZTFmYWRlOGJlZWY1YTU5MDYxYTU2ZWY4YzUzNjBlNGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YzFiNjM0My04YmZhLTQxM2YtYWIwOS03YWZk
NzgzNmNjNmUvNzk3MTRkMDczZjRkNTIwZDlkZmI5ZDZkOGFjNjI1YjNjOWEwMmNh
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD46AwDQYJKoZIhvcNAQELBQADggEBAIQSj1B2Kz1IL6cj
s4/6H2et6GDHPQ9omSlDkGo0CwsHyH98qhtHv7tF+fJT83R/VE7M7vvyHuZvZBr4
2OedZ85Hzx+QieiJHzf9GyheoAL89kpj0JQbdh09hYc+uvNqxaiO5ZBtKdfDcUOu
1XM+XZzEJcrBYvbZsaAig3/dow08EbIfLSrA8Ry2plWtqU8Dt0MraUd3Ps5VwsLV
NT4fKYcn2N4SPEMpjcu9z66yYiHrCWDrjAhTS6HhIQAaNhC+cXYGd872P+koZbsV
d2+Be5ZdM8tCXfiKimLh+xwho5h/Kg7cqugJd66whBJpBYr2bUSd7p6/PkByrRGq
ktkZiUU=
-----END CERTIFICATE-----