Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/e0bf2004c5253d76f1c639869a15fd57d15cc1a9.roa
File:                     e0bf2004c5253d76f1c639869a15fd57d15cc1a9.roa (raw, json)
Hash identifier:          ao5mwHexXtOxowfacss3hL8AACgYbNFF8uF5LWqpDqg=
Subject key identifier:   F8:13:07:7C:ED:1A:E7:D2:10:0C:1E:AD:84:FE:1D:1F:A0:8D:3C:43
Certificate issuer:       /CN=dea73294c38a8bd7b832cad874cd72c2143f9bb2
Certificate serial:       0DA4B6
Authority key identifier: EA:1C:58:62:21:FF:50:72:CB:68:2F:79:E5:4E:A6:09:78:5D:CC:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dea73294c38a8bd7b832cad874cd72c2143f9bb2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/e0bf2004c5253d76f1c639869a15fd57d15cc1a9.roa
Signing time:             Wed 24 Mar 2021 14:30:22 +0000
ROA not before:           Wed 24 Mar 2021 14:30:22 +0000
ROA not after:            Tue 24 Mar 2026 14:30:22 +0000
asID:                     28100
IP address blocks:        2803:2e80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894134 (0xda4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea73294c38a8bd7b832cad874cd72c2143f9bb2
        Validity
            Not Before: Mar 24 14:30:22 2021 GMT
            Not After : Mar 24 14:30:22 2026 GMT
        Subject: CN=e0bf2004c5253d76f1c639869a15fd57d15cc1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ed:1a:3e:3f:ad:e3:f2:79:f0:37:1b:79:74:
                    20:82:07:94:87:82:de:5e:a0:7e:c0:19:75:fd:e9:
                    58:57:43:f3:9d:2f:da:ab:2c:6c:1e:7e:a8:06:43:
                    b3:8f:1f:2d:0a:1f:81:7c:2f:11:20:cf:c2:81:61:
                    17:07:5e:3e:af:59:c4:46:98:56:c9:67:e7:8d:0b:
                    82:43:4a:ba:24:b6:7b:17:ba:36:a2:af:d7:b0:3d:
                    50:8a:22:30:36:a7:37:3f:94:25:4d:39:c9:d8:47:
                    e4:9a:5b:be:30:57:a6:30:0d:44:32:f3:4f:1c:89:
                    71:a5:6b:a4:a1:a5:73:ff:df:ea:91:98:4e:1f:57:
                    96:23:d8:d9:35:94:3e:f1:fc:d1:c7:31:72:03:a3:
                    69:52:92:87:f5:51:a3:a5:16:2b:fe:a7:99:f0:81:
                    91:a7:be:ac:36:63:c4:f8:53:9d:63:7f:5a:48:60:
                    08:2f:84:98:ea:44:e4:35:4e:75:00:f1:a3:00:70:
                    be:2f:27:f7:49:98:5a:7f:c2:90:7c:1f:61:5c:06:
                    47:e4:1e:2d:39:82:d9:7a:e6:35:f3:ab:db:11:e8:
                    26:b4:09:dd:ce:dd:6e:fe:b3:38:08:51:c8:fa:ec:
                    c3:e8:d2:a1:cc:5c:0a:f1:21:fd:f0:05:b4:32:bb:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:13:07:7C:ED:1A:E7:D2:10:0C:1E:AD:84:FE:1D:1F:A0:8D:3C:43
            X509v3 Authority Key Identifier:
                keyid:EA:1C:58:62:21:FF:50:72:CB:68:2F:79:E5:4E:A6:09:78:5D:CC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dea73294c38a8bd7b832cad874cd72c2143f9bb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/e0bf2004c5253d76f1c639869a15fd57d15cc1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/dea73294c38a8bd7b832cad874cd72c2143f9bb2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:f8:72:e0:90:c8:aa:1c:bd:e7:60:ed:fa:6a:06:eb:1b:
         2e:69:2e:e0:62:88:c3:a1:28:0d:34:e0:cf:df:13:90:66:d4:
         f1:6a:1c:f5:87:83:0b:df:b3:b9:f2:3d:2b:74:4b:3f:9e:2f:
         18:9b:0e:52:75:37:7a:d3:a3:11:4f:f6:f1:ab:85:11:0c:ad:
         a6:cf:62:54:d3:6d:4c:00:72:88:2e:45:86:90:f8:1d:25:66:
         c0:4b:93:17:64:7e:49:02:3f:f3:8d:e7:87:f0:8b:6d:e8:73:
         73:ec:18:6b:d8:d9:9f:8a:8b:4f:56:9a:02:6e:2e:a6:2a:b1:
         ec:c1:03:14:ac:66:f2:92:d4:0f:bf:e7:e4:ab:11:a9:09:ad:
         e4:60:f5:ed:50:9a:4b:2c:62:2e:1d:18:0a:f2:98:76:d2:23:
         df:67:54:0c:b4:2c:44:76:fd:55:59:e5:ab:65:ad:b1:13:d6:
         5f:a9:f9:84:2f:8a:96:f3:06:b2:36:46:3a:fb:0f:77:5b:8a:
         6c:be:fc:f7:5a:d6:6f:76:b8:a0:2e:c5:76:f5:62:c4:45:e3:
         63:97:ba:0d:7a:39:cb:81:50:23:d2:29:0d:27:c5:51:01:91:
         81:59:75:27:0b:8d:b9:39:92:66:bf:a3:32:f8:3c:3a:02:0a:
         7a:25:9f:ee
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDaS2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl
YTczMjk0YzM4YThiZDdiODMyY2FkODc0Y2Q3MmMyMTQzZjliYjIwHhcNMjEwMzI0
MTQzMDIyWhcNMjYwMzI0MTQzMDIyWjAzMTEwLwYDVQQDEyhlMGJmMjAwNGM1MjUz
ZDc2ZjFjNjM5ODY5YTE1ZmQ1N2QxNWNjMWE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg+0aPj+t4/J58DcbeXQgggeUh4LeXqB+wBl1/elYV0PznS/a
qyxsHn6oBkOzjx8tCh+BfC8RIM/CgWEXB14+r1nERphWyWfnjQuCQ0q6JLZ7F7o2
oq/XsD1QiiIwNqc3P5QlTTnJ2Efkmlu+MFemMA1EMvNPHIlxpWukoaVz/9/qkZhO
H1eWI9jZNZQ+8fzRxzFyA6NpUpKH9VGjpRYr/qeZ8IGRp76sNmPE+FOdY39aSGAI
L4SY6kTkNU51APGjAHC+Lyf3SZhaf8KQfB9hXAZH5B4tOYLZeuY186vbEegmtAnd
zt1u/rM4CFHI+uzD6NKhzFwK8SH98AW0Mrud+wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPgTB3ztGufSEAwerYT+HR+gjTxDMB8GA1UdIwQYMBaAFOocWGIh/1Byy2gv
eeVOpgl4XcynMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGVhNzMy
OTRjMzhhOGJkN2I4MzJjYWQ4NzRjZDcyYzIxNDNmOWJiMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGVmYjE2OGYtNTk1Mi00NzUzLWIwMDctMjMwYzlj
ZTM3NDU2L2UwYmYyMDA0YzUyNTNkNzZmMWM2Mzk4NjlhMTVmZDU3ZDE1Y2MxYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZWZiMTY4Zi01OTUyLTQ3NTMtYjAwNy0yMzBj
OWNlMzc0NTYvZGVhNzMyOTRjMzhhOGJkN2I4MzJjYWQ4NzRjZDcyYzIxNDNmOWJi
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDLoAwDQYJKoZIhvcNAQELBQADggEBAC/w+HLgkMiqHL3n
YO36agbrGy5pLuBiiMOhKA004M/fE5Bm1PFqHPWHgwvfs7nyPSt0Sz+eLxibDlJ1
N3rToxFP9vGrhREMrabPYlTTbUwAcoguRYaQ+B0lZsBLkxdkfkkCP/ON54fwi23o
c3PsGGvY2Z+Ki09WmgJuLqYqsezBAxSsZvKS1A+/5+SrEakJreRg9e1QmkssYi4d
GArymHbSI99nVAy0LER2/VVZ5atlrbET1l+p+YQvipbzBrI2Rjr7D3dbimy+/Pda
1m92uKAuxXb1YsRF42OXug16OcuBUCPSKQ0nxVEBkYFZdScLjbk5kma/ozL4PDoC
Cnoln+4=
-----END CERTIFICATE-----