Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/df7c3587f157ef9bc39081ec04ac8937bbe1ddf9.roa
File:                     df7c3587f157ef9bc39081ec04ac8937bbe1ddf9.roa (raw, json)
Hash identifier:          L6oIJkFrI/9PkY8Tc47yRLZnL4EWXrk0qJUscdvOQ+Q=
Subject key identifier:   1B:95:68:21:12:B8:F5:22:BC:64:EE:29:05:E8:EA:93:8C:8E:2D:8B
Certificate issuer:       /CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Certificate serial:       0DB56B
Authority key identifier: 1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/df7c3587f157ef9bc39081ec04ac8937bbe1ddf9.roa
Signing time:             Wed 24 Mar 2021 14:29:57 +0000
ROA not before:           Wed 24 Mar 2021 14:29:57 +0000
ROA not after:            Tue 24 Mar 2026 14:29:57 +0000
asID:                     12150
IP address blocks:        2803:e080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898411 (0xdb56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
        Validity
            Not Before: Mar 24 14:29:57 2021 GMT
            Not After : Mar 24 14:29:57 2026 GMT
        Subject: CN=df7c3587f157ef9bc39081ec04ac8937bbe1ddf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:c1:fc:2a:31:98:bd:68:9f:a4:6d:7b:b1:
                    10:7a:dd:0a:9d:71:e8:c5:17:c8:11:f2:ad:95:26:
                    d5:58:dd:d6:76:9e:ae:00:90:97:d7:19:a5:71:2d:
                    d5:8e:fc:22:56:8a:6c:3a:8c:fe:48:c1:97:e2:b7:
                    9a:7c:db:55:6d:7a:24:eb:54:b1:51:76:57:ae:03:
                    dc:7b:85:c8:05:eb:7e:67:8a:6a:1c:0a:4a:7f:5a:
                    01:3e:83:67:5e:05:74:c6:48:25:df:4f:1c:b2:f2:
                    b1:07:f9:22:a1:7f:94:06:39:05:92:8b:a5:2a:61:
                    d2:46:9b:f6:a9:c9:aa:d1:a3:31:bd:53:d1:9a:99:
                    7e:9a:de:eb:f2:0c:75:20:52:de:58:b6:d1:22:6b:
                    cc:f0:f1:e3:b2:6f:06:72:83:a6:6e:85:2e:ae:ce:
                    e4:fe:02:ba:7b:0e:c0:e6:2b:fc:d6:45:06:b7:9c:
                    a1:e8:17:59:c6:3a:8e:88:d8:c4:40:5a:64:c8:56:
                    bb:bc:a7:ca:cc:ec:3b:a1:ec:88:2d:ba:e3:9c:79:
                    25:47:53:4b:ce:4c:3f:9b:4a:c1:a4:a2:83:20:3f:
                    10:d2:be:24:c9:95:88:5c:92:fb:65:05:3c:55:9d:
                    2d:25:19:a5:1b:38:1a:a2:f5:9a:90:f8:da:d2:63:
                    f6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:68:21:12:B8:F5:22:BC:64:EE:29:05:E8:EA:93:8C:8E:2D:8B
            X509v3 Authority Key Identifier:
                keyid:1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/df7c3587f157ef9bc39081ec04ac8937bbe1ddf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/8c35dfff317cf25b1f43e239ba268307c208d4c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e080::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:aa:d5:ff:36:64:f4:18:fe:e1:5f:3c:5d:52:17:bd:d0:
         04:0c:e4:4c:66:d4:46:2e:9a:c8:0d:7d:bc:6d:b2:c4:8a:80:
         81:38:07:33:fd:bd:5e:63:94:27:51:f6:ba:a8:e9:71:eb:b5:
         08:0c:d8:5b:74:d1:a9:58:a8:5f:ea:2c:9d:e6:01:4c:38:0d:
         59:e3:bd:5c:31:03:95:e5:7d:65:0c:91:28:14:84:aa:3d:25:
         8f:c5:db:61:6a:e4:7d:5f:c8:78:51:28:36:dd:dc:a4:57:6d:
         4b:39:3d:b5:70:c6:79:2c:c6:15:59:b3:04:07:62:85:f2:9f:
         40:e3:a7:83:80:e0:9a:d8:e4:1d:d3:9b:3c:57:58:bf:af:12:
         2c:84:52:ad:3b:37:d6:81:10:62:7e:a4:f6:4c:97:4f:78:54:
         7b:ba:2d:9d:cc:0c:fb:12:6c:cb:f6:c3:9b:29:d6:16:0e:62:
         58:03:ab:ff:49:0b:66:0e:cc:c7:f9:d8:2e:b4:d2:33:2b:3d:
         b2:7b:b8:ef:72:b3:08:b5:6d:87:4e:62:7f:6d:6e:d3:9f:06:
         db:f1:2e:00:73:0a:91:80:64:42:1e:da:66:73:c8:f1:4d:b6:
         98:84:90:5c:32:c2:16:18:35:0e:e7:0b:4f:72:66:fc:ea:5c:
         ee:18:80:00
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDbVrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhj
MzVkZmZmMzE3Y2YyNWIxZjQzZTIzOWJhMjY4MzA3YzIwOGQ0YzQwHhcNMjEwMzI0
MTQyOTU3WhcNMjYwMzI0MTQyOTU3WjAzMTEwLwYDVQQDEyhkZjdjMzU4N2YxNTdl
ZjliYzM5MDgxZWMwNGFjODkzN2JiZTFkZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxDbB/CoxmL1on6Rte7EQet0KnXHoxRfIEfKtlSbVWN3Wdp6u
AJCX1xmlcS3VjvwiVopsOoz+SMGX4reafNtVbXok61SxUXZXrgPce4XIBet+Z4pq
HApKf1oBPoNnXgV0xkgl308csvKxB/kioX+UBjkFkoulKmHSRpv2qcmq0aMxvVPR
mpl+mt7r8gx1IFLeWLbRImvM8PHjsm8GcoOmboUurs7k/gK6ew7A5iv81kUGt5yh
6BdZxjqOiNjEQFpkyFa7vKfKzOw7oeyILbrjnHklR1NLzkw/m0rBpKKDID8Q0r4k
yZWIXJL7ZQU8VZ0tJRmlGzgaovWakPja0mP2mQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFBuVaCESuPUivGTuKQXo6pOMji2LMB8GA1UdIwQYMBaAFB+dRSVASt8rtB8c
9gtIfpfHgRBaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGMzNWRm
ZmYzMTdjZjI1YjFmNDNlMjM5YmEyNjgzMDdjMjA4ZDRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGZmOTcyOGEtMTAxMS00MWQ2LWI4NzctODM4ZTZl
NGEyZjdkL2RmN2MzNTg3ZjE1N2VmOWJjMzkwODFlYzA0YWM4OTM3YmJlMWRkZjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZmY5NzI4YS0xMDExLTQxZDYtYjg3Ny04Mzhl
NmU0YTJmN2QvOGMzNWRmZmYzMTdjZjI1YjFmNDNlMjM5YmEyNjgzMDdjMjA4ZDRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD4IAwDQYJKoZIhvcNAQELBQADggEBAJDRqtX/NmT0GP7h
XzxdUhe90AQM5Exm1EYumsgNfbxtssSKgIE4BzP9vV5jlCdR9rqo6XHrtQgM2Ft0
0alYqF/qLJ3mAUw4DVnjvVwxA5XlfWUMkSgUhKo9JY/F22Fq5H1fyHhRKDbd3KRX
bUs5PbVwxnksxhVZswQHYoXyn0Djp4OA4JrY5B3TmzxXWL+vEiyEUq07N9aBEGJ+
pPZMl094VHu6LZ3MDPsSbMv2w5sp1hYOYlgDq/9JC2YOzMf52C600jMrPbJ7uO9y
swi1bYdOYn9tbtOfBtvxLgBzCpGAZEIe2mZzyPFNtpiEkFwywhYYNQ7nC09yZvzq
XO4YgAA=
-----END CERTIFICATE-----