Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/574afc7320c6eb0e1862354f173fe4e76faccb5a.roa
File:                     574afc7320c6eb0e1862354f173fe4e76faccb5a.roa (raw, json)
Hash identifier:          Im1bh/Oopa+OjtR7JvZo6D3G62wiB/GiCKw2GIAFa74=
Subject key identifier:   1F:A0:9F:02:2E:0F:2A:9F:EA:5B:AB:88:5A:C6:5A:1A:90:41:75:28
Certificate issuer:       /CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
Certificate serial:       0D3D16
Authority key identifier: F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/574afc7320c6eb0e1862354f173fe4e76faccb5a.roa
Signing time:             Wed 24 Mar 2021 14:36:13 +0000
ROA not before:           Wed 24 Mar 2021 14:36:13 +0000
ROA not after:            Tue 24 Mar 2026 14:36:13 +0000
asID:                     52330
IP address blocks:        2803:8340:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867606 (0xd3d16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
        Validity
            Not Before: Mar 24 14:36:13 2021 GMT
            Not After : Mar 24 14:36:13 2026 GMT
        Subject: CN=574afc7320c6eb0e1862354f173fe4e76faccb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:ed:2a:9b:d7:73:ba:4e:0e:e5:82:d5:25:
                    51:8b:7e:73:e1:c0:1d:fb:d6:6e:38:49:75:13:a7:
                    74:73:6e:2a:91:03:9e:66:a1:9e:26:ba:4e:d0:d2:
                    a0:42:a1:37:d3:4b:07:8c:44:13:5d:77:98:21:55:
                    24:90:af:fe:56:09:a3:11:33:e1:f6:a0:0c:c7:88:
                    13:e4:61:dd:e8:20:55:56:46:11:e7:7d:10:2b:1d:
                    68:0b:8f:b7:c0:a9:49:3e:b9:85:e7:22:99:56:f2:
                    55:62:b2:84:c8:b0:ee:84:eb:52:6d:dd:0e:32:98:
                    f6:a5:a1:dc:16:0c:51:63:d9:aa:cc:3e:8f:83:6c:
                    e6:68:96:ce:70:e1:11:29:8f:2f:7c:1d:a1:21:4a:
                    8c:97:fb:a8:f8:ce:b1:bf:53:0c:1b:ff:1a:75:e4:
                    60:30:aa:85:1a:0f:91:01:f6:fa:d8:40:2b:26:ae:
                    83:53:8b:2a:31:bf:1b:78:32:73:7f:c4:e1:52:49:
                    31:61:53:19:a9:2c:6f:68:ec:4f:2b:9d:8b:82:a8:
                    b3:c9:a9:62:c7:a6:b4:2d:96:50:e9:98:92:23:f9:
                    02:2a:eb:ae:21:bb:30:d1:f8:40:3d:88:23:c8:01:
                    9f:3e:8a:25:c3:1b:70:a8:db:8b:8a:92:21:3f:54:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A0:9F:02:2E:0F:2A:9F:EA:5B:AB:88:5A:C6:5A:1A:90:41:75:28
            X509v3 Authority Key Identifier:
                keyid:F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/574afc7320c6eb0e1862354f173fe4e76faccb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8340:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:a4:54:f8:c2:26:4e:48:b4:f5:71:ab:1a:3c:f2:18:f6:
         f5:19:c9:d3:e6:80:a5:9f:9d:96:0b:c5:57:29:45:47:8b:05:
         03:72:36:a3:b1:d4:5d:31:32:e1:f5:15:63:00:30:fe:02:40:
         b2:28:10:6a:5d:8d:27:74:49:c5:52:6e:33:bf:22:a1:d9:a2:
         21:bc:b0:a0:37:3a:37:6a:40:06:fb:59:4f:b7:28:6f:e4:ee:
         7c:d1:91:31:30:1d:49:b6:ce:a0:e4:34:54:77:ec:7c:7e:2d:
         96:57:23:69:79:93:2f:c0:c1:49:45:22:97:9a:f2:a1:c9:43:
         59:ea:11:6c:45:fa:75:3a:17:f5:fc:c1:69:dd:3e:9e:3b:74:
         71:f2:74:79:55:70:5a:92:0b:c9:a7:37:e5:59:d5:35:3b:a9:
         7b:b6:2b:32:26:8e:90:af:fd:60:51:e9:1b:40:9c:b3:e1:b2:
         9c:79:26:a8:bf:9a:d9:c1:37:93:ed:4d:25:46:b1:9a:8d:b4:
         bd:dc:4d:4a:49:40:fa:11:7d:92:d7:2b:4e:ef:50:18:c0:6b:
         ea:2c:c5:58:d5:cb:50:62:f6:48:05:13:38:1c:92:ef:89:9e:
         9f:fe:38:14:6f:1d:a8:46:8b:58:ff:79:e7:e1:3a:0e:31:36:
         d6:e3:d1:44
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDT0WMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
MWNjYTlmNzdmMjc3NDJiNDg1YWFlMzgxMDA2MGZhODY5ZTFmYTkwHhcNMjEwMzI0
MTQzNjEzWhcNMjYwMzI0MTQzNjEzWjAzMTEwLwYDVQQDEyg1NzRhZmM3MzIwYzZl
YjBlMTg2MjM1NGYxNzNmZTRlNzZmYWNjYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgoztKpvXc7pODuWC1SVRi35z4cAd+9ZuOEl1E6d0c24qkQOe
ZqGeJrpO0NKgQqE300sHjEQTXXeYIVUkkK/+VgmjETPh9qAMx4gT5GHd6CBVVkYR
530QKx1oC4+3wKlJPrmF5yKZVvJVYrKEyLDuhOtSbd0OMpj2paHcFgxRY9mqzD6P
g2zmaJbOcOERKY8vfB2hIUqMl/uo+M6xv1MMG/8adeRgMKqFGg+RAfb62EArJq6D
U4sqMb8beDJzf8ThUkkxYVMZqSxvaOxPK52Lgqizyalix6a0LZZQ6ZiSI/kCKuuu
Ibsw0fhAPYgjyAGfPoolwxtwqNuLipIhP1RHdQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFB+gnwIuDyqf6luriFrGWhqQQXUoMB8GA1UdIwQYMBaAFPLeArkpTNXdBf4O
JdfnHRb7vkX+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxY2Nh
OWY3N2YyNzc0MmI0ODVhYWUzODEwMDYwZmE4NjllMWZhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjNjY3NjAtZjk2Mi00NTc4LThmMDUtMmU2OTAy
Y2NjMmQ3LzU3NGFmYzczMjBjNmViMGUxODYyMzU0ZjE3M2ZlNGU3NmZhY2NiNWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM2Njc2MC1mOTYyLTQ1NzgtOGYwNS0yZTY5
MDJjY2MyZDcvZmYxY2NhOWY3N2YyNzc0MmI0ODVhYWUzODEwMDYwZmE4NjllMWZh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDg0D//zANBgkqhkiG9w0BAQsFAAOCAQEAZsukVPjCJk5I
tPVxqxo88hj29RnJ0+aApZ+dlgvFVylFR4sFA3I2o7HUXTEy4fUVYwAw/gJAsigQ
al2NJ3RJxVJuM78iodmiIbywoDc6N2pABvtZT7cob+TufNGRMTAdSbbOoOQ0VHfs
fH4tllcjaXmTL8DBSUUil5ryoclDWeoRbEX6dToX9fzBad0+njt0cfJ0eVVwWpIL
yac35VnVNTupe7YrMiaOkK/9YFHpG0Ccs+GynHkmqL+a2cE3k+1NJUaxmo20vdxN
SklA+hF9ktcrTu9QGMBr6izFWNXLUGL2SAUTOByS74men/44FG8dqEaLWP955+E6
DjE21uPRRA==
-----END CERTIFICATE-----