Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/e9ed56a540ac5430867cc2669f756358c51c6b78.roa
File:                     e9ed56a540ac5430867cc2669f756358c51c6b78.roa (raw, json)
Hash identifier:          GKJScQDUiIKkqrYw9ZdMdEQoBziF6EXOj8cdM+BDqg4=
Subject key identifier:   FD:81:CE:0A:F9:18:F5:57:C6:66:93:4F:4F:C3:04:A6:74:D4:B5:D7
Certificate issuer:       /CN=f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd
Certificate serial:       0C64B4
Authority key identifier: 27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/e9ed56a540ac5430867cc2669f756358c51c6b78.roa
Signing time:             Wed 24 Mar 2021 14:38:12 +0000
ROA not before:           Wed 24 Mar 2021 14:38:12 +0000
ROA not after:            Tue 24 Mar 2026 14:38:12 +0000
asID:                     266815
IP address blocks:        2803:78a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812212 (0xc64b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd
        Validity
            Not Before: Mar 24 14:38:12 2021 GMT
            Not After : Mar 24 14:38:12 2026 GMT
        Subject: CN=e9ed56a540ac5430867cc2669f756358c51c6b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:40:ba:ac:91:c2:a6:ef:c4:5f:6c:3a:fc:
                    02:9c:d6:21:f3:da:d5:8a:60:99:73:73:fc:3b:86:
                    69:80:03:eb:fb:b4:c1:35:e8:04:3a:47:85:e8:02:
                    a8:6b:34:8a:49:16:85:5b:1e:6b:15:4c:0c:69:bc:
                    bb:fd:9a:63:27:8b:e4:35:7b:5b:68:92:11:33:b2:
                    c0:40:5d:0f:ea:8b:66:ab:6b:e4:fd:6d:96:3b:a1:
                    ff:6d:58:2e:2b:a7:9d:56:d0:9d:11:d9:73:64:76:
                    b1:d2:ae:91:a8:db:69:eb:79:cb:c5:81:7f:96:28:
                    ce:42:27:96:a9:77:1e:b3:29:31:0c:52:3b:14:7f:
                    2e:68:71:65:7f:26:80:fc:9b:7a:87:88:29:b1:0d:
                    4e:c1:90:7a:d7:06:6b:d6:f4:f4:fd:17:a6:80:75:
                    ce:79:b4:a4:f7:a2:09:84:db:ad:c2:fb:4a:ce:06:
                    61:9c:ae:6a:45:57:3b:1e:dd:9b:12:d3:b2:aa:c2:
                    c5:4c:bb:7f:a0:81:97:8d:88:30:a1:a1:12:6b:7a:
                    8a:51:09:48:37:aa:de:e1:3d:88:da:9a:ca:b5:b9:
                    79:a6:93:0a:01:60:c5:60:53:dc:15:fc:fe:1f:c7:
                    4e:5d:35:c1:6d:dc:36:44:82:51:6c:7f:51:58:af:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:CE:0A:F9:18:F5:57:C6:66:93:4F:4F:C3:04:A6:74:D4:B5:D7
            X509v3 Authority Key Identifier:
                keyid:27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/e9ed56a540ac5430867cc2669f756358c51c6b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:78a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:c1:30:a3:b5:c8:6c:f4:ff:30:1c:cd:59:d7:05:36:2c:35:
         d6:6f:72:89:d5:fa:69:09:e8:da:c1:2e:f4:28:0f:f5:c0:30:
         e6:92:bb:32:ff:e8:25:0f:44:2b:d9:be:33:76:16:5b:f7:0c:
         f1:55:28:5a:18:b6:83:88:78:4b:42:d8:37:ea:49:07:39:e1:
         58:7e:91:e6:0c:82:ee:96:a0:7c:b5:33:ae:37:46:a4:93:69:
         e1:07:49:90:28:96:49:0e:e3:e7:2d:c9:88:0d:79:d7:7f:ab:
         0c:ee:1e:bb:42:d3:a0:59:9e:a6:6a:ce:0c:7b:53:e1:d3:3e:
         63:09:5d:fb:36:50:23:a8:06:c3:84:3d:50:93:f3:54:58:95:
         2e:97:c1:15:fa:01:59:19:b9:07:4f:5b:d5:ee:cb:95:87:4c:
         5c:cc:4d:d1:36:4f:33:16:f3:df:03:8e:c3:a6:75:8b:d4:dc:
         35:80:f4:ce:e8:11:27:f1:dd:1b:69:ce:c9:9e:12:ac:c0:f4:
         cd:ba:89:ad:f8:00:08:75:80:39:75:06:db:1e:9d:36:ec:0c:
         18:f4:af:68:7d:6a:01:8d:a6:c5:9c:cb:f3:ae:1d:af:d4:ee:
         f6:93:41:88:75:1c:e6:23:e3:c8:f0:18:d8:8a:74:28:12:b4:
         d2:5a:0e:9e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDGS0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
NDllNzIwZTVjMWRjMGJiZDAyZTY2NDRhMmI0YWJjYzNhMDRiZmQwHhcNMjEwMzI0
MTQzODEyWhcNMjYwMzI0MTQzODEyWjAzMTEwLwYDVQQDEyhlOWVkNTZhNTQwYWM1
NDMwODY3Y2MyNjY5Zjc1NjM1OGM1MWM2Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtbxAuqyRwqbvxF9sOvwCnNYh89rVimCZc3P8O4ZpgAPr+7TB
NegEOkeF6AKoazSKSRaFWx5rFUwMaby7/ZpjJ4vkNXtbaJIRM7LAQF0P6otmq2vk
/W2WO6H/bVguK6edVtCdEdlzZHax0q6RqNtp63nLxYF/lijOQieWqXcesykxDFI7
FH8uaHFlfyaA/Jt6h4gpsQ1OwZB61wZr1vT0/RemgHXOebSk96IJhNutwvtKzgZh
nK5qRVc7Ht2bEtOyqsLFTLt/oIGXjYgwoaESa3qKUQlIN6re4T2I2prKtbl5ppMK
AWDFYFPcFfz+H8dOXTXBbdw2RIJRbH9RWK9MHQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFP2Bzgr5GPVXxmaTT0/DBKZ01LXXMB8GA1UdIwQYMBaAFCfRuONYZkY/rcqZ
7B1N4/BKEcj8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjA0OWU3
MjBlNWMxZGMwYmJkMDJlNjY0NGEyYjRhYmNjM2EwNGJmZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTI4MzA4MzctYTQ2Zi00Njg3LWIzOWItZWI2NTJm
ZmZiNWI0L2U5ZWQ1NmE1NDBhYzU0MzA4NjdjYzI2NjlmNzU2MzU4YzUxYzZiNzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MjgzMDgzNy1hNDZmLTQ2ODctYjM5Yi1lYjY1
MmZmZmI1YjQvZjA0OWU3MjBlNWMxZGMwYmJkMDJlNjY0NGEyYjRhYmNjM2EwNGJm
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDeKAwDQYJKoZIhvcNAQELBQADggEBACPBMKO1yGz0/zAc
zVnXBTYsNdZvconV+mkJ6NrBLvQoD/XAMOaSuzL/6CUPRCvZvjN2Flv3DPFVKFoY
toOIeEtC2DfqSQc54Vh+keYMgu6WoHy1M643RqSTaeEHSZAolkkO4+ctyYgNedd/
qwzuHrtC06BZnqZqzgx7U+HTPmMJXfs2UCOoBsOEPVCT81RYlS6XwRX6AVkZuQdP
W9Xuy5WHTFzMTdE2TzMW898DjsOmdYvU3DWA9M7oESfx3RtpzsmeEqzA9M26ia34
AAh1gDl1BtsenTbsDBj0r2h9agGNpsWcy/OuHa/U7vaTQYh1HOYj48jwGNiKdCgS
tNJaDp4=
-----END CERTIFICATE-----