Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/00544c679ccb098a54daf5437da9ae67d8f7d0ad.roa
File:                     00544c679ccb098a54daf5437da9ae67d8f7d0ad.roa (raw, json)
Hash identifier:          ooIkU0xsIp+E1SRV6LGCrtM2v3f2aoR0WUzXZgcP6j8=
Subject key identifier:   D5:99:C6:5C:23:B7:80:4C:13:5C:A2:2E:6B:7E:9B:09:F7:2A:59:69
Certificate issuer:       /CN=94997e9738eb4843477b7a8b538303d62f97978d
Certificate serial:       0D2E57
Authority key identifier: 97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/00544c679ccb098a54daf5437da9ae67d8f7d0ad.roa
Signing time:             Wed 24 Mar 2021 14:40:32 +0000
ROA not before:           Wed 24 Mar 2021 14:40:31 +0000
ROA not after:            Tue 24 Mar 2026 14:40:31 +0000
asID:                     264668
IP address blocks:        2803:27c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863831 (0xd2e57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94997e9738eb4843477b7a8b538303d62f97978d
        Validity
            Not Before: Mar 24 14:40:31 2021 GMT
            Not After : Mar 24 14:40:31 2026 GMT
        Subject: CN=00544c679ccb098a54daf5437da9ae67d8f7d0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:2c:ef:94:02:50:5b:65:70:16:76:b1:1c:
                    94:6c:e0:fd:48:83:60:42:ef:14:6b:81:c2:0f:d9:
                    bc:1c:6b:c5:b9:0b:7b:de:5c:57:be:af:3e:2f:b1:
                    af:44:2b:7b:69:51:f7:60:7d:c6:ea:32:75:52:39:
                    25:d3:d8:41:dd:59:de:9b:2b:c3:5c:1c:a1:7f:85:
                    ec:43:90:da:14:9c:48:4e:de:92:6b:d8:01:2b:02:
                    2c:9c:ad:0e:d7:61:11:48:6a:5b:ad:08:3f:a3:d2:
                    30:63:1e:0d:0f:00:48:b3:ec:aa:ac:62:e1:7c:36:
                    15:f7:b2:4a:e5:bc:fb:bc:5b:e1:97:f9:be:08:33:
                    2a:29:66:ac:88:c8:3d:87:77:15:93:08:10:55:eb:
                    65:8c:ed:6f:86:18:b2:2f:cb:15:d5:4c:71:e2:5f:
                    4a:06:f0:3c:f6:44:36:5d:33:7b:3d:e3:0d:af:d9:
                    dc:c1:d8:b4:97:c3:05:d1:7a:5a:39:5e:89:d4:05:
                    a7:e5:8c:ee:71:48:30:c9:4e:ab:74:b1:cf:84:79:
                    2e:53:11:01:f8:78:9c:35:4a:cd:3f:c4:d9:dd:d6:
                    b0:30:e2:49:78:42:9d:58:29:dc:74:d4:09:37:c9:
                    35:30:06:cb:3a:90:7b:74:ec:65:09:60:b7:0e:bb:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:99:C6:5C:23:B7:80:4C:13:5C:A2:2E:6B:7E:9B:09:F7:2A:59:69
            X509v3 Authority Key Identifier:
                keyid:97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/00544c679ccb098a54daf5437da9ae67d8f7d0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/94997e9738eb4843477b7a8b538303d62f97978d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:ab:b3:dd:1b:54:61:53:fe:a6:b9:da:8c:ff:d8:58:1a:96:
         72:5d:bb:f9:6e:a0:71:cb:e6:3c:c6:44:79:e5:51:20:38:e7:
         67:c6:42:b1:7e:7a:0d:0c:78:f9:79:85:bb:4d:a3:ed:f2:ec:
         d8:29:cc:8b:8c:f4:b1:ca:52:c4:bf:95:05:6a:1a:5b:33:a3:
         6c:fd:a3:89:1d:b8:29:41:17:ae:d4:cf:a7:4e:ce:9a:c7:8b:
         07:cd:2d:ec:56:04:e0:98:5e:0a:20:e7:6c:c3:b4:3d:ef:49:
         e7:e8:3a:16:ab:d7:bb:49:f7:7b:ee:70:07:62:a6:25:f7:b0:
         ea:e9:87:22:00:9a:65:1b:99:8b:0b:65:aa:7c:68:2d:db:1e:
         5c:b9:36:ab:31:8c:de:29:ef:58:df:7e:ca:9a:ca:af:83:df:
         6c:ff:ff:e8:b1:dd:c9:a8:10:ad:76:ed:eb:fa:77:86:7c:fe:
         65:a7:5f:ca:40:7a:5b:57:42:78:7d:c9:3a:82:74:d0:ad:48:
         2c:4a:13:0a:ba:fc:ef:6c:25:2e:7f:f9:c8:3b:0b:cf:e2:c5:
         ed:0e:44:88:82:b0:97:c8:19:9b:67:1d:d2:6b:90:0c:42:55:
         3c:96:dd:39:ea:38:a2:ca:5c:73:aa:62:23:67:5f:d9:f4:91:
         0d:e7:79:8a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDS5XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
OTk3ZTk3MzhlYjQ4NDM0NzdiN2E4YjUzODMwM2Q2MmY5Nzk3OGQwHhcNMjEwMzI0
MTQ0MDMxWhcNMjYwMzI0MTQ0MDMxWjAzMTEwLwYDVQQDEygwMDU0NGM2NzljY2Iw
OThhNTRkYWY1NDM3ZGE5YWU2N2Q4ZjdkMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArIEs75QCUFtlcBZ2sRyUbOD9SINgQu8Ua4HCD9m8HGvFuQt7
3lxXvq8+L7GvRCt7aVH3YH3G6jJ1Ujkl09hB3VnemyvDXByhf4XsQ5DaFJxITt6S
a9gBKwIsnK0O12ERSGpbrQg/o9IwYx4NDwBIs+yqrGLhfDYV97JK5bz7vFvhl/m+
CDMqKWasiMg9h3cVkwgQVetljO1vhhiyL8sV1Uxx4l9KBvA89kQ2XTN7PeMNr9nc
wdi0l8MF0XpaOV6J1AWn5YzucUgwyU6rdLHPhHkuUxEB+HicNUrNP8TZ3dawMOJJ
eEKdWCncdNQJN8k1MAbLOpB7dOxlCWC3DrsjMQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFNWZxlwjt4BME1yiLmt+mwn3KllpMB8GA1UdIwQYMBaAFJfajEf+d+0JvKy0
BKTDrVdJDkuoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ5OTdl
OTczOGViNDg0MzQ3N2I3YThiNTM4MzAzZDYyZjk3OTc4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTk0YjBkMDQtMTdjYi00NmI4LWEzMzctYzE2MjE0
YWM4YTMxLzAwNTQ0YzY3OWNjYjA5OGE1NGRhZjU0MzdkYTlhZTY3ZDhmN2QwYWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTRiMGQwNC0xN2NiLTQ2YjgtYTMzNy1jMTYy
MTRhYzhhMzEvOTQ5OTdlOTczOGViNDg0MzQ3N2I3YThiNTM4MzAzZDYyZjk3OTc4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDJ8AwDQYJKoZIhvcNAQELBQADggEBAImrs90bVGFT/qa5
2oz/2FgalnJdu/luoHHL5jzGRHnlUSA452fGQrF+eg0MePl5hbtNo+3y7NgpzIuM
9LHKUsS/lQVqGlszo2z9o4kduClBF67Uz6dOzprHiwfNLexWBOCYXgog52zDtD3v
SefoOhar17tJ93vucAdipiX3sOrphyIAmmUbmYsLZap8aC3bHly5NqsxjN4p71jf
fsqayq+D32z//+ix3cmoEK127ev6d4Z8/mWnX8pAeltXQnh9yTqCdNCtSCxKEwq6
/O9sJS5/+cg7C8/ixe0ORIiCsJfIGZtnHdJrkAxCVTyW3TnqOKLKXHOqYiNnX9n0
kQ3neYo=
-----END CERTIFICATE-----