Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/aefbb601d0a26a4abb8e0492fb3a90d4c32eac58.roa
File:                     aefbb601d0a26a4abb8e0492fb3a90d4c32eac58.roa (raw, json)
Hash identifier:          wIEbgviwNJv5DFBby1YazOmJ+hp7Jmawm6iSrwAB8G8=
Subject key identifier:   22:58:A5:9D:3D:2E:27:07:2D:21:8E:A1:1A:A9:49:F5:21:C9:7E:88
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0AB415
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/aefbb601d0a26a4abb8e0492fb3a90d4c32eac58.roa
Signing time:             Fri 15 Oct 2021 08:48:30 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0:d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701461 (0xab415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=aefbb601d0a26a4abb8e0492fb3a90d4c32eac58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:53:9e:d8:78:a5:2b:5d:2a:63:ce:3c:d1:
                    04:8a:66:8a:a2:25:2d:3b:be:c8:55:0f:54:df:b6:
                    64:00:a7:4c:64:4a:90:d8:be:3f:0d:96:43:ce:c8:
                    5a:f1:33:9c:88:4f:b0:9a:8d:a3:22:c6:52:38:f7:
                    df:97:cc:42:e0:29:6c:ac:b9:6a:a2:39:35:85:3c:
                    78:2a:f3:15:8a:10:46:18:64:51:d1:5f:e1:3d:82:
                    fb:31:5a:4a:17:84:f3:a2:81:03:7b:97:d9:f2:ac:
                    e0:40:86:5d:63:c4:60:c1:bc:44:d0:05:d4:3f:da:
                    fa:fe:ce:d1:6f:f3:c1:72:4e:41:db:16:b0:a3:89:
                    3f:71:7f:7f:c5:44:6f:04:3b:c5:cb:58:17:90:f9:
                    5f:6d:04:f2:f0:10:5b:61:30:94:be:c4:40:ba:34:
                    a9:0c:55:ee:1f:6f:17:5d:90:9c:7e:74:38:54:d7:
                    5d:b8:be:66:d0:b1:ef:f6:88:f4:e9:05:55:71:b9:
                    4e:7d:48:db:e2:dc:ed:12:3a:d4:2d:67:1d:b0:26:
                    a9:11:63:d9:c0:2f:70:ed:c3:61:c3:d0:cf:d0:6b:
                    aa:ba:21:af:f4:ed:56:77:87:28:3a:ea:9c:81:59:
                    8a:3a:c2:7c:99:12:7e:86:31:df:1b:69:26:f3:ff:
                    f5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:A5:9D:3D:2E:27:07:2D:21:8E:A1:1A:A9:49:F5:21:C9:7E:88
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/aefbb601d0a26a4abb8e0492fb3a90d4c32eac58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:4c:71:e4:f2:62:1a:21:e9:a8:d3:32:e6:ff:6a:4a:14:
         10:74:5f:2f:23:5a:25:1e:e3:0b:b4:bd:19:5c:9d:02:9a:b6:
         8e:65:a6:03:28:2a:08:16:9b:6e:18:69:a1:f5:12:62:d0:f0:
         2f:42:96:b9:cd:79:44:31:8a:18:ec:b1:b8:85:96:20:8f:29:
         0c:b9:7f:da:dd:b0:dd:d6:af:cc:5b:01:81:93:3a:12:a5:f3:
         36:a2:f0:e1:ed:45:d9:11:1d:50:43:c2:77:37:ee:01:d1:4a:
         5e:4a:41:44:9b:03:9d:1d:27:5c:1b:11:73:8d:e9:f7:73:61:
         31:4f:e6:49:b9:36:1c:ea:2e:03:3f:71:64:51:18:06:4c:1d:
         bd:65:5f:7a:05:5f:2e:a2:db:86:b1:d3:7e:d9:95:4a:66:5f:
         04:8d:8e:b4:02:46:1a:72:62:df:6e:6f:99:50:76:ef:2a:a7:
         bc:64:2a:31:80:3b:c3:96:a5:96:fa:8a:66:42:f6:b7:83:cd:
         02:8f:d5:96:53:6c:13:5c:d4:7a:3d:e1:26:eb:a1:41:f7:e8:
         f0:ec:36:ca:5d:28:63:7f:eb:f8:e5:cf:58:a8:f8:9f:5f:33:
         c5:4f:27:48:aa:a7:c1:b3:e0:89:c5:b7:30:18:b4:50:40:5b:
         e2:ee:c6:44
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDCrQVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
YzRhOWRlOTJmMWE4ZDBkYzc3OTJkYzBiNjcxODc0MDdjY2NiMTAwHhcNMjExMDE1
MDMwMDAwWhcNMjYxMDE1MDMwMDAwWjAzMTEwLwYDVQQDEyhhZWZiYjYwMWQwYTI2
YTRhYmI4ZTA0OTJmYjNhOTBkNGMzMmVhYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA01ZTnth4pStdKmPOPNEEimaKoiUtO77IVQ9U37ZkAKdMZEqQ
2L4/DZZDzsha8TOciE+wmo2jIsZSOPffl8xC4ClsrLlqojk1hTx4KvMVihBGGGRR
0V/hPYL7MVpKF4TzooEDe5fZ8qzgQIZdY8RgwbxE0AXUP9r6/s7Rb/PBck5B2xaw
o4k/cX9/xURvBDvFy1gXkPlfbQTy8BBbYTCUvsRAujSpDFXuH28XXZCcfnQ4VNdd
uL5m0LHv9oj06QVVcblOfUjb4tztEjrULWcdsCapEWPZwC9w7cNhw9DP0GuquiGv
9O1Wd4coOuqcgVmKOsJ8mRJ+hjHfG2km8//1yQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFCJYpZ09LicHLSGOoRqpSfUhyX6IMB8GA1UdIwQYMBaAFDNdBm1BwI8aTT0g
dOJoaBWpacetMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFjNGE5
ZGU5MmYxYThkMGRjNzc5MmRjMGI2NzE4NzQwN2NjY2IxMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWJiODkzOTYtOTFiYi00YmMxLTk0MTgtNGI4ZGZk
ODFiMGJlL2FlZmJiNjAxZDBhMjZhNGFiYjhlMDQ5MmZiM2E5MGQ0YzMyZWFjNTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YmI4OTM5Ni05MWJiLTRiYzEtOTQxOC00Yjhk
ZmQ4MWIwYmUvMmFjNGE5ZGU5MmYxYThkMGRjNzc5MmRjMGI2NzE4NzQwN2NjY2Ix
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgDXOANMA0GCSqGSIb3DQEBCwUAA4IBAQBsZExx5PJiGiHp
qNMy5v9qShQQdF8vI1olHuMLtL0ZXJ0CmraOZaYDKCoIFptuGGmh9RJi0PAvQpa5
zXlEMYoY7LG4hZYgjykMuX/a3bDd1q/MWwGBkzoSpfM2ovDh7UXZER1QQ8J3N+4B
0UpeSkFEmwOdHSdcGxFzjen3c2ExT+ZJuTYc6i4DP3FkURgGTB29ZV96BV8uotuG
sdN+2ZVKZl8EjY60AkYacmLfbm+ZUHbvKqe8ZCoxgDvDlqWW+opmQva3g80Cj9WW
U2wTXNR6PeEm66FB9+jw7DbKXShjf+v45c9YqPifXzPFTydIqqfBs+CJxbcwGLRQ
QFvi7sZE
-----END CERTIFICATE-----