Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/7f018cca4226003a348ee5ef9df7f1e42edcb535.roa
File:                     7f018cca4226003a348ee5ef9df7f1e42edcb535.roa (raw, json)
Hash identifier:          2chMioXBDeYlgXRQ3xra2X726zj96to8Jl6M8wYvvJs=
Subject key identifier:   F1:D6:43:43:85:DB:E3:9D:3B:BD:16:72:AF:5E:CA:20:BE:58:84:FD
Certificate issuer:       /CN=5cdbaa401653d959436f4ef6f9bc0e6829bf617d
Certificate serial:       0D85F4
Authority key identifier: 48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/7f018cca4226003a348ee5ef9df7f1e42edcb535.roa
Signing time:             Wed 24 Mar 2021 14:42:17 +0000
ROA not before:           Wed 24 Mar 2021 14:42:16 +0000
ROA not after:            Tue 24 Mar 2026 14:42:16 +0000
asID:                     265665
IP address blocks:        2803:aec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886260 (0xd85f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdbaa401653d959436f4ef6f9bc0e6829bf617d
        Validity
            Not Before: Mar 24 14:42:16 2021 GMT
            Not After : Mar 24 14:42:16 2026 GMT
        Subject: CN=7f018cca4226003a348ee5ef9df7f1e42edcb535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:48:4b:5d:9e:65:67:db:ea:5f:6b:a8:70:
                    95:e6:cd:93:f9:70:e8:33:61:5c:4a:76:a7:d5:47:
                    a2:12:8d:97:c1:46:2c:67:c5:e7:65:7f:bf:93:be:
                    08:b5:b2:28:97:bf:14:7a:72:4d:db:fa:bd:d9:98:
                    1a:e6:e6:cf:66:47:3f:53:af:79:da:09:65:08:aa:
                    c9:7c:4f:b7:f5:93:8e:98:c0:93:3d:d4:00:e0:e6:
                    87:55:53:0b:c1:17:0b:3c:15:11:73:4b:d7:a5:36:
                    b1:19:21:ec:36:ea:08:2d:9d:85:62:36:43:d3:2d:
                    4d:4e:e4:a9:95:a6:49:16:8c:f2:1d:71:89:f7:1f:
                    35:88:e4:03:b2:be:14:3d:11:74:ca:56:37:0f:bd:
                    b3:b9:8a:a3:cf:0a:79:65:5e:36:3e:d1:47:a7:c1:
                    42:f4:fb:21:64:e2:12:90:9d:e1:b5:f4:3e:99:3f:
                    d6:10:43:d4:d2:ee:07:11:0b:30:46:8a:e1:ae:1d:
                    03:64:27:ef:5e:3b:2f:80:a2:f8:f2:ab:1f:6b:70:
                    5c:07:52:9f:be:c2:3a:e7:8e:75:28:9c:1c:3b:1a:
                    d1:42:d5:1c:06:ae:e4:4d:b6:58:3e:65:2c:19:1a:
                    a1:f4:c5:ca:c5:7d:a3:dd:ba:41:6f:a4:63:f3:57:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D6:43:43:85:DB:E3:9D:3B:BD:16:72:AF:5E:CA:20:BE:58:84:FD
            X509v3 Authority Key Identifier:
                keyid:48:76:07:6F:39:63:5B:C3:A2:0B:C1:A7:19:90:13:1F:50:97:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/7f018cca4226003a348ee5ef9df7f1e42edcb535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9cd0ee4c-5d06-4da9-be6c-a7a38747a02f/5cdbaa401653d959436f4ef6f9bc0e6829bf617d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:38:3b:94:c3:ec:e9:aa:13:86:92:fd:5d:6b:98:70:b0:
         9c:f8:5e:97:5e:65:63:66:bb:05:09:6e:4d:ec:52:ee:c5:1b:
         f5:8e:c6:52:a3:3b:9a:03:d9:bb:37:13:7c:15:8d:6c:c8:c1:
         cf:98:16:8d:de:ea:f1:c6:2b:56:1e:ee:8f:11:e9:94:c9:91:
         11:d9:fd:90:eb:ac:c0:e8:e4:3a:4a:0a:98:58:31:40:e7:87:
         f5:5c:96:38:a5:68:2c:10:dc:a6:14:35:88:0f:d6:8a:45:b5:
         93:3b:9d:17:86:39:0f:cd:f8:45:3d:7f:f2:4f:b5:eb:f9:76:
         c1:52:38:f0:0b:f2:00:c6:a9:f8:ca:1e:89:36:07:83:3f:70:
         82:d1:b5:93:c6:77:29:3f:19:7d:15:ee:dd:93:98:6a:c1:03:
         d2:58:fb:71:2b:35:18:79:4d:b5:e6:fb:40:bd:e6:2f:5e:8c:
         24:6b:41:de:fb:43:96:82:bb:74:ad:fa:d5:d6:c5:92:c9:69:
         e2:01:85:c4:dc:c5:35:32:7d:9f:07:d7:69:8a:74:f8:1e:2e:
         15:70:34:65:e4:d6:2b:1d:4f:41:7e:63:e4:33:ab:a1:31:d6:
         da:20:eb:48:a4:13:01:80:a6:c4:b4:f5:49:fe:c8:ca:df:74:
         bd:6a:81:0d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDYX0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVj
ZGJhYTQwMTY1M2Q5NTk0MzZmNGVmNmY5YmMwZTY4MjliZjYxN2QwHhcNMjEwMzI0
MTQ0MjE2WhcNMjYwMzI0MTQ0MjE2WjAzMTEwLwYDVQQDEyg3ZjAxOGNjYTQyMjYw
MDNhMzQ4ZWU1ZWY5ZGY3ZjFlNDJlZGNiNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnJhIS12eZWfb6l9rqHCV5s2T+XDoM2FcSnan1UeiEo2XwUYs
Z8XnZX+/k74ItbIol78UenJN2/q92Zga5ubPZkc/U6952gllCKrJfE+39ZOOmMCT
PdQA4OaHVVMLwRcLPBURc0vXpTaxGSHsNuoILZ2FYjZD0y1NTuSplaZJFozyHXGJ
9x81iOQDsr4UPRF0ylY3D72zuYqjzwp5ZV42PtFHp8FC9PshZOISkJ3htfQ+mT/W
EEPU0u4HEQswRorhrh0DZCfvXjsvgKL48qsfa3BcB1KfvsI65451KJwcOxrRQtUc
Bq7kTbZYPmUsGRqh9MXKxX2j3bpBb6Rj81foAQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPHWQ0OF2+OdO70Wcq9eyiC+WIT9MB8GA1UdIwQYMBaAFEh2B285Y1vDogvB
pxmQEx9Ql/AQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWNkYmFh
NDAxNjUzZDk1OTQzNmY0ZWY2ZjliYzBlNjgyOWJmNjE3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWNkMGVlNGMtNWQwNi00ZGE5LWJlNmMtYTdhMzg3
NDdhMDJmLzdmMDE4Y2NhNDIyNjAwM2EzNDhlZTVlZjlkZjdmMWU0MmVkY2I1MzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85Y2QwZWU0Yy01ZDA2LTRkYTktYmU2Yy1hN2Ez
ODc0N2EwMmYvNWNkYmFhNDAxNjUzZDk1OTQzNmY0ZWY2ZjliYzBlNjgyOWJmNjE3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDrsAwDQYJKoZIhvcNAQELBQADggEBAF0tODuUw+zpqhOG
kv1da5hwsJz4XpdeZWNmuwUJbk3sUu7FG/WOxlKjO5oD2bs3E3wVjWzIwc+YFo3e
6vHGK1Ye7o8R6ZTJkRHZ/ZDrrMDo5DpKCphYMUDnh/VcljilaCwQ3KYUNYgP1opF
tZM7nReGOQ/N+EU9f/JPtev5dsFSOPAL8gDGqfjKHok2B4M/cILRtZPGdyk/GX0V
7t2TmGrBA9JY+3ErNRh5TbXm+0C95i9ejCRrQd77Q5aCu3St+tXWxZLJaeIBhcTc
xTUyfZ8H12mKdPgeLhVwNGXk1isdT0F+Y+Qzq6Ex1tog60ikEwGApsS09Un+yMrf
dL1qgQ0=
-----END CERTIFICATE-----