Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/0bfbd2fe01c751f06fcddb4e83f90596477303a6.roa
File:                     0bfbd2fe01c751f06fcddb4e83f90596477303a6.roa (raw, json)
Hash identifier:          LIBDCjOgDdEOhaiY4TknkT+OQxj1plbTEJqX0sC+yEQ=
Subject key identifier:   5A:DD:C7:A3:39:EA:FA:74:D3:17:86:AC:76:26:D9:17:87:57:EC:01
Certificate issuer:       /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial:       113E21
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/0bfbd2fe01c751f06fcddb4e83f90596477303a6.roa
Signing time:             Thu 09 Sep 2021 18:28:18 +0000
ROA not before:           Thu 09 Sep 2021 03:00:00 +0000
ROA not after:            Sat 09 Sep 2023 03:00:00 +0000
asID:                     21826
IP address blocks:        2803:8100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130017 (0x113e21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Validity
            Not Before: Sep  9 03:00:00 2021 GMT
            Not After : Sep  9 03:00:00 2023 GMT
        Subject: CN=0bfbd2fe01c751f06fcddb4e83f90596477303a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:89:b6:4b:ed:dc:04:5a:11:c4:05:48:4f:
                    a2:c5:1f:3c:b2:61:9b:5b:5c:c0:16:02:58:01:6f:
                    4b:bd:ae:56:f0:c7:c7:a3:8f:47:e2:b3:aa:5f:7d:
                    40:89:5c:42:7b:f8:6c:1d:5d:7a:da:c3:03:a1:3f:
                    87:43:63:1b:db:62:b2:76:57:b3:65:27:3e:1a:97:
                    2a:38:08:60:fc:65:5d:12:b9:c9:66:7b:b8:35:59:
                    76:e6:52:fe:78:e9:fa:30:d3:2a:c6:a0:43:ec:30:
                    18:8e:1c:e6:ab:f4:20:79:d9:1d:dc:97:a6:21:8b:
                    05:9a:4a:86:de:0d:ea:cf:de:c4:b2:88:be:94:e2:
                    2b:e7:be:bb:47:f8:95:0f:bb:b7:10:bd:63:06:12:
                    59:23:b0:bd:f9:03:81:53:1f:2c:ee:fd:3b:cb:48:
                    08:c8:1d:85:67:75:35:8c:41:bd:bb:90:0b:c1:f9:
                    09:8c:4c:5b:2c:5b:7f:0c:df:4a:3d:44:39:d5:a3:
                    bb:ff:e0:ee:b8:4a:b8:25:70:c7:89:eb:8e:3d:82:
                    1d:bd:cf:5b:3a:a0:03:a0:82:32:64:f9:24:54:3d:
                    fa:d0:3c:cc:23:23:4f:e3:c0:8f:74:4f:bd:31:e9:
                    cf:ea:a8:ab:a3:ac:3d:63:0e:c4:99:03:6a:75:4e:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DD:C7:A3:39:EA:FA:74:D3:17:86:AC:76:26:D9:17:87:57:EC:01
            X509v3 Authority Key Identifier:
                keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/0bfbd2fe01c751f06fcddb4e83f90596477303a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:10:ec:be:2e:ec:b9:94:e1:46:8a:79:f7:f0:78:f9:36:f2:
         f6:96:a3:93:74:76:7a:61:b0:61:28:76:70:96:06:98:6b:cd:
         16:af:c5:28:51:bd:4d:92:d7:21:52:45:dc:16:8e:c7:6f:23:
         e2:20:7f:99:d4:28:9f:a6:4b:b2:5d:19:04:5b:49:c4:23:ef:
         43:c9:45:c4:06:b2:36:a7:08:71:29:33:d2:2f:4a:51:ee:b1:
         a6:62:53:72:ad:6e:51:49:77:bf:21:6b:ae:d6:7e:03:a2:47:
         5e:5e:ac:7f:b2:84:26:cd:3a:be:08:02:ed:e5:0f:91:29:d6:
         c0:29:8b:f3:0f:ed:cc:7f:79:b8:c8:eb:86:7f:a9:a3:89:95:
         90:79:30:7e:ab:d1:bc:31:cb:00:df:1d:40:90:4e:d1:aa:2f:
         51:c1:f4:a8:b4:62:c7:b4:50:67:c4:81:77:2c:b9:9a:9f:99:
         c4:9a:9c:c8:d9:ee:42:20:b3:7d:37:31:a9:9a:bb:0b:74:39:
         7b:6e:0c:8e:22:68:7c:a2:30:9f:1f:ab:67:b0:2b:9f:16:bd:
         70:82:15:db:c1:3f:d7:62:d3:82:a4:8f:37:8b:70:bd:e6:84:
         26:19:26:9a:80:cd:87:18:a5:9e:b7:b0:a1:89:f9:02:91:38:
         74:0e:3e:c0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDET4hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
MmQwYWU2NzI1NjdiZjBlNzA3OTAzNTg5MzY1ZmFhZTFmZjBiYmMwHhcNMjEwOTA5
MDMwMDAwWhcNMjMwOTA5MDMwMDAwWjAzMTEwLwYDVQQDEygwYmZiZDJmZTAxYzc1
MWYwNmZjZGRiNGU4M2Y5MDU5NjQ3NzMwM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvw+Jtkvt3ARaEcQFSE+ixR88smGbW1zAFgJYAW9Lva5W8MfH
o49H4rOqX31AiVxCe/hsHV162sMDoT+HQ2Mb22KydlezZSc+GpcqOAhg/GVdErnJ
Znu4NVl25lL+eOn6MNMqxqBD7DAYjhzmq/Qgedkd3JemIYsFmkqG3g3qz97Esoi+
lOIr5767R/iVD7u3EL1jBhJZI7C9+QOBUx8s7v07y0gIyB2FZ3U1jEG9u5ALwfkJ
jExbLFt/DN9KPUQ51aO7/+DuuEq4JXDHieuOPYIdvc9bOqADoIIyZPkkVD360DzM
IyNP48CPdE+9MenP6qiro6w9Yw7EmQNqdU5HWwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFFrdx6M56vp00xeGrHYm2ReHV+wBMB8GA1UdIwQYMBaAFHJjYSAgisbOig/l
mH4OxY10xWnVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWYyZDBh
ZTY3MjU2N2JmMGU3MDc5MDM1ODkzNjVmYWFlMWZmMGJiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQyZmQ0MWQtZjkyZC00MDQ4LWJlNTMtNzQ4NTQz
NDI2MDAxLzBiZmJkMmZlMDFjNzUxZjA2ZmNkZGI0ZTgzZjkwNTk2NDc3MzAzYTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDJmZDQxZC1mOTJkLTQwNDgtYmU1My03NDg1
NDM0MjYwMDEvZWYyZDBhZTY3MjU2N2JmMGU3MDc5MDM1ODkzNjVmYWFlMWZmMGJi
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDgQAwDQYJKoZIhvcNAQELBQADggEBABEQ7L4u7LmU4UaK
effwePk28vaWo5N0dnphsGEodnCWBphrzRavxShRvU2S1yFSRdwWjsdvI+Igf5nU
KJ+mS7JdGQRbScQj70PJRcQGsjanCHEpM9IvSlHusaZiU3KtblFJd78ha67WfgOi
R15erH+yhCbNOr4IAu3lD5Ep1sApi/MP7cx/ebjI64Z/qaOJlZB5MH6r0bwxywDf
HUCQTtGqL1HB9Ki0Yse0UGfEgXcsuZqfmcSanMjZ7kIgs303Mamauwt0OXtuDI4i
aHyiMJ8fq2ewK58WvXCCFdvBP9di04KkjzeLcL3mhCYZJpqAzYcYpZ63sKGJ+QKR
OHQOPsA=
-----END CERTIFICATE-----