Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/ae33b644f0e46f29d0487fd716c8a982257462ce.roa
File:                     ae33b644f0e46f29d0487fd716c8a982257462ce.roa (raw, json)
Hash identifier:          pY3vis01JwYCvcuBAaenesgZBtl0ZfKTOaSvfBysumI=
Subject key identifier:   85:24:12:04:B0:A3:28:5A:73:63:76:BB:26:8C:24:3E:1E:94:19:B8
Certificate issuer:       /CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Certificate serial:       0DDE5C
Authority key identifier: A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/ae33b644f0e46f29d0487fd716c8a982257462ce.roa
Signing time:             Wed 24 Mar 2021 14:37:25 +0000
ROA not before:           Wed 24 Mar 2021 14:37:25 +0000
ROA not after:            Tue 24 Mar 2026 14:37:25 +0000
asID:                     52468
IP address blocks:        2803:4580:8100::/40 maxlen: 48
                          2803:4580:9100::/40 maxlen: 48
                          2803:4580:9200::/40 maxlen: 48
                          2803:4580:c000::/36 maxlen: 48
                          2803:4580:d000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908892 (0xdde5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
        Validity
            Not Before: Mar 24 14:37:25 2021 GMT
            Not After : Mar 24 14:37:25 2026 GMT
        Subject: CN=ae33b644f0e46f29d0487fd716c8a982257462ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:e9:d5:77:03:ae:ec:2c:5b:3c:6a:75:aa:
                    1e:f3:0b:12:9c:22:4d:b4:44:95:f8:db:1a:ba:e3:
                    2b:b2:4c:20:08:77:d6:56:1b:f1:ec:c6:ff:cb:42:
                    a8:76:04:2e:8b:5a:31:94:4e:42:71:60:42:da:a0:
                    62:13:8e:25:75:5b:8a:be:ec:b5:32:4a:b0:ec:8b:
                    8a:b1:84:22:c9:1a:d4:76:63:9a:ef:b6:6b:7e:a1:
                    5d:c0:52:14:2f:73:72:49:08:cc:df:86:2d:44:97:
                    60:7a:18:ce:16:e5:10:d4:5f:31:04:aa:0c:b2:95:
                    31:a6:18:e1:b8:ff:22:23:eb:5f:e6:bd:c6:c1:21:
                    4b:dc:6b:13:2e:2f:9b:bf:d4:fd:38:3a:8f:e3:ea:
                    ee:9a:ca:f6:dc:0b:cf:93:b7:70:70:35:64:fa:99:
                    1c:9f:d2:34:e4:b6:f2:7f:be:67:54:02:69:95:a9:
                    f7:96:7b:20:dc:e5:3f:4c:2d:8d:3d:ce:cb:b6:3c:
                    70:82:89:20:d5:97:6d:d2:37:2f:cd:44:52:61:30:
                    44:cd:2f:e2:ec:20:8e:3e:42:42:34:7a:74:ba:c4:
                    94:d8:7e:2b:f0:bd:7b:93:20:d0:55:48:78:80:93:
                    c4:63:c4:50:34:3d:3a:75:f0:b3:93:5d:dc:41:76:
                    27:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:12:04:B0:A3:28:5A:73:63:76:BB:26:8C:24:3E:1E:94:19:B8
            X509v3 Authority Key Identifier:
                keyid:A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/ae33b644f0e46f29d0487fd716c8a982257462ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4580:8100::/40
                  2803:4580:9100::-2803:4580:92ff:ffff:ffff:ffff:ffff:ffff
                  2803:4580:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         76:93:ef:64:60:f9:91:1c:16:51:19:25:16:62:28:cf:61:0d:
         fa:d5:84:de:e4:ba:2c:50:24:2e:34:ad:37:2a:b1:c8:65:0f:
         e7:84:68:05:b4:f2:e0:80:61:c6:d6:9d:68:2b:4c:7d:80:41:
         e2:68:76:e6:cf:6d:76:be:0c:4a:6a:3e:41:af:6f:21:7c:c1:
         be:5f:57:a5:a0:71:fd:96:88:f5:94:a1:b8:9f:4e:79:ed:7a:
         fd:b0:5f:e5:fa:b3:62:4a:0c:5c:28:fc:ac:69:cd:bc:27:ac:
         ec:11:8d:ad:ea:1b:23:bb:4b:e5:c8:16:2e:0f:44:c7:85:c2:
         17:e9:42:ec:91:6d:28:30:4c:a6:78:94:e1:a7:36:ab:4c:2f:
         e9:46:74:da:14:21:94:6d:96:71:a4:ae:73:17:cc:aa:83:12:
         7f:ce:6f:e1:9c:fd:1b:2c:fc:4f:8c:b7:c9:bf:0c:dd:69:bf:
         c7:20:b1:eb:8d:71:d9:12:38:d9:29:5f:42:fc:fd:c2:ac:19:
         72:63:ed:41:b2:73:2b:7c:33:fb:8b:ac:a4:24:10:d7:04:4d:
         b0:eb:60:05:3b:81:15:d7:98:2b:66:56:4e:e6:1f:8f:83:9a:
         69:47:6c:80:ab:79:54:3a:ba:d4:74:56:80:54:76:d7:60:b8:
         05:f8:9a:1c
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIDDd5cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
ZmNjZTc5YmQ5YzA4YTdhOThkMWRmZmIxMjA2ODVlN2YzZTJmNzQwHhcNMjEwMzI0
MTQzNzI1WhcNMjYwMzI0MTQzNzI1WjAzMTEwLwYDVQQDEyhhZTMzYjY0NGYwZTQ2
ZjI5ZDA0ODdmZDcxNmM4YTk4MjI1NzQ2MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5enp1XcDruwsWzxqdaoe8wsSnCJNtESV+NsauuMrskwgCHfW
Vhvx7Mb/y0KodgQui1oxlE5CcWBC2qBiE44ldVuKvuy1Mkqw7IuKsYQiyRrUdmOa
77ZrfqFdwFIUL3NySQjM34YtRJdgehjOFuUQ1F8xBKoMspUxphjhuP8iI+tf5r3G
wSFL3GsTLi+bv9T9ODqP4+rumsr23AvPk7dwcDVk+pkcn9I05Lbyf75nVAJplan3
lnsg3OU/TC2NPc7Ltjxwgokg1Zdt0jcvzURSYTBEzS/i7CCOPkJCNHp0usSU2H4r
8L17kyDQVUh4gJPEY8RQND06dfCzk13cQXYnUQIDAQABo4ICdzCCAnMwHQYDVR0O
BBYEFIUkEgSwoyhac2N2uyaMJD4elBm4MB8GA1UdIwQYMBaAFKHk4Ty2WepJpdix
qUK10PYWk1ijMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWZmY2Nl
NzliZDljMDhhN2E5OGQxZGZmYjEyMDY4NWU3ZjNlMmY3NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQzNTBlNzQtOTc2My00YWJlLTkwMWMtNDA3NTk0
MTVjNjZkL2FlMzNiNjQ0ZjBlNDZmMjlkMDQ4N2ZkNzE2YzhhOTgyMjU3NDYyY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDM1MGU3NC05NzYzLTRhYmUtOTAxYy00MDc1
OTQxNWM2NmQvMWZmY2NlNzliZDljMDhhN2E5OGQxZGZmYjEyMDY4NWU3ZjNlMmY3
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQs
MCowKAQCAAIwIgMGACgDRYCBMBADBgAoA0WAkQMGACgDRYCSAwYFKANFgMAwDQYJ
KoZIhvcNAQELBQADggEBAHaT72Rg+ZEcFlEZJRZiKM9hDfrVhN7kuixQJC40rTcq
schlD+eEaAW08uCAYcbWnWgrTH2AQeJodubPbXa+DEpqPkGvbyF8wb5fV6Wgcf2W
iPWUobifTnntev2wX+X6s2JKDFwo/KxpzbwnrOwRja3qGyO7S+XIFi4PRMeFwhfp
QuyRbSgwTKZ4lOGnNqtML+lGdNoUIZRtlnGkrnMXzKqDEn/Ob+Gc/Rss/E+Mt8m/
DN1pv8cgseuNcdkSONkpX0L8/cKsGXJj7UGycyt8M/uLrKQkENcETbDrYAU7gRXX
mCtmVk7mH4+DmmlHbICreVQ6utR0VoBUdtdguAX4mhw=
-----END CERTIFICATE-----