Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/6cd7e69f4def56c4c0497416da295638ea98f5da.roa
File:                     6cd7e69f4def56c4c0497416da295638ea98f5da.roa (raw, json)
Hash identifier:          Rvx7vSvD1wR/AWQF7bDWhBxEqNt0dymrjHlOMvv8w6M=
Subject key identifier:   28:BE:42:2F:7D:B5:8C:C3:91:A5:23:9D:B7:78:7B:D5:2F:D2:A2:09
Certificate issuer:       /CN=33b2211f7639ca97f55599bde05cf8b49ec41579
Certificate serial:       08F1
Authority key identifier: 90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/6cd7e69f4def56c4c0497416da295638ea98f5da.roa
Signing time:             Thu 21 Oct 2021 14:00:03 +0000
ROA not before:           Thu 21 Oct 2021 02:00:00 +0000
ROA not after:            Sat 21 Oct 2023 02:00:00 +0000
asID:                     269739
IP address blocks:        2803:1960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b2211f7639ca97f55599bde05cf8b49ec41579
        Validity
            Not Before: Oct 21 02:00:00 2021 GMT
            Not After : Oct 21 02:00:00 2023 GMT
        Subject: CN=6cd7e69f4def56c4c0497416da295638ea98f5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:0b:ab:53:3e:42:0a:58:cd:62:51:7f:dc:
                    5d:78:9f:14:c7:95:40:e2:e3:4e:08:25:b4:59:83:
                    6f:a8:3d:89:de:f4:c8:ad:bb:2b:c8:f4:6d:fd:b8:
                    6a:be:f7:bd:8d:f0:aa:5a:07:d2:bf:23:27:60:ff:
                    14:05:3a:95:c5:ea:0e:da:c3:1c:3d:6d:d8:50:c1:
                    3c:17:b5:eb:c5:a1:d5:3e:7b:b9:83:13:1b:6e:e9:
                    ce:4e:ff:f6:b9:29:be:5f:20:ee:bb:19:63:10:a1:
                    1c:27:45:bf:df:db:8c:be:71:02:86:57:9e:08:c2:
                    ee:83:81:12:5b:8b:39:1a:cb:48:19:95:5f:7f:9b:
                    b6:0e:53:64:1c:89:07:2a:27:cb:54:ea:d3:b1:9a:
                    16:fe:c8:5d:bd:41:9d:49:89:a4:f4:0f:4c:9f:1f:
                    dc:de:98:67:1f:d7:7d:86:4e:6b:42:19:93:80:0d:
                    8f:70:c3:6d:be:23:54:a2:25:24:ae:78:a9:68:83:
                    82:3f:fd:59:dd:97:e1:9b:3d:9b:e7:90:40:16:08:
                    4f:5c:de:31:11:2d:2f:68:6c:dc:0b:9c:fa:a9:da:
                    c3:5e:0e:5e:61:1c:70:5c:66:e1:83:2a:be:2e:9f:
                    98:0d:52:c2:3a:d7:bd:8f:59:a6:12:d1:1d:23:a4:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:42:2F:7D:B5:8C:C3:91:A5:23:9D:B7:78:7B:D5:2F:D2:A2:09
            X509v3 Authority Key Identifier:
                keyid:90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/6cd7e69f4def56c4c0497416da295638ea98f5da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/33b2211f7639ca97f55599bde05cf8b49ec41579.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1960::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:da:13:1f:d8:63:6b:3b:2a:5b:5f:ed:69:63:82:38:a7:0d:
         fb:df:40:c2:a9:76:5b:46:8a:66:a1:8d:d3:aa:07:c4:b3:37:
         f5:83:91:65:37:dd:be:d0:b9:8a:0c:38:b5:11:96:ae:b9:bc:
         e4:98:d7:18:94:11:78:16:8a:36:bd:36:34:7a:9d:95:5d:d5:
         01:35:54:f8:52:c1:6e:83:75:f2:09:0e:df:da:e7:63:06:91:
         0d:ba:92:bf:df:25:88:1e:4b:53:5c:13:ae:36:3a:94:88:9a:
         4a:0d:26:af:a3:9e:f2:70:6a:e9:b5:13:78:23:ad:08:0b:42:
         65:61:2a:f4:e7:b4:72:1b:42:41:30:03:e8:d7:69:65:f5:1e:
         5a:76:6b:df:01:71:ee:d8:db:56:7f:79:bf:a8:7f:25:0b:b5:
         0c:fa:8e:6e:a4:31:d4:77:d7:ff:a9:b9:20:35:57:56:6e:13:
         e0:91:b1:f3:0b:de:80:58:b8:70:0b:f9:25:19:3d:52:8a:c6:
         5e:48:df:3b:39:82:c4:56:7c:27:9c:df:5a:d5:6a:4b:16:24:
         ab:ed:f8:aa:21:e4:43:f0:19:bf:86:8f:2d:fa:b4:5a:c6:48:
         51:4f:27:30:20:b8:a0:5e:be:cc:70:e0:05:de:76:94:1e:f0:
         d8:72:33:85
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNi
MjIxMWY3NjM5Y2E5N2Y1NTU5OWJkZTA1Y2Y4YjQ5ZWM0MTU3OTAeFw0yMTEwMjEw
MjAwMDBaFw0yMzEwMjEwMjAwMDBaMDMxMTAvBgNVBAMTKDZjZDdlNjlmNGRlZjU2
YzRjMDQ5NzQxNmRhMjk1NjM4ZWE5OGY1ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCE2AurUz5CCljNYlF/3F14nxTHlUDi404IJbRZg2+oPYne9Mit
uyvI9G39uGq+972N8KpaB9K/Iydg/xQFOpXF6g7awxw9bdhQwTwXtevFodU+e7mD
Extu6c5O//a5Kb5fIO67GWMQoRwnRb/f24y+cQKGV54Iwu6DgRJbizkay0gZlV9/
m7YOU2QciQcqJ8tU6tOxmhb+yF29QZ1JiaT0D0yfH9zemGcf132GTmtCGZOADY9w
w22+I1SiJSSueKlog4I//Vndl+GbPZvnkEAWCE9c3jERLS9obNwLnPqp2sNeDl5h
HHBcZuGDKr4un5gNUsI6172PWaYS0R0jpHZHAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUKL5CL321jMORpSOdt3h71S/SogkwHwYDVR0jBBgwFoAUkLsDa6yIInofzl8U
2VTLGpwb5WkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zM2IyMjEx
Zjc2MzljYTk3ZjU1NTk5YmRlMDVjZjhiNDllYzQxNTc5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85ZDNlY2NjYS1kYjBjLTQ2YTQtOTU0OS01MGQzZDQ0
ZWJiZDIvNmNkN2U2OWY0ZGVmNTZjNGMwNDk3NDE2ZGEyOTU2MzhlYTk4ZjVkYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzlkM2VjY2NhLWRiMGMtNDZhNC05NTQ5LTUwZDNk
NDRlYmJkMi8zM2IyMjExZjc2MzljYTk3ZjU1NTk5YmRlMDVjZjhiNDllYzQxNTc5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAMZYDANBgkqhkiG9w0BAQsFAAOCAQEAVNoTH9hjazsqW1/t
aWOCOKcN+99Awql2W0aKZqGN06oHxLM39YORZTfdvtC5igw4tRGWrrm85JjXGJQR
eBaKNr02NHqdlV3VATVU+FLBboN18gkO39rnYwaRDbqSv98liB5LU1wTrjY6lIia
Sg0mr6Oe8nBq6bUTeCOtCAtCZWEq9Oe0chtCQTAD6NdpZfUeWnZr3wFx7tjbVn95
v6h/JQu1DPqObqQx1HfX/6m5IDVXVm4T4JGx8wvegFi4cAv5JRk9UorGXkjfOzmC
xFZ8J5zfWtVqSxYkq+34qiHkQ/AZv4aPLfq0WsZIUU8nMCC4oF6+zHDgBd52lB7w
2HIzhQ==
-----END CERTIFICATE-----