Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/d6eaa4d4d1bf10eca8e3ca9b907439933c684224.roa
File:                     d6eaa4d4d1bf10eca8e3ca9b907439933c684224.roa (raw, json)
Hash identifier:          +UTIOkTTBi5lvI0jrWXFeyXzhvescyVaOi5r7NlBrxU=
Subject key identifier:   9B:D9:81:80:02:76:B4:A7:19:C6:7D:5E:C8:71:1F:A6:5A:23:F1:6B
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       0DADC9
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/d6eaa4d4d1bf10eca8e3ca9b907439933c684224.roa
Signing time:             Wed 24 Mar 2021 14:47:44 +0000
ROA not before:           Wed 24 Mar 2021 14:47:41 +0000
ROA not after:            Tue 24 Mar 2026 14:47:41 +0000
asID:                     264660
IP address blocks:        2803:3c40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896457 (0xdadc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 24 14:47:41 2021 GMT
            Not After : Mar 24 14:47:41 2026 GMT
        Subject: CN=d6eaa4d4d1bf10eca8e3ca9b907439933c684224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:b5:08:5b:a8:f0:93:a8:fa:f1:15:d8:09:
                    b5:44:b3:94:d9:10:62:37:1b:09:9d:4f:41:b3:20:
                    c5:9e:f9:1e:0c:6c:42:bd:e2:d9:93:8c:63:16:5d:
                    28:82:1d:5d:bd:eb:c4:dd:39:00:ce:94:be:82:fc:
                    ff:61:d2:db:ca:64:16:74:80:da:1c:9d:68:88:ed:
                    35:32:67:49:be:1d:c1:f9:db:d4:b6:10:f5:a9:83:
                    1b:94:35:36:95:39:1f:57:93:f3:e2:1b:37:ea:1d:
                    95:e3:ca:9c:18:d0:6e:4a:58:e0:ce:6c:e3:02:ea:
                    6f:24:10:58:0e:05:93:38:67:f0:cf:c5:3b:0e:52:
                    72:5a:51:bf:a4:32:e3:a7:55:eb:f3:db:bc:49:2d:
                    43:bf:38:5f:84:63:50:1f:a7:b2:5e:f9:23:f4:b7:
                    44:66:64:4e:33:83:7d:9e:60:94:b3:52:02:7e:b5:
                    83:ef:38:60:a3:dc:11:aa:9b:90:b7:35:ea:fc:57:
                    61:0c:e9:f1:71:3c:5f:04:a9:a5:49:b9:89:b2:00:
                    aa:c1:a8:70:8d:e5:d6:da:a7:9d:00:b7:cf:12:a8:
                    36:09:48:4e:15:de:7e:8a:99:5c:20:9d:6e:9b:0a:
                    19:7a:31:4c:01:e7:01:4b:59:5f:b6:dc:7b:76:5f:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D9:81:80:02:76:B4:A7:19:C6:7D:5E:C8:71:1F:A6:5A:23:F1:6B
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/d6eaa4d4d1bf10eca8e3ca9b907439933c684224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:a9:24:c3:21:a9:e4:55:06:44:6a:14:1d:aa:d1:78:3b:
         f6:40:d4:94:59:1c:a0:73:ef:04:90:05:83:d9:52:33:b7:52:
         21:bb:44:ac:da:3e:05:e4:18:31:2c:e6:ff:54:88:67:c2:2e:
         99:c9:fd:60:ca:eb:6c:f6:ad:01:2f:6c:c0:37:b1:ed:73:45:
         dd:d8:c2:c4:6a:1f:7b:a3:80:26:52:d1:e5:32:78:78:12:1e:
         45:22:68:2a:d3:f8:8c:f8:b7:21:48:71:66:d9:06:ce:6a:cc:
         26:af:4c:3c:c8:f0:50:e5:66:69:66:6e:c6:32:f8:90:81:33:
         5f:8b:13:cd:9c:5e:7a:c4:79:c6:1e:c3:73:c7:01:ab:c8:8d:
         23:c0:77:c9:93:17:d3:7d:42:c3:35:02:ac:d1:8f:7f:e2:00:
         d8:2e:7e:8a:91:a6:d2:1e:d9:a7:0e:ad:45:fa:a8:17:74:57:
         ac:83:59:cc:5e:71:51:ac:e7:c4:cb:d2:ec:be:34:fe:a5:91:
         fc:c1:a8:5d:92:75:8b:fb:ca:e5:d4:e0:9e:34:bc:63:df:6d:
         dd:25:d5:56:01:73:a6:e7:84:b2:29:ea:01:78:6b:f6:04:db:
         23:63:a2:98:36:c7:09:26:37:ec:ed:10:be:af:ed:2c:fd:90:
         44:f4:02:65
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDa3JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZTRjYWRhZmNmN2UwM2FmZTI4OTI1YWRmMzUwZjEyODZkYjdiMjUwHhcNMjEwMzI0
MTQ0NzQxWhcNMjYwMzI0MTQ0NzQxWjAzMTEwLwYDVQQDEyhkNmVhYTRkNGQxYmYx
MGVjYThlM2NhOWI5MDc0Mzk5MzNjNjg0MjI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAocy1CFuo8JOo+vEV2Am1RLOU2RBiNxsJnU9BsyDFnvkeDGxC
veLZk4xjFl0ogh1dvevE3TkAzpS+gvz/YdLbymQWdIDaHJ1oiO01MmdJvh3B+dvU
thD1qYMblDU2lTkfV5Pz4hs36h2V48qcGNBuSljgzmzjAupvJBBYDgWTOGfwz8U7
DlJyWlG/pDLjp1Xr89u8SS1DvzhfhGNQH6eyXvkj9LdEZmROM4N9nmCUs1ICfrWD
7zhgo9wRqpuQtzXq/FdhDOnxcTxfBKmlSbmJsgCqwahwjeXW2qedALfPEqg2CUhO
Fd5+iplcIJ1umwoZejFMAecBS1lfttx7dl+4cQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJvZgYACdrSnGcZ9XshxH6ZaI/FrMB8GA1UdIwQYMBaAFNaRNNTUo5m3dxWU
ae+IZyBfwVVzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBlNGNh
ZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2IyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ4YjhmYWEtYmJlMy00MzcxLWE5NWEtZGIxOTdk
ZmQzYmJmL2Q2ZWFhNGQ0ZDFiZjEwZWNhOGUzY2E5YjkwNzQzOTkzM2M2ODQyMjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDhiOGZhYS1iYmUzLTQzNzEtYTk1YS1kYjE5
N2RmZDNiYmYvYjBlNGNhZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2Iy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDPEAwDQYJKoZIhvcNAQELBQADggEBAEPYqSTDIankVQZE
ahQdqtF4O/ZA1JRZHKBz7wSQBYPZUjO3UiG7RKzaPgXkGDEs5v9UiGfCLpnJ/WDK
62z2rQEvbMA3se1zRd3YwsRqH3ujgCZS0eUyeHgSHkUiaCrT+Iz4tyFIcWbZBs5q
zCavTDzI8FDlZmlmbsYy+JCBM1+LE82cXnrEecYew3PHAavIjSPAd8mTF9N9QsM1
AqzRj3/iANgufoqRptIe2acOrUX6qBd0V6yDWcxecVGs58TL0uy+NP6lkfzBqF2S
dYv7yuXU4J40vGPfbd0l1VYBc6bnhLIp6gF4a/YE2yNjopg2xwkmN+ztEL6v7Sz9
kET0AmU=
-----END CERTIFICATE-----