Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/a91f9cbd21682e92cbfd8a67d2d7a6962dd1a182.roa
File:                     a91f9cbd21682e92cbfd8a67d2d7a6962dd1a182.roa (raw, json)
Hash identifier:          BkfPpsEggpb0hb1RNvMtI/G58pvPqF3cMKPQMa5ZM8Y=
Subject key identifier:   B8:2E:C1:6C:40:6C:EF:4E:C9:6B:26:C6:3B:F4:9F:BC:61:57:D3:BD
Certificate issuer:       /CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
Certificate serial:       0D0886
Authority key identifier: 67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/a91f9cbd21682e92cbfd8a67d2d7a6962dd1a182.roa
Signing time:             Sat 22 May 2021 13:47:15 +0000
ROA not before:           Sat 22 May 2021 03:00:00 +0000
ROA not after:            Mon 22 May 2023 03:00:00 +0000
asID:                     267823
IP address blocks:        2803:1860:c8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854150 (0xd0886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
        Validity
            Not Before: May 22 03:00:00 2021 GMT
            Not After : May 22 03:00:00 2023 GMT
        Subject: CN=a91f9cbd21682e92cbfd8a67d2d7a6962dd1a182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f6:84:5e:f9:47:30:d8:85:6c:cc:26:1c:38:
                    cf:ee:c8:e1:30:f2:5f:5f:24:16:b3:e6:fa:38:e6:
                    ab:1e:15:72:38:df:d9:f7:41:ea:4e:b1:d0:fd:5a:
                    72:8a:4f:46:51:96:cc:73:94:da:34:bf:21:ac:04:
                    02:90:5a:d7:6a:09:a8:fb:60:6b:b4:4b:1e:0e:ba:
                    56:37:e1:53:65:4c:ec:07:5b:d8:e0:85:50:b8:34:
                    0d:9f:bd:11:0a:14:14:61:4c:c0:23:68:2c:d6:40:
                    4f:02:c6:5e:7d:61:fa:a3:a2:c5:cc:30:6d:d1:00:
                    09:f1:45:eb:93:06:85:92:60:21:5b:09:c1:fc:f1:
                    2b:4b:fa:49:6b:6c:c5:93:82:bd:b4:3d:bd:d4:a0:
                    8c:9a:e2:ad:65:05:b5:4d:ee:32:56:e2:17:21:69:
                    b9:b0:91:de:ef:4d:77:56:a0:65:a4:85:f1:7b:7d:
                    13:f8:3d:34:19:64:2a:fb:b5:47:38:e7:9b:cc:63:
                    79:46:44:f5:86:c0:79:8a:f6:57:17:07:74:e4:ad:
                    10:d3:b8:ba:4d:8f:55:4a:e5:74:bf:4b:68:7b:d5:
                    84:bd:cd:b3:fb:3b:5d:52:fe:24:03:91:57:73:92:
                    cb:ca:86:65:57:96:99:00:b0:30:c3:f9:3e:19:97:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2E:C1:6C:40:6C:EF:4E:C9:6B:26:C6:3B:F4:9F:BC:61:57:D3:BD
            X509v3 Authority Key Identifier:
                keyid:67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/a91f9cbd21682e92cbfd8a67d2d7a6962dd1a182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:99:7a:3b:82:f1:c0:52:58:29:84:c2:64:ef:8f:38:f3:
         48:17:24:8d:57:87:e5:86:00:e8:68:c6:2c:aa:e0:00:e1:1f:
         c7:d8:2a:00:e1:65:64:e7:08:f2:53:d4:ee:fa:1b:66:0f:81:
         0b:99:0d:d3:09:90:e0:70:19:a1:cd:ee:7c:7c:bb:53:15:b0:
         89:03:af:07:5b:38:f4:92:40:16:5b:09:4c:cb:35:fa:97:2a:
         7e:43:8c:70:29:02:f6:fa:ff:fa:b6:75:fb:a7:76:66:15:78:
         e3:2e:f5:43:26:1d:e7:c8:4a:95:ed:49:06:23:5f:29:34:4e:
         61:7f:8c:8a:ed:3f:da:3d:8d:c1:f1:f9:5b:ed:24:f0:90:23:
         3a:4b:2b:87:dc:e2:70:e0:18:ce:19:55:a9:4d:e3:c4:e7:63:
         87:69:5e:ef:e1:49:f2:cc:b9:75:f9:b8:65:4d:1c:ca:91:d7:
         83:d1:1d:17:ce:04:5b:b7:76:91:22:6f:d4:f3:e6:05:f5:8f:
         25:aa:0b:2b:e9:ba:82:78:e7:a0:4c:b6:79:83:6d:74:77:f1:
         1b:de:35:01:0b:e2:04:3e:ef:b6:08:c4:c3:a7:08:75:a9:e8:
         24:2b:5d:79:2a:7a:2d:a1:1f:e1:69:a3:38:e8:c0:e0:d5:b3:
         11:e6:ce:fe
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDQiGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
YTY0MjA3OWVhYjEwNzdiZjYwMWIxZjM2M2JmZTFlODc2NGU4ZDMwHhcNMjEwNTIy
MDMwMDAwWhcNMjMwNTIyMDMwMDAwWjAzMTEwLwYDVQQDEyhhOTFmOWNiZDIxNjgy
ZTkyY2JmZDhhNjdkMmQ3YTY5NjJkZDFhMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5vaEXvlHMNiFbMwmHDjP7sjhMPJfXyQWs+b6OOarHhVyON/Z
90HqTrHQ/Vpyik9GUZbMc5TaNL8hrAQCkFrXagmo+2BrtEseDrpWN+FTZUzsB1vY
4IVQuDQNn70RChQUYUzAI2gs1kBPAsZefWH6o6LFzDBt0QAJ8UXrkwaFkmAhWwnB
/PErS/pJa2zFk4K9tD291KCMmuKtZQW1Te4yVuIXIWm5sJHe7013VqBlpIXxe30T
+D00GWQq+7VHOOebzGN5RkT1hsB5ivZXFwd05K0Q07i6TY9VSuV0v0toe9WEvc2z
+ztdUv4kA5FXc5LLyoZlV5aZALAww/k+GZeevQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLguwWxAbO9OyWsmxjv0n7xhV9O9MB8GA1UdIwQYMBaAFGcIVkJ1ZtvwOuOz
3xg7z2YCfKHyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWJhNjQy
MDc5ZWFiMTA3N2JmNjAxYjFmMzYzYmZlMWU4NzY0ZThkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTUwODg3YmYtZmVlMy00NDZlLWFiNTctMTQ1NDYw
YWYxOWFiL2E5MWY5Y2JkMjE2ODJlOTJjYmZkOGE2N2QyZDdhNjk2MmRkMWExODIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNTA4ODdiZi1mZWUzLTQ0NmUtYWI1Ny0xNDU0
NjBhZjE5YWIvYWJhNjQyMDc5ZWFiMTA3N2JmNjAxYjFmMzYzYmZlMWU4NzY0ZThk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDGGAAyDANBgkqhkiG9w0BAQsFAAOCAQEAPHyZejuC8cBS
WCmEwmTvjzjzSBckjVeH5YYA6GjGLKrgAOEfx9gqAOFlZOcI8lPU7vobZg+BC5kN
0wmQ4HAZoc3ufHy7UxWwiQOvB1s49JJAFlsJTMs1+pcqfkOMcCkC9vr/+rZ1+6d2
ZhV44y71QyYd58hKle1JBiNfKTROYX+Miu0/2j2NwfH5W+0k8JAjOksrh9zicOAY
zhlVqU3jxOdjh2le7+FJ8sy5dfm4ZU0cypHXg9EdF84EW7d2kSJv1PPmBfWPJaoL
K+m6gnjnoEy2eYNtdHfxG941AQviBD7vtgjEw6cIdanoJCtdeSp6LaEf4WmjOOjA
4NWzEebO/g==
-----END CERTIFICATE-----