Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/09b4bb39a7074f54101cbdc15fb198e72cac897c.roa
File:                     09b4bb39a7074f54101cbdc15fb198e72cac897c.roa (raw, json)
Hash identifier:          zx9jVDQQc4hATzqYHCVwvGNe6plBXm0TAhBOQ/Ch584=
Subject key identifier:   42:D9:BE:8C:CC:37:6F:1A:BB:0B:86:B1:EE:61:E3:5D:D0:8D:8A:A4
Certificate issuer:       /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial:       0813D8
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/09b4bb39a7074f54101cbdc15fb198e72cac897c.roa
Signing time:             Mon 18 Oct 2021 22:22:41 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     271813
IP address blocks:        2803:f010::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529368 (0x813d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=09b4bb39a7074f54101cbdc15fb198e72cac897c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:9e:4d:54:77:ac:21:7b:79:1b:45:dd:ed:
                    78:57:5a:29:ce:ef:4b:cb:ce:ae:46:06:45:b2:c0:
                    76:56:af:14:0f:ce:4e:2a:83:19:7d:ee:12:2c:78:
                    c1:51:da:61:4f:87:df:56:d2:32:27:2c:43:6f:e9:
                    03:4e:fa:77:80:62:f4:86:67:9c:94:1d:c4:ca:5f:
                    83:1b:fc:62:4d:00:6b:ab:0d:a3:13:8d:6c:74:6e:
                    21:c9:b7:27:05:89:5b:c4:e1:3e:ab:fb:3c:66:81:
                    a1:83:1f:b5:07:94:99:33:df:7f:82:3a:f2:23:0d:
                    81:e2:8e:2b:89:2c:ae:10:cd:7d:f8:ac:32:8e:df:
                    d2:13:47:cd:5c:fb:55:e6:30:55:87:48:ac:bc:97:
                    47:ba:5a:4e:8f:dd:46:ff:a6:a0:a2:a8:fe:fe:83:
                    c1:d1:b0:18:a0:3e:9d:22:1f:9e:b2:03:33:29:e3:
                    b3:31:f5:86:29:b9:7a:c8:3f:b1:55:af:54:d5:d7:
                    17:7f:2e:7c:bf:54:97:26:41:9f:79:cd:52:ba:1d:
                    0b:a7:99:39:15:32:04:2d:1d:64:42:b7:1f:67:87:
                    df:7f:18:fd:6a:cf:76:38:b0:a9:0b:c3:0d:89:25:
                    8c:97:8d:31:42:ed:8a:61:95:a7:8b:02:fe:35:ae:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D9:BE:8C:CC:37:6F:1A:BB:0B:86:B1:EE:61:E3:5D:D0:8D:8A:A4
            X509v3 Authority Key Identifier:
                keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/09b4bb39a7074f54101cbdc15fb198e72cac897c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f010::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:02:7c:82:6e:31:56:94:8a:90:29:d5:7a:cf:28:d5:00:
         42:da:e8:7c:e7:75:54:e2:3f:00:a3:5a:17:14:fc:9a:e5:ef:
         a7:3e:d8:59:c0:af:f7:94:8f:aa:f7:a7:05:4f:1a:8e:30:54:
         8b:53:dc:62:db:12:d3:13:49:3b:27:dc:fd:02:16:1f:3e:60:
         7f:a2:83:43:9b:4b:94:13:37:d2:2a:b2:e3:80:37:70:c2:7f:
         c1:49:2a:6a:0d:6f:35:fa:b3:2d:cb:a1:32:3d:0d:fa:0b:b2:
         8f:1c:e3:8b:a8:e5:30:21:5d:71:c6:44:1f:8b:d0:bf:1f:55:
         22:44:9b:4c:11:53:e6:8f:99:39:2e:8a:7b:24:66:38:d9:a0:
         10:b5:0f:f1:54:84:29:64:53:8c:65:22:f5:34:d9:1d:fa:da:
         9e:ba:3e:2a:7b:76:cf:32:c5:d8:86:89:a1:43:d7:51:85:af:
         0e:12:f2:2a:ea:ae:59:35:67:8c:c8:ab:0f:ee:f9:56:70:bd:
         fe:94:f9:fb:72:1c:b7:8a:78:f7:c4:84:0d:e1:b7:78:64:32:
         21:92:44:9c:65:8c:6d:10:b3:dc:a5:d0:a5:6b:3c:38:17:75:
         fa:ce:1f:51:8c:ae:ca:b4:13:73:c3:93:ea:32:25:8b:1a:04:
         78:68:07:d3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCBPYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
Y2NmNjcxNjA1YjVlNzI1ZWM1OTUzNTZmYmE0NjJiMTU0NDIxMzAwHhcNMjExMDE4
MDMwMDAwWhcNMjMxMDE4MDMwMDAwWjAzMTEwLwYDVQQDEygwOWI0YmIzOWE3MDc0
ZjU0MTAxY2JkYzE1ZmIxOThlNzJjYWM4OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyZCeTVR3rCF7eRtF3e14V1opzu9Ly86uRgZFssB2Vq8UD85O
KoMZfe4SLHjBUdphT4ffVtIyJyxDb+kDTvp3gGL0hmeclB3Eyl+DG/xiTQBrqw2j
E41sdG4hybcnBYlbxOE+q/s8ZoGhgx+1B5SZM99/gjryIw2B4o4riSyuEM19+Kwy
jt/SE0fNXPtV5jBVh0isvJdHulpOj91G/6agoqj+/oPB0bAYoD6dIh+esgMzKeOz
MfWGKbl6yD+xVa9U1dcXfy58v1SXJkGfec1Suh0Lp5k5FTIELR1kQrcfZ4fffxj9
as92OLCpC8MNiSWMl40xQu2KYZWniwL+Na4NawIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFELZvozMN28auwuGse5h413QjYqkMB8GA1UdIwQYMBaAFC3pRV6DpCIyqkjn
TYMYFfini1/BMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFjY2Y2
NzE2MDViNWU3MjVlYzU5NTM1NmZiYTQ2MmIxNTQ0MjEzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTYyNzQxYzctOTcwNy00OGQ0LTljOTctYjkxMWE4
YjFkZmQyLzA5YjRiYjM5YTcwNzRmNTQxMDFjYmRjMTVmYjE5OGU3MmNhYzg5N2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNjI3NDFjNy05NzA3LTQ4ZDQtOWM5Ny1iOTEx
YThiMWRmZDIvNzFjY2Y2NzE2MDViNWU3MjVlYzU5NTM1NmZiYTQ2MmIxNTQ0MjEz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgD8BAAADANBgkqhkiG9w0BAQsFAAOCAQEAetoCfIJuMVaU
ipAp1XrPKNUAQtrofOd1VOI/AKNaFxT8muXvpz7YWcCv95SPqvenBU8ajjBUi1Pc
YtsS0xNJOyfc/QIWHz5gf6KDQ5tLlBM30iqy44A3cMJ/wUkqag1vNfqzLcuhMj0N
+guyjxzji6jlMCFdccZEH4vQvx9VIkSbTBFT5o+ZOS6KeyRmONmgELUP8VSEKWRT
jGUi9TTZHfranro+Knt2zzLF2IaJoUPXUYWvDhLyKuquWTVnjMirD+75VnC9/pT5
+3Ict4p498SEDeG3eGQyIZJEnGWMbRCz3KXQpWs8OBd1+s4fUYyuyrQTc8OT6jIl
ixoEeGgH0w==
-----END CERTIFICATE-----