Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/183fcac44d10e72a379a4677f814decf290ab791.roa
File:                     183fcac44d10e72a379a4677f814decf290ab791.roa (raw, json)
Hash identifier:          tHmqXInglPmm10ANRrpFjfcTEyLjksxhxk9vooDGdFY=
Subject key identifier:   7A:FD:21:62:A1:3C:D3:C4:4F:39:73:3D:6A:99:4D:F6:26:0F:50:56
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       111F08
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/183fcac44d10e72a379a4677f814decf290ab791.roa
Signing time:             Fri 29 Oct 2021 18:24:38 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        2803:7860:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122056 (0x111f08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=183fcac44d10e72a379a4677f814decf290ab791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:af:0c:f0:33:71:22:26:45:3e:ce:f9:1c:
                    68:30:10:9b:35:fb:b3:37:d3:ad:21:45:54:e4:82:
                    42:46:29:04:40:a6:60:bb:24:c6:7a:9c:2c:03:57:
                    e6:cb:7d:df:f5:b3:a5:58:9c:42:a6:70:08:73:fc:
                    da:f8:2c:d3:eb:4e:41:1c:7e:e8:ec:4d:a1:1b:e9:
                    1d:8c:b5:94:c4:16:9f:91:e9:34:92:2b:3d:78:8d:
                    50:a5:71:63:62:10:05:68:a6:08:5a:c1:dc:51:3c:
                    8d:c9:ac:5e:2e:48:8a:af:6d:73:a9:5b:f6:d6:41:
                    55:3c:d0:3e:06:b9:f7:51:2e:16:d0:3d:6a:40:72:
                    79:85:db:0f:68:36:bb:42:c2:7c:a1:fe:b0:7e:2f:
                    5c:67:ad:91:62:aa:47:03:01:1d:be:86:e4:f1:f7:
                    48:d0:d9:98:4e:c8:24:e4:92:55:44:6b:96:71:0d:
                    27:76:40:ed:2c:bd:4e:9b:31:12:93:f5:dc:af:ce:
                    25:ee:79:0f:66:c5:22:fb:4f:5d:73:cb:52:44:29:
                    19:cb:3d:e1:b3:55:45:96:e3:82:17:1b:0e:6f:37:
                    28:c2:16:b7:f8:7d:1b:aa:30:16:9e:eb:ca:a6:25:
                    c2:cc:b5:34:7f:2f:57:85:21:99:7b:9c:64:1a:22:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:21:62:A1:3C:D3:C4:4F:39:73:3D:6A:99:4D:F6:26:0F:50:56
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/183fcac44d10e72a379a4677f814decf290ab791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7860:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:9d:0c:ca:4e:42:1f:24:21:98:c9:ee:00:87:77:e3:0d:
         05:91:e4:83:65:e1:0b:57:7b:ef:7a:78:08:74:8e:db:6b:97:
         aa:47:05:8a:86:0a:a2:90:db:29:3c:ae:c9:fb:8f:39:44:05:
         94:25:e9:28:58:f5:16:0c:b9:2b:67:da:cf:c8:36:7d:6e:1c:
         3c:dd:ab:9b:39:ea:d0:97:2e:e0:76:dc:df:8d:d2:95:21:5d:
         37:f0:df:9d:e0:54:17:72:81:3b:c8:3c:3a:9c:8e:70:0a:bc:
         12:97:52:ec:70:d3:19:c0:55:18:ae:7b:20:ca:8c:34:cb:2c:
         17:38:46:9a:e7:5c:db:62:46:7b:c2:bd:da:01:a9:8f:81:0c:
         6b:ab:af:e4:d4:20:c5:a8:3d:9b:84:fe:f6:e5:26:09:c8:bd:
         f7:71:77:c0:5b:f2:26:a8:d8:1b:25:40:64:b2:83:dd:91:4c:
         c5:dd:79:fc:41:c8:58:32:71:44:a0:fa:aa:09:23:7c:32:fc:
         25:4f:e0:db:5a:14:54:aa:81:cd:bb:6f:2f:9d:a3:b7:47:10:
         11:b0:74:ab:ab:49:54:67:fa:ee:6f:c9:98:e3:48:1f:31:29:
         2c:b2:a5:19:d1:8c:ae:11:e2:55:5e:d9:b9:dd:0a:f7:2c:dd:
         4c:56:73:9a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDER8IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
YTliYTEwYWZkNTQxMzUzNTI4MDdiM2RkZGVkZjNjNTNkMTVmMTYwHhcNMjExMDI5
MDMwMDAwWhcNMjUxMDMxMDMwMDAwWjAzMTEwLwYDVQQDEygxODNmY2FjNDRkMTBl
NzJhMzc5YTQ2NzdmODE0ZGVjZjI5MGFiNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjWvDPAzcSImRT7O+RxoMBCbNfuzN9OtIUVU5IJCRikEQKZg
uyTGepwsA1fmy33f9bOlWJxCpnAIc/za+CzT605BHH7o7E2hG+kdjLWUxBafkek0
kis9eI1QpXFjYhAFaKYIWsHcUTyNyaxeLkiKr21zqVv21kFVPNA+Brn3US4W0D1q
QHJ5hdsPaDa7QsJ8of6wfi9cZ62RYqpHAwEdvobk8fdI0NmYTsgk5JJVRGuWcQ0n
dkDtLL1OmzESk/Xcr84l7nkPZsUi+09dc8tSRCkZyz3hs1VFluOCFxsObzcowha3
+H0bqjAWnuvKpiXCzLU0fy9XhSGZe5xkGiL9iwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFHr9IWKhPNPETzlzPWqZTfYmD1BWMB8GA1UdIwQYMBaAFHD+MaBMfS0Z5I4p
D2D3F53xvX/gMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmNhOWJh
MTBhZmQ1NDEzNTM1MjgwN2IzZGRkZWRmM2M1M2QxNWYxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTc3OTBjNDctY2Y4YS00NGM1LTk1MTUtN2VkODQx
NGIyZGQwLzE4M2ZjYWM0NGQxMGU3MmEzNzlhNDY3N2Y4MTRkZWNmMjkwYWI3OTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNzc5MGM0Ny1jZjhhLTQ0YzUtOTUxNS03ZWQ4
NDE0YjJkZDAvNmNhOWJhMTBhZmQ1NDEzNTM1MjgwN2IzZGRkZWRmM2M1M2QxNWYx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBigDeGDAMA0GCSqGSIb3DQEBCwUAA4IBAQBj1Z0Myk5CHyQh
mMnuAId34w0FkeSDZeELV3vvengIdI7ba5eqRwWKhgqikNspPK7J+485RAWUJeko
WPUWDLkrZ9rPyDZ9bhw83aubOerQly7gdtzfjdKVIV038N+d4FQXcoE7yDw6nI5w
CrwSl1LscNMZwFUYrnsgyow0yywXOEaa51zbYkZ7wr3aAamPgQxrq6/k1CDFqD2b
hP725SYJyL33cXfAW/ImqNgbJUBksoPdkUzF3Xn8QchYMnFEoPqqCSN8MvwlT+Db
WhRUqoHNu28vnaO3RxARsHSrq0lUZ/rub8mY40gfMSkssqUZ0YyuEeJVXtm53Qr3
LN1MVnOa
-----END CERTIFICATE-----