Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/70d03932645f665999ca21b82f96d6ff6c2bfd25.roa
File:                     70d03932645f665999ca21b82f96d6ff6c2bfd25.roa (raw, json)
Hash identifier:          ppssD58WwXhqIiLMEwTKEgfHHLHOyyxMsVx0lelQusQ=
Subject key identifier:   19:67:43:F8:07:98:48:AA:40:41:9A:4C:8E:A4:C3:D9:12:21:EC:74
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       0DE590
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/70d03932645f665999ca21b82f96d6ff6c2bfd25.roa
Signing time:             Wed 24 Mar 2021 14:29:53 +0000
ROA not before:           Wed 24 Mar 2021 14:29:52 +0000
ROA not after:            Tue 24 Mar 2026 14:29:52 +0000
asID:                     265819
IP address blocks:        2803:a9c0:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910736 (0xde590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Mar 24 14:29:52 2021 GMT
            Not After : Mar 24 14:29:52 2026 GMT
        Subject: CN=70d03932645f665999ca21b82f96d6ff6c2bfd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:87:08:4e:20:3b:75:1d:10:c3:29:e0:d5:
                    e6:ba:67:45:5d:9b:f1:71:09:f0:cf:8d:73:09:fe:
                    4d:d5:15:29:38:57:e2:84:41:70:2a:61:1e:91:d1:
                    8b:45:92:bb:89:58:32:96:fa:f2:57:56:0b:7f:50:
                    df:ac:59:d0:14:71:bd:d8:3b:0d:2d:54:37:6d:ea:
                    a1:83:dd:13:75:89:b4:8a:3a:db:8b:e3:c2:30:4f:
                    3e:01:df:c7:e3:fb:ba:35:e6:fa:b3:80:9a:21:9e:
                    06:9b:d4:dc:ff:4f:b0:5e:29:60:3a:d3:ff:60:13:
                    d2:d7:eb:08:ba:b9:c6:55:b0:1c:05:1f:e9:80:ee:
                    bc:7a:d1:87:10:cf:6c:a8:1c:61:8f:f7:d5:da:18:
                    63:19:24:ec:31:44:a5:31:33:9d:9b:ed:bc:1b:3d:
                    64:8e:3b:49:bc:7f:4e:b1:34:b8:93:83:51:97:db:
                    7a:78:03:96:36:00:e6:04:72:be:36:b3:42:29:5c:
                    8b:43:6d:29:bc:44:6b:99:62:97:fa:6b:f4:a0:c0:
                    58:fe:f8:a0:ac:21:bb:ff:74:37:03:77:1c:6b:de:
                    65:97:0f:5a:f7:2e:d8:c7:48:55:ab:d1:21:27:01:
                    6e:fb:cf:b1:d3:2b:aa:a5:ee:e5:84:a9:87:5e:f1:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:67:43:F8:07:98:48:AA:40:41:9A:4C:8E:A4:C3:D9:12:21:EC:74
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/70d03932645f665999ca21b82f96d6ff6c2bfd25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a9c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:f1:01:ba:bd:fe:6a:72:22:4c:f5:09:51:5c:dd:31:88:
         b3:e3:0a:c8:35:e2:eb:00:25:cb:6f:d5:8e:73:6a:b9:13:bd:
         5f:e7:7f:77:64:a2:95:a6:8f:ef:e6:5d:96:04:47:0d:c5:d6:
         e4:a8:7a:e4:25:13:fb:61:4b:d2:6f:2a:9f:45:ef:6f:db:9d:
         69:9f:08:55:e2:4f:ee:7d:c5:76:13:53:fc:7d:cf:0f:e2:25:
         45:fd:bf:15:a9:76:bd:79:62:2e:75:43:d7:0f:4f:29:a8:4a:
         a0:7b:1a:7e:5e:a2:08:54:41:29:35:4a:1f:8c:4e:0d:46:a8:
         54:cb:9b:2f:be:c5:98:93:9b:25:bb:87:24:00:2e:d3:03:d7:
         44:a8:18:6b:28:97:66:56:52:e5:cb:68:92:db:07:e4:61:c7:
         06:b5:9c:90:e4:96:93:b3:58:e1:48:df:aa:ee:15:77:02:f4:
         0b:50:df:e6:fb:90:fc:37:2e:09:e5:e5:93:36:7d:3b:28:00:
         75:27:6c:44:92:73:f1:db:e1:40:e3:ec:5f:92:7b:a7:59:0e:
         46:1e:24:0d:85:8c:74:10:98:b7:07:4c:b1:2c:0c:b4:7c:43:
         45:95:44:67:8e:92:b6:be:ac:ce:bf:03:8a:7f:be:3d:33:39:
         09:2f:65:30
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDeWQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
N2JkNGMzNjVjMDRmNGRkNWQzOWFjNjUzMmMyNjdhZjY4OGUyNjcwHhcNMjEwMzI0
MTQyOTUyWhcNMjYwMzI0MTQyOTUyWjAzMTEwLwYDVQQDEyg3MGQwMzkzMjY0NWY2
NjU5OTljYTIxYjgyZjk2ZDZmZjZjMmJmZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAheuHCE4gO3UdEMMp4NXmumdFXZvxcQnwz41zCf5N1RUpOFfi
hEFwKmEekdGLRZK7iVgylvryV1YLf1DfrFnQFHG92DsNLVQ3beqhg90TdYm0ijrb
i+PCME8+Ad/H4/u6Neb6s4CaIZ4Gm9Tc/0+wXilgOtP/YBPS1+sIurnGVbAcBR/p
gO68etGHEM9sqBxhj/fV2hhjGSTsMUSlMTOdm+28Gz1kjjtJvH9OsTS4k4NRl9t6
eAOWNgDmBHK+NrNCKVyLQ20pvERrmWKX+mv0oMBY/vigrCG7/3Q3A3cca95llw9a
9y7Yx0hVq9EhJwFu+8+x0yuqpe7lhKmHXvFLYwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFBlnQ/gHmEiqQEGaTI6kw9kSIex0MB8GA1UdIwQYMBaAFDcShC/tGTJcVW6u
TQ58GYlt/B91MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzE3YmQ0
YzM2NWMwNGY0ZGQ1ZDM5YWM2NTMyYzI2N2FmNjg4ZTI2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmM0NGM3YTItZmEyYi00YWU5LTk0MmQtODZhM2Fl
Y2M1N2ZkLzcwZDAzOTMyNjQ1ZjY2NTk5OWNhMjFiODJmOTZkNmZmNmMyYmZkMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYzQ0YzdhMi1mYTJiLTRhZTktOTQyZC04NmEz
YWVjYzU3ZmQvNzE3YmQ0YzM2NWMwNGY0ZGQ1ZDM5YWM2NTMyYzI2N2FmNjg4ZTI2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDqcAAAzANBgkqhkiG9w0BAQsFAAOCAQEADj7xAbq9/mpy
Ikz1CVFc3TGIs+MKyDXi6wAly2/VjnNquRO9X+d/d2SilaaP7+ZdlgRHDcXW5Kh6
5CUT+2FL0m8qn0Xvb9udaZ8IVeJP7n3FdhNT/H3PD+IlRf2/Fal2vXliLnVD1w9P
KahKoHsafl6iCFRBKTVKH4xODUaoVMubL77FmJObJbuHJAAu0wPXRKgYayiXZlZS
5ctoktsH5GHHBrWckOSWk7NY4Ujfqu4VdwL0C1Df5vuQ/DcuCeXlkzZ9OygAdSds
RJJz8dvhQOPsX5J7p1kORh4kDYWMdBCYtwdMsSwMtHxDRZVEZ46Str6szr8Din++
PTM5CS9lMA==
-----END CERTIFICATE-----