Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/24eead17651914276020f27bed045bdf6468fe64.roa
File:                     24eead17651914276020f27bed045bdf6468fe64.roa (raw, json)
Hash identifier:          +b4m9n/jnZ2FY0qSWtF5Und+g/IvbPrQBe5auT+3xmE=
Subject key identifier:   6A:FC:8C:CA:D5:02:A1:D6:46:93:7E:5C:99:12:41:38:2D:79:6A:01
Certificate issuer:       /CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
Certificate serial:       027CF9
Authority key identifier: EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/24eead17651914276020f27bed045bdf6468fe64.roa
Signing time:             Tue 18 Jan 2022 02:20:35 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     271993
IP address blocks:        2803:5110:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163065 (0x27cf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=24eead17651914276020f27bed045bdf6468fe64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:6e:b5:e4:aa:55:8d:c2:ed:dd:ea:dc:8b:
                    37:4f:72:91:bb:3f:5a:3e:d6:fe:b7:b7:55:1e:34:
                    65:46:cf:6e:c4:d1:49:e3:ce:04:d7:71:06:8f:f9:
                    47:2e:9d:eb:2e:f3:cb:47:95:e5:39:69:7e:18:77:
                    ee:22:1d:ac:07:e6:83:73:1f:2b:39:dd:a0:fb:3a:
                    89:37:68:58:2f:64:7c:e4:47:7d:cb:0c:4a:fd:5d:
                    6b:22:bc:14:3a:99:1a:f7:1e:e9:f2:ef:97:25:1c:
                    28:77:b8:6e:8b:e0:2a:d9:57:da:7f:ac:fd:41:a7:
                    30:a3:dd:a6:f3:77:7c:8f:08:80:be:cf:3a:75:29:
                    3d:3c:5c:9c:1a:6d:c4:a2:17:a2:6e:66:d1:40:f8:
                    49:09:cb:54:bc:84:37:9e:11:a7:a4:37:97:88:a5:
                    3b:d6:1c:b3:5f:af:76:8c:e9:03:95:20:c0:cb:14:
                    3e:74:76:dc:42:eb:70:3f:8c:c0:6b:11:48:d9:76:
                    3f:b2:73:2e:9f:2f:1f:c9:24:81:a4:6b:e3:fc:f3:
                    51:68:65:f5:1b:65:c6:12:f0:8a:99:05:f9:f0:5e:
                    91:d4:59:7c:41:c9:7d:90:26:10:e6:cc:dc:7c:e6:
                    9d:d3:e6:a9:64:b0:c2:74:95:eb:c6:90:40:89:8d:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FC:8C:CA:D5:02:A1:D6:46:93:7E:5C:99:12:41:38:2D:79:6A:01
            X509v3 Authority Key Identifier:
                keyid:EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/24eead17651914276020f27bed045bdf6468fe64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/13e7c7268d24306b60d655788ea7e6ab7c157a37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5110:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:70:22:f7:4b:c7:1b:54:25:09:ad:29:0f:61:3b:7d:af:
         20:bb:3b:b6:21:72:d1:70:dd:fb:c3:56:d3:f4:2f:ea:46:78:
         e6:59:b7:8e:b5:02:11:7b:e4:b9:d6:66:53:2b:95:97:c2:d0:
         3a:66:e6:11:fb:bd:5c:59:f2:5e:89:37:a3:85:23:9e:4f:9c:
         e9:16:f6:ce:eb:12:f8:ed:d5:13:2c:4c:ef:a7:10:93:40:64:
         67:39:4b:9a:7c:36:b1:4c:27:a4:75:67:85:53:9b:99:f1:6a:
         c3:e2:a6:aa:0a:97:ce:fb:e7:76:a3:bc:56:9e:70:83:af:25:
         a0:e8:cb:7e:7a:30:b5:66:5f:92:54:d8:d4:50:64:f7:e0:8e:
         18:65:b5:dd:76:5d:cc:1f:cd:fa:80:66:90:c6:3a:f3:f8:ea:
         12:05:da:c2:cd:00:1d:8f:1c:92:c7:67:59:fd:33:7c:0f:79:
         03:74:e0:e0:3d:40:00:6a:40:6b:00:b0:b2:d3:67:32:76:45:
         5e:ff:a6:50:ee:cc:9c:c9:f5:9d:22:00:1f:1d:5a:35:49:7c:
         2d:42:80:4b:34:20:31:9c:3f:62:28:76:95:da:a0:84:14:e6:
         0e:e0:84:4a:91:04:47:ce:b2:47:9f:b8:81:eb:15:2c:23:22:
         2b:74:df:25
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAnz5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
ZTdjNzI2OGQyNDMwNmI2MGQ2NTU3ODhlYTdlNmFiN2MxNTdhMzcwHhcNMjIwMTE3
MDMwMDAwWhcNMjQwMTE3MDMwMDAwWjAzMTEwLwYDVQQDEygyNGVlYWQxNzY1MTkx
NDI3NjAyMGYyN2JlZDA0NWJkZjY0NjhmZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlxluteSqVY3C7d3q3Is3T3KRuz9aPtb+t7dVHjRlRs9uxNFJ
484E13EGj/lHLp3rLvPLR5XlOWl+GHfuIh2sB+aDcx8rOd2g+zqJN2hYL2R85Ed9
ywxK/V1rIrwUOpka9x7p8u+XJRwod7hui+Aq2Vfaf6z9Qacwo92m83d8jwiAvs86
dSk9PFycGm3EoheibmbRQPhJCctUvIQ3nhGnpDeXiKU71hyzX692jOkDlSDAyxQ+
dHbcQutwP4zAaxFI2XY/snMuny8fySSBpGvj/PNRaGX1G2XGEvCKmQX58F6R1Fl8
Qcl9kCYQ5szcfOad0+apZLDCdJXrxpBAiY2PkwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFGr8jMrVAqHWRpN+XJkSQTgteWoBMB8GA1UdIwQYMBaAFOqoRmElGNSiwRAo
L63Ksvg2BHbqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTNlN2M3
MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2EzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmZjN2EyZjgtYmY3ZS00NmI3LWExODktMjFjMWMw
NDcyMGJjLzI0ZWVhZDE3NjUxOTE0Mjc2MDIwZjI3YmVkMDQ1YmRmNjQ2OGZlNjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZmM3YTJmOC1iZjdlLTQ2YjctYTE4OS0yMWMx
YzA0NzIwYmMvMTNlN2M3MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2Ez
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDURAQADANBgkqhkiG9w0BAQsFAAOCAQEAHQBwIvdLxxtU
JQmtKQ9hO32vILs7tiFy0XDd+8NW0/Qv6kZ45lm3jrUCEXvkudZmUyuVl8LQOmbm
Efu9XFnyXok3o4Ujnk+c6Rb2zusS+O3VEyxM76cQk0BkZzlLmnw2sUwnpHVnhVOb
mfFqw+KmqgqXzvvndqO8Vp5wg68loOjLfnowtWZfklTY1FBk9+COGGW13XZdzB/N
+oBmkMY68/jqEgXaws0AHY8cksdnWf0zfA95A3Tg4D1AAGpAawCwstNnMnZFXv+m
UO7MnMn1nSIAHx1aNUl8LUKASzQgMZw/Yih2ldqghBTmDuCESpEER86yR5+4gesV
LCMiK3TfJQ==
-----END CERTIFICATE-----