Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/38e6ca282fc1e50b328284d5ba20d29e08a74e43.roa
File:                     38e6ca282fc1e50b328284d5ba20d29e08a74e43.roa (raw, json)
Hash identifier:          b9QBvSShxoCcBy0VGJ6MflPXdiR9RGEyoNJB3HaFrPg=
Subject key identifier:   94:28:A3:2F:D3:D9:1B:89:D7:4A:FF:6B:F7:41:5A:4F:21:EF:40:32
Certificate issuer:       /CN=52c2dea9e81fdad8d5d4689c106fde720d220299
Certificate serial:       0B2467
Authority key identifier: F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/38e6ca282fc1e50b328284d5ba20d29e08a74e43.roa
Signing time:             Wed 24 Mar 2021 14:38:13 +0000
ROA not before:           Wed 24 Mar 2021 14:38:13 +0000
ROA not after:            Tue 24 Mar 2026 14:38:13 +0000
asID:                     207036
IP address blocks:        2803:9c0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730215 (0xb2467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c2dea9e81fdad8d5d4689c106fde720d220299
        Validity
            Not Before: Mar 24 14:38:13 2021 GMT
            Not After : Mar 24 14:38:13 2026 GMT
        Subject: CN=38e6ca282fc1e50b328284d5ba20d29e08a74e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:91:bd:79:6b:23:e8:a5:98:4b:ec:8b:78:ad:
                    42:92:ac:62:5e:a9:38:ed:00:a7:6d:68:85:23:a0:
                    da:be:0a:f8:d6:d6:dd:38:45:4b:38:fc:a8:2a:9c:
                    58:15:9e:d0:13:01:61:a8:e5:71:d1:ab:4d:b9:9d:
                    29:32:78:cd:53:b6:17:99:fb:30:eb:4b:fa:85:bd:
                    b0:de:73:9f:00:ec:9f:6f:0e:d2:65:5e:c1:f1:09:
                    8b:40:df:02:c1:03:08:59:14:40:51:dc:7a:4a:09:
                    9e:4f:d8:64:df:46:df:79:a6:26:26:4c:76:22:b8:
                    55:fa:03:f6:4f:ae:0f:b2:f5:72:b9:f9:6c:c5:6b:
                    88:a3:af:e5:ab:08:15:4b:30:62:26:e4:59:3c:77:
                    51:63:93:15:05:66:4d:0d:ab:9c:48:28:77:98:7c:
                    52:f9:59:0a:19:80:31:5e:60:a8:f4:87:94:c6:bd:
                    5a:96:42:4c:33:d4:70:3c:58:bc:37:8a:95:ed:01:
                    ae:be:3b:c6:b7:b8:ea:25:92:a8:06:d1:9d:5f:89:
                    f4:c8:26:72:40:c6:cc:93:1a:53:b6:76:5e:54:3b:
                    3c:1c:9b:f7:53:37:b3:0f:32:1e:90:29:57:96:f5:
                    2c:c7:da:34:cf:c0:7b:cc:0b:1a:5a:79:4f:8a:ee:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:28:A3:2F:D3:D9:1B:89:D7:4A:FF:6B:F7:41:5A:4F:21:EF:40:32
            X509v3 Authority Key Identifier:
                keyid:F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/38e6ca282fc1e50b328284d5ba20d29e08a74e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/52c2dea9e81fdad8d5d4689c106fde720d220299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:0b:f4:6b:34:48:32:00:94:32:92:63:a5:1c:58:5d:96:40:
         3d:8a:c6:3a:51:53:0e:a9:df:66:6f:4f:13:8c:c3:0b:0e:15:
         63:43:c2:23:ef:a6:2b:9b:25:a7:c2:9e:73:d2:34:9a:65:fe:
         74:00:c4:c9:c3:92:ec:f3:81:02:90:87:08:5f:e6:48:15:07:
         1f:60:1b:9b:60:80:b6:f8:65:7c:d1:1d:2f:ed:76:16:c7:89:
         2d:24:bd:dd:13:32:b5:5d:b4:77:8d:5d:14:8b:85:e3:f0:ff:
         55:36:2c:14:b9:bc:fb:35:81:e3:f7:e1:be:91:8b:5a:83:e6:
         17:8e:d2:f7:c1:37:4e:61:31:d9:ee:30:e2:3e:05:d6:0c:17:
         3e:15:c0:6d:ec:cf:03:ed:fc:10:bc:51:f5:6a:b7:9e:3d:4d:
         3f:5f:19:bb:75:05:9a:3e:90:41:22:f1:2d:fd:ac:29:15:a0:
         d7:a9:d5:52:21:de:c5:62:d4:05:5b:ed:87:30:4b:f7:8c:33:
         b1:4b:22:a9:3e:b6:c2:dc:d7:9c:45:4f:2d:61:a0:f6:4e:1f:
         5d:3d:0d:5c:c6:8c:e9:4f:4a:e5:1f:1f:4d:7e:fe:74:a6:ed:
         d8:a1:33:4b:64:cf:0b:de:55:2f:80:da:a7:b7:a7:47:78:70:
         2f:ec:ba:fe
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDCyRnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
YzJkZWE5ZTgxZmRhZDhkNWQ0Njg5YzEwNmZkZTcyMGQyMjAyOTkwHhcNMjEwMzI0
MTQzODEzWhcNMjYwMzI0MTQzODEzWjAzMTEwLwYDVQQDEygzOGU2Y2EyODJmYzFl
NTBiMzI4Mjg0ZDViYTIwZDI5ZTA4YTc0ZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5pG9eWsj6KWYS+yLeK1CkqxiXqk47QCnbWiFI6Davgr41tbd
OEVLOPyoKpxYFZ7QEwFhqOVx0atNuZ0pMnjNU7YXmfsw60v6hb2w3nOfAOyfbw7S
ZV7B8QmLQN8CwQMIWRRAUdx6SgmeT9hk30bfeaYmJkx2IrhV+gP2T64PsvVyufls
xWuIo6/lqwgVSzBiJuRZPHdRY5MVBWZNDaucSCh3mHxS+VkKGYAxXmCo9IeUxr1a
lkJMM9RwPFi8N4qV7QGuvjvGt7jqJZKoBtGdX4n0yCZyQMbMkxpTtnZeVDs8HJv3
UzezDzIekClXlvUsx9o0z8B7zAsaWnlPiu72VwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFJQooy/T2RuJ10r/a/dBWk8h70AyMB8GA1UdIwQYMBaAFPIzCYuCDGzuILil
dAjl7e+XzdvSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTJjMmRl
YTllODFmZGFkOGQ1ZDQ2ODljMTA2ZmRlNzIwZDIyMDI5OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzNiNDA4YWEtNmQ1YS00YTM5LTkyYjQtMTMyZjk4
ZTUxNzIzLzM4ZTZjYTI4MmZjMWU1MGIzMjgyODRkNWJhMjBkMjllMDhhNzRlNDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jM2I0MDhhYS02ZDVhLTRhMzktOTJiNC0xMzJm
OThlNTE3MjMvNTJjMmRlYTllODFmZGFkOGQ1ZDQ2ODljMTA2ZmRlNzIwZDIyMDI5
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgDCcAAMA0GCSqGSIb3DQEBCwUAA4IBAQCZC/RrNEgyAJQy
kmOlHFhdlkA9isY6UVMOqd9mb08TjMMLDhVjQ8Ij76YrmyWnwp5z0jSaZf50AMTJ
w5Ls84ECkIcIX+ZIFQcfYBubYIC2+GV80R0v7XYWx4ktJL3dEzK1XbR3jV0Ui4Xj
8P9VNiwUubz7NYHj9+G+kYtag+YXjtL3wTdOYTHZ7jDiPgXWDBc+FcBt7M8D7fwQ
vFH1areePU0/Xxm7dQWaPpBBIvEt/awpFaDXqdVSId7FYtQFW+2HMEv3jDOxSyKp
PrbC3NecRU8tYaD2Th9dPQ1cxozpT0rlHx9Nfv50pu3YoTNLZM8L3lUvgNqnt6dH
eHAv7Lr+
-----END CERTIFICATE-----