Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/69d693ce744d2875e27464284bd65dca288dac67.roa
File:                     69d693ce744d2875e27464284bd65dca288dac67.roa (raw, json)
Hash identifier:          tlHxGYVQzPLBss1YmHKVCkrgr2teZRnk15QHt+KkNHw=
Subject key identifier:   7C:09:32:1F:F8:D2:80:FC:EB:72:E7:95:14:4F:A3:13:92:16:42:DA
Certificate issuer:       /CN=52c2dea9e81fdad8d5d4689c106fde720d220299
Certificate serial:       109F8D
Authority key identifier: F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/69d693ce744d2875e27464284bd65dca288dac67.roa
Signing time:             Wed 10 Nov 2021 22:57:48 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Fri 10 Nov 2023 03:00:00 +0000
asID:                     265695
IP address blocks:        2803:9c0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089421 (0x109f8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c2dea9e81fdad8d5d4689c106fde720d220299
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2023 GMT
        Subject: CN=69d693ce744d2875e27464284bd65dca288dac67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:d6:19:94:f6:b4:63:30:ce:09:40:d0:c4:
                    73:52:10:8e:08:b5:16:f8:52:1b:11:31:00:b4:2b:
                    95:92:f6:a6:0a:e5:ea:6b:53:eb:0c:7d:5a:21:33:
                    1c:97:21:82:93:2f:0d:ad:b3:2f:15:e4:69:f8:29:
                    6f:a6:f2:14:29:97:6d:bb:17:73:a2:c9:d0:d9:3b:
                    e5:1a:cf:67:de:2a:b0:85:b9:b8:18:9b:61:52:1a:
                    e9:90:46:15:60:c1:7e:35:0e:29:3a:af:87:ca:f2:
                    f8:84:c3:b0:e7:7c:82:84:e5:0c:f2:31:e4:ca:15:
                    62:a0:83:f3:eb:4a:a4:dd:fb:a6:2a:eb:35:4a:a1:
                    a2:a7:35:61:29:a3:a1:94:e0:8f:c5:cc:21:31:5c:
                    6c:bc:2f:ec:3d:c1:a6:c0:a2:de:45:b6:c1:dc:a3:
                    b5:5f:ee:b8:65:31:70:48:7f:92:2a:9d:17:d9:49:
                    7e:e1:29:90:b2:c3:1a:0f:c2:be:fe:a5:ac:45:2f:
                    ad:87:31:ef:57:a8:d8:cc:d1:db:e5:d8:de:6b:e3:
                    9a:a7:c5:7c:fd:ac:62:01:85:35:da:8b:79:f4:3a:
                    e8:5b:70:b0:f4:0f:1e:39:9a:8a:f8:41:66:e0:78:
                    65:be:c1:f4:24:bc:75:54:db:c0:9a:6e:88:b9:ff:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:09:32:1F:F8:D2:80:FC:EB:72:E7:95:14:4F:A3:13:92:16:42:DA
            X509v3 Authority Key Identifier:
                keyid:F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/69d693ce744d2875e27464284bd65dca288dac67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/52c2dea9e81fdad8d5d4689c106fde720d220299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:35:31:b8:40:98:84:94:05:ba:17:5e:d5:fb:df:1f:36:65:
         66:60:79:cd:c7:bd:68:3a:17:15:48:92:21:78:31:d2:99:34:
         53:23:88:56:b2:61:30:e9:28:29:68:b4:fa:ec:20:b7:42:95:
         7c:c2:07:4c:4a:9f:ff:06:60:31:9a:88:84:cf:5f:dd:ff:3d:
         47:73:07:83:69:d1:0a:5f:30:f9:c5:dc:df:f0:e0:5e:71:ab:
         70:e2:ac:d1:81:02:6b:26:f0:bd:59:1b:92:8f:43:0e:04:e8:
         db:7d:8d:10:92:53:78:a1:85:47:be:39:f1:cb:9f:60:dd:a6:
         6e:0d:0f:af:2a:9d:1a:b2:f8:8f:96:b5:43:db:0f:08:92:50:
         ce:f8:05:13:9e:18:76:c2:0f:0f:79:9a:b8:0f:be:3a:5b:70:
         80:99:7c:3a:a3:85:14:af:6f:b6:99:e0:bb:b0:a7:e7:b8:38:
         21:24:52:9e:0c:c8:ef:22:0a:d9:ac:2b:2e:97:f7:12:ce:f7:
         2a:fa:84:76:c5:bc:61:79:af:53:07:34:35:d9:df:5c:48:bf:
         54:ae:32:79:17:1f:ed:32:6a:ea:4e:e7:0e:8e:f4:5b:d1:d4:
         2a:26:cb:83:cd:78:8f:c5:0b:bb:86:52:2b:8b:ba:43:ce:bb:
         a2:4c:cb:2e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDEJ+NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
YzJkZWE5ZTgxZmRhZDhkNWQ0Njg5YzEwNmZkZTcyMGQyMjAyOTkwHhcNMjExMTEw
MDMwMDAwWhcNMjMxMTEwMDMwMDAwWjAzMTEwLwYDVQQDEyg2OWQ2OTNjZTc0NGQy
ODc1ZTI3NDY0Mjg0YmQ2NWRjYTI4OGRhYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjivWGZT2tGMwzglA0MRzUhCOCLUW+FIbETEAtCuVkvamCuXq
a1PrDH1aITMclyGCky8NrbMvFeRp+ClvpvIUKZdtuxdzosnQ2TvlGs9n3iqwhbm4
GJthUhrpkEYVYMF+NQ4pOq+HyvL4hMOw53yChOUM8jHkyhVioIPz60qk3fumKus1
SqGipzVhKaOhlOCPxcwhMVxsvC/sPcGmwKLeRbbB3KO1X+64ZTFwSH+SKp0X2Ul+
4SmQssMaD8K+/qWsRS+thzHvV6jYzNHb5djea+Oap8V8/axiAYU12ot59DroW3Cw
9A8eOZqK+EFm4HhlvsH0JLx1VNvAmm6Iuf+hFwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFHwJMh/40oD863LnlRRPoxOSFkLaMB8GA1UdIwQYMBaAFPIzCYuCDGzuILil
dAjl7e+XzdvSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTJjMmRl
YTllODFmZGFkOGQ1ZDQ2ODljMTA2ZmRlNzIwZDIyMDI5OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzNiNDA4YWEtNmQ1YS00YTM5LTkyYjQtMTMyZjk4
ZTUxNzIzLzY5ZDY5M2NlNzQ0ZDI4NzVlMjc0NjQyODRiZDY1ZGNhMjg4ZGFjNjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jM2I0MDhhYS02ZDVhLTRhMzktOTJiNC0xMzJm
OThlNTE3MjMvNTJjMmRlYTllODFmZGFkOGQ1ZDQ2ODljMTA2ZmRlNzIwZDIyMDI5
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgDCcABMA0GCSqGSIb3DQEBCwUAA4IBAQAWNTG4QJiElAW6
F17V+98fNmVmYHnNx71oOhcVSJIheDHSmTRTI4hWsmEw6SgpaLT67CC3QpV8wgdM
Sp//BmAxmoiEz1/d/z1HcweDadEKXzD5xdzf8OBecatw4qzRgQJrJvC9WRuSj0MO
BOjbfY0QklN4oYVHvjnxy59g3aZuDQ+vKp0asviPlrVD2w8IklDO+AUTnhh2wg8P
eZq4D746W3CAmXw6o4UUr2+2meC7sKfnuDghJFKeDMjvIgrZrCsul/cSzvcq+oR2
xbxhea9TBzQ12d9cSL9UrjJ5Fx/tMmrqTucOjvRb0dQqJsuDzXiPxQu7hlIri7pD
zruiTMsu
-----END CERTIFICATE-----