Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/df1265491b678706fb5d6177025bc86b7920c588.roa
File:                     df1265491b678706fb5d6177025bc86b7920c588.roa (raw, json)
Hash identifier:          1KgDTAae7S7Mcpasmt3n9ZHexw2ZhgHB/cBveCXWYc8=
Subject key identifier:   82:AB:CD:B8:29:12:DE:B8:48:5F:4D:9A:B6:C7:3F:49:4A:F0:1E:7B
Certificate issuer:       /CN=f568e289143efd5bc87b265db5fbd7741f1aaab9
Certificate serial:       0CE059
Authority key identifier: 8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f568e289143efd5bc87b265db5fbd7741f1aaab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/df1265491b678706fb5d6177025bc86b7920c588.roa
Signing time:             Wed 24 Mar 2021 14:33:59 +0000
ROA not before:           Wed 24 Mar 2021 14:33:59 +0000
ROA not after:            Tue 24 Mar 2026 14:33:59 +0000
asID:                     265851
IP address blocks:        2803:6a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843865 (0xce059)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f568e289143efd5bc87b265db5fbd7741f1aaab9
        Validity
            Not Before: Mar 24 14:33:59 2021 GMT
            Not After : Mar 24 14:33:59 2026 GMT
        Subject: CN=df1265491b678706fb5d6177025bc86b7920c588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:88:0e:6e:d3:b3:eb:d5:5f:b2:b2:4f:45:
                    79:01:75:37:36:7e:59:64:d8:bc:10:04:c8:86:79:
                    d9:7e:f6:d5:2f:54:55:fe:92:79:75:d1:74:df:a4:
                    80:61:b8:8d:26:e4:3d:4f:cd:a8:c5:49:5a:ce:a2:
                    ed:69:63:f0:86:d9:b7:f0:af:53:e6:48:db:04:54:
                    35:76:58:ac:f2:4a:cb:3a:24:69:ca:39:ca:1e:f2:
                    eb:04:fc:0f:c8:2e:7c:f5:b0:b2:99:d7:71:4f:bc:
                    eb:d0:e6:f0:0b:58:17:9b:cc:cd:9a:23:a3:d9:b3:
                    5e:9f:2c:50:ef:58:33:9a:70:ff:69:6d:05:9a:e6:
                    93:22:9a:82:da:3a:3c:75:0d:93:8a:74:12:03:17:
                    97:10:30:4d:06:0e:43:ab:8c:94:e1:d2:68:40:66:
                    5e:9e:a6:d1:3a:40:d4:79:c4:de:e7:9a:ee:80:e2:
                    da:82:cb:9b:7b:57:0a:6f:a3:f5:d1:b5:9b:2d:39:
                    2e:17:dd:fa:58:60:0b:cb:ba:97:3d:82:0f:f7:06:
                    51:e5:1f:5a:e9:f8:c3:48:6d:5d:c7:20:66:70:9e:
                    4e:7e:8b:69:8c:77:be:f6:03:9d:a1:d6:37:4e:fc:
                    62:51:01:4c:28:0f:57:47:00:ae:2c:8f:55:9a:7a:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:CD:B8:29:12:DE:B8:48:5F:4D:9A:B6:C7:3F:49:4A:F0:1E:7B
            X509v3 Authority Key Identifier:
                keyid:8D:11:80:9A:29:81:AF:C2:63:B5:44:A4:E0:77:41:45:1F:24:2B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f568e289143efd5bc87b265db5fbd7741f1aaab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/df1265491b678706fb5d6177025bc86b7920c588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6c66e9c-3968-4f1a-aefb-59e4377ae8af/f568e289143efd5bc87b265db5fbd7741f1aaab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:fb:a0:6a:47:20:1b:46:6c:03:50:b7:0e:75:14:58:ab:
         aa:52:e4:57:67:2e:8d:ea:8a:2d:3e:a8:9a:86:1b:a1:33:3b:
         e4:8e:e7:7f:1d:40:ff:b8:cf:12:8b:62:00:06:62:92:bf:cc:
         9b:67:07:0d:8e:28:b0:11:a3:c8:e4:69:66:de:0a:ea:c2:c1:
         6f:8b:1a:95:60:8c:74:d4:a2:4b:33:f8:87:d0:5f:ac:9d:49:
         b6:0b:b2:01:40:77:89:38:7f:b1:79:8c:0c:7e:da:34:11:bc:
         10:0f:58:4f:1b:d1:26:a6:93:47:08:3d:50:85:98:a6:ac:09:
         f8:f8:5e:f1:9e:c9:46:71:d4:f0:41:fd:9e:02:14:af:b5:f4:
         0c:8b:cd:2c:72:2b:35:27:ab:47:13:23:f2:53:56:05:a5:c9:
         0a:7d:19:4f:de:1a:91:9a:25:67:11:4a:6a:f8:06:06:89:e6:
         60:04:d7:87:16:e8:76:86:4d:96:06:8a:50:cd:31:64:4d:35:
         71:50:fc:53:78:4c:a9:17:9b:a5:b7:eb:83:ed:01:7e:12:84:
         d0:c0:96:84:d1:99:1c:3e:75:e5:1c:21:ad:b8:8b:78:fe:04:
         68:8d:65:8d:15:ad:a8:25:1f:73:f3:f2:ef:30:da:3d:3c:ca:
         a5:af:14:09
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDOBZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
NjhlMjg5MTQzZWZkNWJjODdiMjY1ZGI1ZmJkNzc0MWYxYWFhYjkwHhcNMjEwMzI0
MTQzMzU5WhcNMjYwMzI0MTQzMzU5WjAzMTEwLwYDVQQDEyhkZjEyNjU0OTFiNjc4
NzA2ZmI1ZDYxNzcwMjViYzg2Yjc5MjBjNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjMKIDm7Ts+vVX7KyT0V5AXU3Nn5ZZNi8EATIhnnZfvbVL1RV
/pJ5ddF036SAYbiNJuQ9T82oxUlazqLtaWPwhtm38K9T5kjbBFQ1dlis8krLOiRp
yjnKHvLrBPwPyC589bCymddxT7zr0ObwC1gXm8zNmiOj2bNenyxQ71gzmnD/aW0F
muaTIpqC2jo8dQ2TinQSAxeXEDBNBg5Dq4yU4dJoQGZenqbROkDUecTe55rugOLa
gsube1cKb6P10bWbLTkuF936WGALy7qXPYIP9wZR5R9a6fjDSG1dxyBmcJ5Ofotp
jHe+9gOdodY3TvxiUQFMKA9XRwCuLI9Vmnq15QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIKrzbgpEt64SF9NmrbHP0lK8B57MB8GA1UdIwQYMBaAFI0RgJopga/CY7VE
pOB3QUUfJCtuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU2OGUy
ODkxNDNlZmQ1YmM4N2IyNjVkYjVmYmQ3NzQxZjFhYWFiOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzZjNjZlOWMtMzk2OC00ZjFhLWFlZmItNTllNDM3
N2FlOGFmL2RmMTI2NTQ5MWI2Nzg3MDZmYjVkNjE3NzAyNWJjODZiNzkyMGM1ODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNmM2NmU5Yy0zOTY4LTRmMWEtYWVmYi01OWU0
Mzc3YWU4YWYvZjU2OGUyODkxNDNlZmQ1YmM4N2IyNjVkYjVmYmQ3NzQxZjFhYWFi
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDaiAwDQYJKoZIhvcNAQELBQADggEBAEou+6BqRyAbRmwD
ULcOdRRYq6pS5FdnLo3qii0+qJqGG6EzO+SO538dQP+4zxKLYgAGYpK/zJtnBw2O
KLARo8jkaWbeCurCwW+LGpVgjHTUoksz+IfQX6ydSbYLsgFAd4k4f7F5jAx+2jQR
vBAPWE8b0Samk0cIPVCFmKasCfj4XvGeyUZx1PBB/Z4CFK+19AyLzSxyKzUnq0cT
I/JTVgWlyQp9GU/eGpGaJWcRSmr4BgaJ5mAE14cW6HaGTZYGilDNMWRNNXFQ/FN4
TKkXm6W364PtAX4ShNDAloTRmRw+deUcIa24i3j+BGiNZY0VraglH3Pz8u8w2j08
yqWvFAk=
-----END CERTIFICATE-----