Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/31c556283976c0c846d0b89674802e6b29d31870.roa
File:                     31c556283976c0c846d0b89674802e6b29d31870.roa (raw, json)
Hash identifier:          HWIjnyf2/6C3jwkxXGiC8xJZIlK/CO7Xqvv9nI8ZkRg=
Subject key identifier:   40:65:35:2D:30:39:54:E5:BF:63:E8:D1:37:71:9C:BE:0F:38:8B:09
Certificate issuer:       /CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
Certificate serial:       0D3759
Authority key identifier: B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/31c556283976c0c846d0b89674802e6b29d31870.roa
Signing time:             Wed 24 Mar 2021 14:46:36 +0000
ROA not before:           Wed 24 Mar 2021 14:46:36 +0000
ROA not after:            Tue 24 Mar 2026 14:46:36 +0000
asID:                     264635
IP address blocks:        2803:6780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866137 (0xd3759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
        Validity
            Not Before: Mar 24 14:46:36 2021 GMT
            Not After : Mar 24 14:46:36 2026 GMT
        Subject: CN=31c556283976c0c846d0b89674802e6b29d31870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:a5:f4:87:85:9d:87:20:6a:1b:61:5a:ce:
                    8d:d1:f2:49:56:a6:5e:2f:07:97:51:63:20:c2:01:
                    a1:d8:c0:99:e8:cc:90:12:97:c9:d3:51:71:0d:41:
                    d8:99:7a:d5:6e:e6:96:4a:b6:b5:a9:35:7d:b6:d8:
                    9a:2e:4a:27:3b:1a:58:b7:c4:99:54:89:94:84:6b:
                    48:f3:26:33:b1:31:1c:f9:3d:44:87:99:84:39:1c:
                    08:2a:f3:64:34:3e:63:35:3e:a7:af:c7:fc:ab:48:
                    b4:eb:40:25:27:9c:95:c0:4a:cb:7a:3e:66:c5:fd:
                    45:c5:6f:4b:8d:71:c5:f8:89:4b:8a:b7:e6:38:3a:
                    4e:99:9d:46:63:59:bb:9f:80:81:a9:08:1e:29:d3:
                    c7:29:13:57:9f:0b:20:9d:b4:27:5a:55:e8:e6:a3:
                    d0:6a:40:b4:4d:03:ec:b4:43:ba:f2:34:b4:4c:68:
                    8c:e3:a3:c9:55:cc:80:c1:f6:ad:54:1b:fd:5d:b1:
                    be:e9:94:d1:8a:4f:bc:80:50:e3:f9:4a:98:66:98:
                    7e:b4:8f:0c:14:b4:69:9b:2f:a6:bb:27:ad:08:a8:
                    e3:ca:88:0f:0a:90:38:3f:7e:ae:c0:e4:2a:a9:29:
                    12:de:79:3a:63:ec:4b:8d:89:3e:c9:d1:f0:f9:6e:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:65:35:2D:30:39:54:E5:BF:63:E8:D1:37:71:9C:BE:0F:38:8B:09
            X509v3 Authority Key Identifier:
                keyid:B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/31c556283976c0c846d0b89674802e6b29d31870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/e69db0dddc072dab05b76f666b2b150d51ad28d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:e0:65:63:d7:04:d5:1e:33:80:29:36:89:4a:16:82:f8:
         fc:b9:84:1a:cf:3d:37:38:5d:d6:79:be:56:d5:a0:71:27:f5:
         b3:29:ab:c8:c3:8e:fc:3f:e9:12:2e:45:96:15:0e:64:61:4d:
         91:a0:54:8a:e9:27:9f:da:00:2f:8c:e8:7d:63:0c:7b:0c:85:
         35:5f:ff:0c:db:14:5c:17:72:ee:0d:87:2e:25:e0:c7:68:6e:
         cd:a1:24:84:46:b7:28:5c:20:02:d7:c1:0c:92:89:9b:e9:ac:
         e9:cc:d6:6f:6a:f9:50:50:34:0d:02:87:59:c1:a4:de:50:55:
         20:b6:00:62:ce:41:87:85:18:d6:26:1a:75:cc:7b:79:34:dd:
         ca:d4:8f:75:07:13:a8:21:94:87:2b:1e:2b:24:36:f2:10:58:
         c3:8b:4c:9b:12:b3:45:75:05:97:d7:66:b2:5a:5f:2a:79:48:
         01:43:bc:84:cc:ee:f0:13:72:d2:6a:87:60:25:67:80:5a:04:
         b6:d9:0d:c0:9d:aa:07:0e:a3:f9:cb:d3:c4:73:9e:2a:54:45:
         23:c3:3a:fe:d1:a6:5f:8b:4b:f7:de:f5:1b:2c:44:2d:b6:5e:
         ee:ff:00:89:fe:c4:6b:81:c4:9d:0f:8b:52:30:01:1f:18:31:
         e4:47:da:8b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDTdZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU2
OWRiMGRkZGMwNzJkYWIwNWI3NmY2NjZiMmIxNTBkNTFhZDI4ZDEwHhcNMjEwMzI0
MTQ0NjM2WhcNMjYwMzI0MTQ0NjM2WjAzMTEwLwYDVQQDEygzMWM1NTYyODM5NzZj
MGM4NDZkMGI4OTY3NDgwMmU2YjI5ZDMxODcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqOel9IeFnYcgahthWs6N0fJJVqZeLweXUWMgwgGh2MCZ6MyQ
EpfJ01FxDUHYmXrVbuaWSra1qTV9ttiaLkonOxpYt8SZVImUhGtI8yYzsTEc+T1E
h5mEORwIKvNkND5jNT6nr8f8q0i060AlJ5yVwErLej5mxf1FxW9LjXHF+IlLirfm
ODpOmZ1GY1m7n4CBqQgeKdPHKRNXnwsgnbQnWlXo5qPQakC0TQPstEO68jS0TGiM
46PJVcyAwfatVBv9XbG+6ZTRik+8gFDj+UqYZph+tI8MFLRpmy+muyetCKjjyogP
CpA4P36uwOQqqSkS3nk6Y+xLjYk+ydHw+W7ytQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEBlNS0wOVTlv2Po0TdxnL4POIsJMB8GA1UdIwQYMBaAFLPn+i5Q0ZngbYOg
X05Y3gSzQIhQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTY5ZGIw
ZGRkYzA3MmRhYjA1Yjc2ZjY2NmIyYjE1MGQ1MWFkMjhkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDU0MTc0NGQtZDlkZC00MTZlLWI5NDgtNTY0Yjgz
YzhkODMzLzMxYzU1NjI4Mzk3NmMwYzg0NmQwYjg5Njc0ODAyZTZiMjlkMzE4NzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNTQxNzQ0ZC1kOWRkLTQxNmUtYjk0OC01NjRi
ODNjOGQ4MzMvZTY5ZGIwZGRkYzA3MmRhYjA1Yjc2ZjY2NmIyYjE1MGQ1MWFkMjhk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDZ4AwDQYJKoZIhvcNAQELBQADggEBAHr94GVj1wTVHjOA
KTaJShaC+Py5hBrPPTc4XdZ5vlbVoHEn9bMpq8jDjvw/6RIuRZYVDmRhTZGgVIrp
J5/aAC+M6H1jDHsMhTVf/wzbFFwXcu4Nhy4l4Mdobs2hJIRGtyhcIALXwQySiZvp
rOnM1m9q+VBQNA0Ch1nBpN5QVSC2AGLOQYeFGNYmGnXMe3k03crUj3UHE6ghlIcr
HiskNvIQWMOLTJsSs0V1BZfXZrJaXyp5SAFDvITM7vATctJqh2AlZ4BaBLbZDcCd
qgcOo/nL08RznipURSPDOv7Rpl+LS/fe9RssRC22Xu7/AIn+xGuBxJ0Pi1IwAR8Y
MeRH2os=
-----END CERTIFICATE-----