Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/8eb710c2c7bf0ee87ee4259bd215a1363cba8d3e.roa
File:                     8eb710c2c7bf0ee87ee4259bd215a1363cba8d3e.roa (raw, json)
Hash identifier:          j+4qVMw6hgShEnya/tNixMzaFSPH0I8aW1ANUek3/gs=
Subject key identifier:   69:B1:1F:D0:04:5B:4E:F6:5C:F4:38:DB:DA:B7:0D:33:7D:AB:17:7B
Certificate issuer:       /CN=e3933b09c439c7ac19e0f598db501b6e0cd05248
Certificate serial:       0B9399
Authority key identifier: 32:E1:BF:DD:56:88:55:C4:8F:E5:38:CA:C3:F5:B5:AB:99:7A:A3:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3933b09c439c7ac19e0f598db501b6e0cd05248.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/8eb710c2c7bf0ee87ee4259bd215a1363cba8d3e.roa
Signing time:             Wed 24 Mar 2021 14:36:15 +0000
ROA not before:           Wed 24 Mar 2021 14:36:15 +0000
ROA not after:            Tue 24 Mar 2026 14:36:15 +0000
asID:                     19429
IP address blocks:        2801:14:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758681 (0xb9399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3933b09c439c7ac19e0f598db501b6e0cd05248
        Validity
            Not Before: Mar 24 14:36:15 2021 GMT
            Not After : Mar 24 14:36:15 2026 GMT
        Subject: CN=8eb710c2c7bf0ee87ee4259bd215a1363cba8d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:9d:86:b7:51:80:03:bf:32:80:f8:b0:78:
                    8c:aa:57:bc:c5:b2:75:fc:a1:aa:c8:4d:4a:65:76:
                    5b:8b:64:18:0c:1f:b4:31:93:af:02:62:91:57:da:
                    07:89:8c:81:66:8d:7c:3a:89:b6:21:41:d9:79:c9:
                    c3:5e:d6:2c:18:ce:89:95:3b:d4:f0:c4:7a:17:c9:
                    d0:d0:26:7d:3b:71:59:3c:ef:c3:84:66:65:13:82:
                    09:d1:47:a1:ba:90:00:7b:31:b5:3d:80:27:0d:a4:
                    a5:b4:d5:45:35:ae:c0:aa:43:b3:40:1d:0f:7a:2c:
                    cc:75:9f:1d:11:eb:aa:71:9e:b5:64:99:94:e0:fd:
                    4a:db:6c:cc:f2:f9:62:e7:cb:14:81:93:f6:97:76:
                    9e:30:ec:05:e5:67:c9:7d:b8:c2:4e:04:36:25:dd:
                    03:f6:f8:7c:77:09:76:fd:71:00:74:b7:01:d9:65:
                    33:6c:4e:6d:b8:7e:49:68:2e:68:04:32:57:6f:79:
                    7b:12:c2:1b:b2:22:d0:91:71:13:de:62:3f:2e:1f:
                    d5:72:0b:a0:f0:0b:13:fd:79:8d:45:af:fe:d5:65:
                    0f:93:ee:66:6e:c8:02:46:07:12:31:fb:63:9a:e1:
                    0f:1b:34:a9:8f:18:61:3e:70:0e:0f:6b:5e:dc:f9:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B1:1F:D0:04:5B:4E:F6:5C:F4:38:DB:DA:B7:0D:33:7D:AB:17:7B
            X509v3 Authority Key Identifier:
                keyid:32:E1:BF:DD:56:88:55:C4:8F:E5:38:CA:C3:F5:B5:AB:99:7A:A3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3933b09c439c7ac19e0f598db501b6e0cd05248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/8eb710c2c7bf0ee87ee4259bd215a1363cba8d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d76b69f6-c33b-4828-b90f-a5fa294b3048/e3933b09c439c7ac19e0f598db501b6e0cd05248.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:43:dc:7f:bf:5b:b7:a4:69:d2:7c:85:82:f7:de:ea:72:db:
         22:34:01:b5:df:e2:66:3f:89:15:41:37:00:2f:16:4c:4b:30:
         1f:97:f5:de:e6:59:34:5b:d4:e6:7a:81:bb:64:d7:d5:8f:15:
         2c:03:18:7e:10:aa:27:8c:dc:c9:b2:f0:9f:14:ef:d7:ab:ba:
         c4:3e:ad:b1:18:80:e0:be:6f:e9:3a:c1:14:d2:70:22:8d:46:
         49:74:29:fb:a0:05:34:f0:83:bb:54:2f:7d:ef:46:01:59:4e:
         4c:b4:a4:6f:3a:03:41:e4:a7:39:98:3c:d2:e8:fd:51:2f:f1:
         e4:f4:2a:60:c6:34:7b:3b:c7:b5:93:15:56:26:fd:5d:7d:d1:
         7c:0e:b7:90:b9:63:c3:1f:70:90:46:0d:62:1e:04:f7:f6:c9:
         9a:df:84:41:74:92:c0:0f:cf:57:db:8f:59:c0:00:85:e4:88:
         e5:34:b8:2d:6f:8f:20:36:f5:ff:06:d9:92:37:c0:71:bf:90:
         a8:fb:12:1e:83:ca:cb:56:3d:c7:05:02:b7:02:30:23:43:55:
         1f:c5:1e:83:3f:d9:d3:72:91:b1:c6:b9:1e:1c:7c:be:fb:1b:
         e9:f8:8b:ed:c8:83:47:3d:dd:1f:d2:cb:83:a1:81:74:f8:bf:
         68:77:23:16
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDC5OZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUz
OTMzYjA5YzQzOWM3YWMxOWUwZjU5OGRiNTAxYjZlMGNkMDUyNDgwHhcNMjEwMzI0
MTQzNjE1WhcNMjYwMzI0MTQzNjE1WjAzMTEwLwYDVQQDEyg4ZWI3MTBjMmM3YmYw
ZWU4N2VlNDI1OWJkMjE1YTEzNjNjYmE4ZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm8GdhrdRgAO/MoD4sHiMqle8xbJ1/KGqyE1KZXZbi2QYDB+0
MZOvAmKRV9oHiYyBZo18Oom2IUHZecnDXtYsGM6JlTvU8MR6F8nQ0CZ9O3FZPO/D
hGZlE4IJ0UehupAAezG1PYAnDaSltNVFNa7AqkOzQB0PeizMdZ8dEeuqcZ61ZJmU
4P1K22zM8vli58sUgZP2l3aeMOwF5WfJfbjCTgQ2Jd0D9vh8dwl2/XEAdLcB2WUz
bE5tuH5JaC5oBDJXb3l7EsIbsiLQkXET3mI/Lh/Vcgug8AsT/XmNRa/+1WUPk+5m
bsgCRgcSMftjmuEPGzSpjxhhPnAOD2te3PntYQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFGmxH9AEW072XPQ429q3DTN9qxd7MB8GA1UdIwQYMBaAFDLhv91WiFXEj+U4
ysP1tauZeqN0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTM5MzNi
MDljNDM5YzdhYzE5ZTBmNTk4ZGI1MDFiNmUwY2QwNTI0OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDc2YjY5ZjYtYzMzYi00ODI4LWI5MGYtYTVmYTI5
NGIzMDQ4LzhlYjcxMGMyYzdiZjBlZTg3ZWU0MjU5YmQyMTVhMTM2M2NiYThkM2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNzZiNjlmNi1jMzNiLTQ4MjgtYjkwZi1hNWZh
Mjk0YjMwNDgvZTM5MzNiMDljNDM5YzdhYzE5ZTBmNTk4ZGI1MDFiNmUwY2QwNTI0
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABRIADANBgkqhkiG9w0BAQsFAAOCAQEAYEPcf79bt6Rp
0nyFgvfe6nLbIjQBtd/iZj+JFUE3AC8WTEswH5f13uZZNFvU5nqBu2TX1Y8VLAMY
fhCqJ4zcybLwnxTv16u6xD6tsRiA4L5v6TrBFNJwIo1GSXQp+6AFNPCDu1Qvfe9G
AVlOTLSkbzoDQeSnOZg80uj9US/x5PQqYMY0ezvHtZMVVib9XX3RfA63kLljwx9w
kEYNYh4E9/bJmt+EQXSSwA/PV9uPWcAAheSI5TS4LW+PIDb1/wbZkjfAcb+QqPsS
HoPKy1Y9xwUCtwIwI0NVH8Uegz/Z03KRsca5Hhx8vvsb6fiL7ciDRz3dH9LLg6GB
dPi/aHcjFg==
-----END CERTIFICATE-----