Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/ced71d106d1164549513ff2835f248f599a6c951.roa
File:                     ced71d106d1164549513ff2835f248f599a6c951.roa (raw, json)
Hash identifier:          5ow5YIKxKqMRqruzJZJc4MEwEqTgWUlgJj4bmUP4o20=
Subject key identifier:   6F:84:ED:CC:C3:1D:AF:E0:0C:19:C3:C5:38:2E:1C:F4:2D:18:F8:89
Certificate issuer:       /CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
Certificate serial:       0E4403
Authority key identifier: 18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/ced71d106d1164549513ff2835f248f599a6c951.roa
Signing time:             Wed 24 Mar 2021 14:40:14 +0000
ROA not before:           Wed 24 Mar 2021 14:40:13 +0000
ROA not after:            Tue 24 Mar 2026 14:40:13 +0000
asID:                     266880
IP address blocks:        2803:d220::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934915 (0xe4403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413a1d7ffe2a543b661759c728d9274cfaa4061f
        Validity
            Not Before: Mar 24 14:40:13 2021 GMT
            Not After : Mar 24 14:40:13 2026 GMT
        Subject: CN=ced71d106d1164549513ff2835f248f599a6c951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:fa:c4:93:eb:09:9a:85:89:29:68:ba:f7:
                    21:b3:1b:f3:f7:37:66:56:3f:48:0b:3c:6f:22:e2:
                    0e:0a:2d:34:e1:63:2f:e9:67:33:31:8e:28:07:4d:
                    cd:3e:4f:32:28:1f:24:76:0f:75:34:cd:04:30:a5:
                    98:61:a7:cd:91:d9:53:81:4e:76:16:5a:2b:ae:b3:
                    8b:b1:0f:03:55:a5:2d:39:2e:66:fa:e3:bc:e1:d5:
                    67:37:23:fd:3b:d3:10:ca:06:e6:b9:ca:1d:b3:04:
                    66:65:9c:52:97:a3:83:b9:90:9e:cf:6c:fd:9b:be:
                    a5:44:de:dd:91:35:3e:f6:84:b6:30:d3:81:da:67:
                    18:1d:97:b1:ad:cb:0d:b5:80:14:60:61:90:d0:6a:
                    d5:fc:29:d4:c0:6e:17:05:78:5d:fb:38:2c:de:63:
                    91:31:51:e2:1b:1d:3f:c2:01:30:66:9b:17:c2:fc:
                    8e:0e:96:83:d8:9a:94:20:43:53:2d:b8:99:5a:b2:
                    e2:d7:c9:4c:66:44:33:25:92:32:e4:af:d0:2c:47:
                    d0:06:af:7c:14:e0:4a:18:c4:11:87:38:b2:db:a9:
                    3d:cf:9a:2c:79:9f:6c:7b:3b:ce:04:7d:51:48:61:
                    32:5c:f1:23:a2:b6:91:28:cf:a7:f3:58:76:89:bd:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:84:ED:CC:C3:1D:AF:E0:0C:19:C3:C5:38:2E:1C:F4:2D:18:F8:89
            X509v3 Authority Key Identifier:
                keyid:18:94:BC:50:78:FA:4C:31:6A:90:AE:62:C5:82:02:30:F5:A1:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/413a1d7ffe2a543b661759c728d9274cfaa4061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/ced71d106d1164549513ff2835f248f599a6c951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a4a489-acea-4c60-8f4e-349c6387eeeb/413a1d7ffe2a543b661759c728d9274cfaa4061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d220::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:31:c2:b8:e5:30:83:ff:ae:02:75:10:80:b5:11:d3:05:
         e7:54:db:ee:e5:2b:d4:ac:a5:a4:94:f7:b1:f7:42:6e:aa:ba:
         f2:c0:c5:4a:fd:30:72:ff:75:b0:df:05:77:15:ab:2c:bc:15:
         9c:af:1f:92:d5:21:10:18:ab:fa:e7:c4:75:d7:a6:aa:92:26:
         59:ae:d5:1c:63:2f:63:09:70:3f:30:4a:fd:28:27:21:38:4d:
         de:c1:c4:de:d4:e0:61:65:2d:7b:cc:2b:27:03:5c:10:12:6e:
         f0:95:35:1d:d4:42:92:51:18:7e:29:86:8c:46:53:95:37:58:
         1f:46:cf:54:3a:02:e5:5b:c9:a7:be:a1:f6:6b:43:75:91:7d:
         a2:13:85:cb:17:a2:e1:ca:a5:d3:e2:72:3a:6a:8b:5d:26:9c:
         a2:d5:0d:a3:cc:ef:c9:62:26:e7:5e:c7:dc:7d:e6:38:a4:0e:
         c6:b7:a6:49:d3:d2:4e:ff:59:12:f1:7c:4a:c7:4d:96:90:91:
         97:e4:ec:ac:62:ac:29:6e:d9:9a:ce:18:15:a2:60:d5:83:2c:
         a2:e6:8f:ac:e1:9b:1a:b2:74:13:95:76:38:d9:ac:ac:23:51:
         5f:e8:50:1d:92:72:13:9e:41:bf:18:9b:3e:d2:4d:c2:04:8c:
         11:65:98:58
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDkQDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
M2ExZDdmZmUyYTU0M2I2NjE3NTljNzI4ZDkyNzRjZmFhNDA2MWYwHhcNMjEwMzI0
MTQ0MDEzWhcNMjYwMzI0MTQ0MDEzWjAzMTEwLwYDVQQDEyhjZWQ3MWQxMDZkMTE2
NDU0OTUxM2ZmMjgzNWYyNDhmNTk5YTZjOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzOf6xJPrCZqFiSlouvchsxvz9zdmVj9ICzxvIuIOCi004WMv
6WczMY4oB03NPk8yKB8kdg91NM0EMKWYYafNkdlTgU52FlorrrOLsQ8DVaUtOS5m
+uO84dVnNyP9O9MQygbmucodswRmZZxSl6ODuZCez2z9m76lRN7dkTU+9oS2MNOB
2mcYHZexrcsNtYAUYGGQ0GrV/CnUwG4XBXhd+zgs3mORMVHiGx0/wgEwZpsXwvyO
DpaD2JqUIENTLbiZWrLi18lMZkQzJZIy5K/QLEfQBq98FOBKGMQRhziy26k9z5os
eZ9sezvOBH1RSGEyXPEjoraRKM+n81h2ib32xQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFG+E7czDHa/gDBnDxTguHPQtGPiJMB8GA1UdIwQYMBaAFBiUvFB4+kwxapCu
YsWCAjD1oR5cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDEzYTFk
N2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYxZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZhNGE0ODktYWNlYS00YzYwLThmNGUtMzQ5YzYz
ODdlZWViL2NlZDcxZDEwNmQxMTY0NTQ5NTEzZmYyODM1ZjI0OGY1OTlhNmM5NTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmE0YTQ4OS1hY2VhLTRjNjAtOGY0ZS0zNDlj
NjM4N2VlZWIvNDEzYTFkN2ZmZTJhNTQzYjY2MTc1OWM3MjhkOTI3NGNmYWE0MDYx
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD0iAwDQYJKoZIhvcNAQELBQADggEBAG3qMcK45TCD/64C
dRCAtRHTBedU2+7lK9SspaSU97H3Qm6quvLAxUr9MHL/dbDfBXcVqyy8FZyvH5LV
IRAYq/rnxHXXpqqSJlmu1RxjL2MJcD8wSv0oJyE4Td7BxN7U4GFlLXvMKycDXBAS
bvCVNR3UQpJRGH4phoxGU5U3WB9Gz1Q6AuVbyae+ofZrQ3WRfaIThcsXouHKpdPi
cjpqi10mnKLVDaPM78liJudex9x95jikDsa3pknT0k7/WRLxfErHTZaQkZfk7Kxi
rClu2ZrOGBWiYNWDLKLmj6zhmxqydBOVdjjZrKwjUV/oUB2SchOeQb8Ymz7STcIE
jBFlmFg=
-----END CERTIFICATE-----