Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/45ca68e6fa64fb80e42e4a0686656fc6456ae8ea.roa
File:                     45ca68e6fa64fb80e42e4a0686656fc6456ae8ea.roa (raw, json)
Hash identifier:          84LJ+5ljua6wccNYRN4uOSODyToo4GqHP6eGW1wknw0=
Subject key identifier:   25:D6:DC:CB:8F:9A:71:42:DE:45:8A:EA:02:C8:48:84:7D:1B:69:A1
Certificate issuer:       /CN=47ff109e1e2041257e445750def18c70c17d1e60
Certificate serial:       0D6C52
Authority key identifier: 75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/45ca68e6fa64fb80e42e4a0686656fc6456ae8ea.roa
Signing time:             Wed 24 Mar 2021 14:32:30 +0000
ROA not before:           Wed 24 Mar 2021 14:32:29 +0000
ROA not after:            Tue 24 Mar 2026 14:32:29 +0000
asID:                     27865
IP address blocks:        2803:4a80:4000::/34 maxlen: 34
                          2803:4a80:8000::/33 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879698 (0xd6c52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ff109e1e2041257e445750def18c70c17d1e60
        Validity
            Not Before: Mar 24 14:32:29 2021 GMT
            Not After : Mar 24 14:32:29 2026 GMT
        Subject: CN=45ca68e6fa64fb80e42e4a0686656fc6456ae8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:0e:3c:18:d2:26:5a:7b:fe:3a:66:23:6f:
                    aa:29:af:0d:8d:c8:32:a4:1b:1d:4a:62:19:a6:a6:
                    6e:0d:f6:5a:f9:a6:eb:57:85:47:fa:e2:8f:4f:a5:
                    e2:3f:43:68:c1:79:cd:6f:60:52:5a:de:8d:54:04:
                    e2:19:db:31:11:9d:25:6c:96:05:50:82:5f:7f:f8:
                    b5:0c:f2:fd:30:7e:14:5c:1f:0d:8d:e3:b7:f9:bf:
                    3a:d3:81:e5:c6:1e:6e:b6:b3:ce:87:61:bb:4d:01:
                    1a:e1:1a:f3:21:79:05:b5:35:ab:e3:2e:17:2d:20:
                    3b:7d:ff:32:6e:ea:b8:d5:b6:12:1a:cb:cf:ce:88:
                    8d:6c:ee:cb:2f:49:11:70:3a:99:4a:c3:b5:72:4e:
                    35:02:a0:43:81:ec:63:ad:30:ee:4f:9c:22:0c:44:
                    ff:56:79:19:43:ac:23:1e:7e:10:6f:8a:32:0f:ab:
                    8d:33:b7:a0:3b:5b:87:4a:7f:76:46:c4:8d:d1:af:
                    6b:39:a8:0a:b4:61:e5:72:a2:00:9b:f6:4b:94:d9:
                    99:e1:5f:4a:03:dc:ca:43:36:f2:0e:2d:e1:16:cf:
                    c0:c8:7b:64:3d:3f:43:b9:98:27:e2:22:2d:e5:b0:
                    c2:bd:cb:26:18:72:a1:af:59:9f:13:47:17:d7:f5:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D6:DC:CB:8F:9A:71:42:DE:45:8A:EA:02:C8:48:84:7D:1B:69:A1
            X509v3 Authority Key Identifier:
                keyid:75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/45ca68e6fa64fb80e42e4a0686656fc6456ae8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/47ff109e1e2041257e445750def18c70c17d1e60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a80:4000::-2803:4a80:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:90:09:fe:67:19:a2:1a:32:b9:6b:35:a4:c4:36:b1:f7:
         d3:4c:93:ed:55:1d:3d:cd:4b:f8:db:4d:52:db:96:7e:aa:78:
         fe:5a:31:6a:91:92:8a:6e:e7:28:d4:a1:15:b5:db:3f:ff:f5:
         1e:cd:45:a9:c4:e3:a9:59:06:a8:ca:d2:9a:00:63:6d:b3:a5:
         22:04:42:db:75:3c:78:0b:a5:78:f1:33:61:8e:10:c7:a0:93:
         d5:34:8d:e9:2b:b6:d7:56:dc:f7:7f:5f:a8:34:88:21:a3:47:
         18:0a:8e:88:98:63:b2:aa:b9:4a:af:05:4e:d5:01:77:fe:7f:
         1b:1a:1c:77:55:e5:27:d4:92:57:0b:c1:a2:57:80:aa:81:38:
         93:19:42:2c:75:c6:23:87:bc:d5:a1:6b:73:1b:41:56:02:1e:
         37:a1:aa:2f:4d:60:6f:50:7e:48:e1:cd:50:87:92:55:f3:d5:
         47:b7:5c:65:3b:19:ad:f8:84:ed:08:27:07:64:3e:6e:a1:6a:
         31:03:fa:f3:98:f0:0d:64:aa:76:4a:97:f4:91:78:d1:e2:90:
         1d:05:fa:50:29:bf:5c:5a:2f:05:3d:24:10:31:3f:a4:33:79:
         bf:93:de:91:63:f8:1c:d5:c0:e1:d2:7c:af:ad:a5:55:36:ca:
         06:6c:f3:df
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIDDWxSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
ZmYxMDllMWUyMDQxMjU3ZTQ0NTc1MGRlZjE4YzcwYzE3ZDFlNjAwHhcNMjEwMzI0
MTQzMjI5WhcNMjYwMzI0MTQzMjI5WjAzMTEwLwYDVQQDEyg0NWNhNjhlNmZhNjRm
YjgwZTQyZTRhMDY4NjY1NmZjNjQ1NmFlOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwqsOPBjSJlp7/jpmI2+qKa8NjcgypBsdSmIZpqZuDfZa+abr
V4VH+uKPT6XiP0NowXnNb2BSWt6NVATiGdsxEZ0lbJYFUIJff/i1DPL9MH4UXB8N
jeO3+b8604Hlxh5utrPOh2G7TQEa4RrzIXkFtTWr4y4XLSA7ff8ybuq41bYSGsvP
zoiNbO7LL0kRcDqZSsO1ck41AqBDgexjrTDuT5wiDET/VnkZQ6wjHn4Qb4oyD6uN
M7egO1uHSn92RsSN0a9rOagKtGHlcqIAm/ZLlNmZ4V9KA9zKQzbyDi3hFs/AyHtk
PT9DuZgn4iIt5bDCvcsmGHKhr1mfE0cX1/Xp4wIDAQABo4ICZjCCAmIwHQYDVR0O
BBYEFCXW3MuPmnFC3kWK6gLISIR9G2mhMB8GA1UdIwQYMBaAFHWNjk3rNtZqyOrs
Nnh+GM/9tEUnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDdmZjEw
OWUxZTIwNDEyNTdlNDQ1NzUwZGVmMThjNzBjMTdkMWU2MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTg2NDdmMjktYjU0MS00MDcwLWExMGQtNTFjOTY5
YTY4MDA4LzQ1Y2E2OGU2ZmE2NGZiODBlNDJlNGEwNjg2NjU2ZmM2NDU2YWU4ZWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lODY0N2YyOS1iNTQxLTQwNzAtYTEwZC01MWM5
NjlhNjgwMDgvNDdmZjEwOWUxZTIwNDEyNTdlNDQ1NzUwZGVmMThjNzBjMTdkMWU2
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQb
MBkwFwQCAAIwETAPAwYGKANKgEADBQAoA0qAMA0GCSqGSIb3DQEBCwUAA4IBAQBl
1ZAJ/mcZohoyuWs1pMQ2sffTTJPtVR09zUv4201S25Z+qnj+WjFqkZKKbuco1KEV
tds///UezUWpxOOpWQaoytKaAGNts6UiBELbdTx4C6V48TNhjhDHoJPVNI3pK7bX
Vtz3f1+oNIgho0cYCo6ImGOyqrlKrwVO1QF3/n8bGhx3VeUn1JJXC8GiV4CqgTiT
GUIsdcYjh7zVoWtzG0FWAh43oaovTWBvUH5I4c1Qh5JV89VHt1xlOxmt+ITtCCcH
ZD5uoWoxA/rzmPANZKp2Spf0kXjR4pAdBfpQKb9cWi8FPSQQMT+kM3m/k96RY/gc
1cDh0nyvraVVNsoGbPPf
-----END CERTIFICATE-----