Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/909bf1bae86879c59824daeac1e8801d02d391bb.roa
File:                     909bf1bae86879c59824daeac1e8801d02d391bb.roa (raw, json)
Hash identifier:          YDZGlOQp6Y2thrqWEAQ86hVYJJNqU1hHIfSD7XYM5ww=
Subject key identifier:   67:9B:D4:46:93:58:7D:6A:2B:1E:B9:17:1C:E8:0D:6F:1B:F4:8B:20
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       0BF9D1
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/909bf1bae86879c59824daeac1e8801d02d391bb.roa
Signing time:             Wed 24 Mar 2021 14:43:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:23 +0000
ROA not after:            Tue 24 Mar 2026 14:43:23 +0000
asID:                     7438
IP address blocks:        2806:200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784849 (0xbf9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 14:43:23 2021 GMT
            Not After : Mar 24 14:43:23 2026 GMT
        Subject: CN=909bf1bae86879c59824daeac1e8801d02d391bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:f0:d5:11:32:17:ba:fc:93:28:c6:e6:e3:
                    43:e0:cf:f3:f7:8b:5d:c9:5d:e5:54:db:5d:b0:83:
                    5e:2a:03:9e:5d:28:ec:4a:b5:0f:e8:65:a8:aa:50:
                    65:a3:ac:49:d6:38:dd:a9:58:e4:fc:4d:54:59:b0:
                    ec:12:52:ce:3d:03:20:af:6b:75:83:56:b4:69:61:
                    a2:4d:c5:c4:a2:05:65:13:82:f0:25:1c:98:84:14:
                    9e:67:86:cf:c6:0a:8f:fa:d2:92:bd:b7:70:7b:ea:
                    41:f3:5f:cb:32:c6:b6:c1:38:12:ea:16:2d:2e:e4:
                    8b:8a:e3:fd:a2:37:72:70:85:b9:46:9f:9a:8e:0e:
                    1e:80:fb:45:27:6e:37:a9:5c:99:89:53:b7:0a:16:
                    4e:4b:22:12:da:5f:d3:71:01:fe:e5:88:ee:54:19:
                    a5:11:36:b8:6d:4c:f8:04:c0:d7:3b:4b:cc:9a:98:
                    f0:7f:dc:f8:9e:ff:e3:fa:f7:be:e8:68:65:87:11:
                    fa:15:28:c9:69:19:35:cc:b3:f0:a4:53:f8:49:e8:
                    e3:29:ec:5a:45:33:1d:21:fe:84:71:0c:51:3d:8a:
                    2f:0c:f1:c6:33:39:15:94:44:9d:2a:91:45:1a:8e:
                    f3:f3:36:6d:06:a5:18:d3:78:a3:f8:f5:d8:21:c9:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9B:D4:46:93:58:7D:6A:2B:1E:B9:17:1C:E8:0D:6F:1B:F4:8B:20
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/909bf1bae86879c59824daeac1e8801d02d391bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:22:17:4e:20:cc:c3:37:19:1d:df:db:ea:f8:41:07:c2:
         b9:e0:17:79:b0:8a:ef:ed:a6:27:96:fb:3e:ed:94:8e:90:99:
         c7:91:27:c1:71:96:10:57:5a:a8:65:ba:d1:49:04:26:b6:0a:
         91:86:d1:f9:38:22:fd:9b:fb:ea:c6:5c:bc:57:05:c0:76:56:
         91:60:5a:88:70:f5:07:2a:b1:a5:5e:bf:d6:d0:55:db:fb:6d:
         91:67:0f:f0:57:92:4c:94:55:5b:50:ce:e0:51:7d:0f:0f:88:
         20:34:27:de:07:10:51:65:a0:e3:b6:d4:14:7e:6f:ce:8a:76:
         cd:1a:9b:8b:2d:ad:5b:66:84:05:94:68:af:47:3f:1c:cf:74:
         07:95:d8:3d:63:f1:05:04:04:7a:1e:e7:40:c1:e2:fc:e4:2b:
         31:be:a1:3b:4b:2c:be:db:a7:7f:5f:69:e6:17:83:e9:cf:34:
         ee:af:77:6f:f3:da:7e:66:f5:e3:b2:98:ef:67:e7:ce:d4:da:
         06:74:4d:c5:cf:ca:06:97:27:15:2d:ec:f9:23:3f:fe:68:e8:
         54:9e:20:a3:34:3c:8d:23:27:5b:a5:52:67:27:62:22:9a:1e:
         34:cd:ba:fa:45:3d:83:4e:ad:68:64:aa:db:ba:0e:92:c1:c1:
         ab:3d:09:76
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDC/nRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
YTBmM2I4Njk5MTU3ZDAyZTJlNzA1MTM5NjlmMmU3N2I2YjlkYjUwHhcNMjEwMzI0
MTQ0MzIzWhcNMjYwMzI0MTQ0MzIzWjAzMTEwLwYDVQQDEyg5MDliZjFiYWU4Njg3
OWM1OTgyNGRhZWFjMWU4ODAxZDAyZDM5MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr4nw1REyF7r8kyjG5uND4M/z94tdyV3lVNtdsINeKgOeXSjs
SrUP6GWoqlBlo6xJ1jjdqVjk/E1UWbDsElLOPQMgr2t1g1a0aWGiTcXEogVlE4Lw
JRyYhBSeZ4bPxgqP+tKSvbdwe+pB81/LMsa2wTgS6hYtLuSLiuP9ojdycIW5Rp+a
jg4egPtFJ243qVyZiVO3ChZOSyIS2l/TcQH+5YjuVBmlETa4bUz4BMDXO0vMmpjw
f9z4nv/j+ve+6GhlhxH6FSjJaRk1zLPwpFP4SejjKexaRTMdIf6EcQxRPYovDPHG
MzkVlESdKpFFGo7z8zZtBqUY03ij+PXYIclZAQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGeb1EaTWH1qKx65FxzoDW8b9IsgMB8GA1UdIwQYMBaAFCbkR03yh/f55N2E
qiumstDt5OpoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODJhMGYz
Yjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWFkOTllZGMtN2M0Ny00YzRkLWE0N2EtM2Y3MjYx
ZWFkMmUzLzkwOWJmMWJhZTg2ODc5YzU5ODI0ZGFlYWMxZTg4MDFkMDJkMzkxYmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYWQ5OWVkYy03YzQ3LTRjNGQtYTQ3YS0zZjcy
NjFlYWQyZTMvODJhMGYzYjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgGAgAwDQYJKoZIhvcNAQELBQADggEBAHQ6IhdOIMzDNxkd
39vq+EEHwrngF3mwiu/tpieW+z7tlI6QmceRJ8FxlhBXWqhlutFJBCa2CpGG0fk4
Iv2b++rGXLxXBcB2VpFgWohw9QcqsaVev9bQVdv7bZFnD/BXkkyUVVtQzuBRfQ8P
iCA0J94HEFFloOO21BR+b86Kds0am4strVtmhAWUaK9HPxzPdAeV2D1j8QUEBHoe
50DB4vzkKzG+oTtLLL7bp39faeYXg+nPNO6vd2/z2n5m9eOymO9n587U2gZ0TcXP
ygaXJxUt7PkjP/5o6FSeIKM0PI0jJ1ulUmcnYiKaHjTNuvpFPYNOrWhkqtu6DpLB
was9CXY=
-----END CERTIFICATE-----