Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/7f3d91eb9bb5cabe237f88867ea0f1092e4bb746.roa
File:                     7f3d91eb9bb5cabe237f88867ea0f1092e4bb746.roa (raw, json)
Hash identifier:          hLS4sez+fHTzwZEiIxxkxkVLPuDGEnQTC1W3kXi7tak=
Subject key identifier:   FC:D5:3A:88:07:01:32:4B:7F:15:B2:1A:C2:28:AC:FD:59:68:F5:A0
Certificate issuer:       /CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
Certificate serial:       01DD34
Authority key identifier: 3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/7f3d91eb9bb5cabe237f88867ea0f1092e4bb746.roa
Signing time:             Wed 22 Sep 2021 15:38:29 +0000
ROA not before:           Wed 22 Sep 2021 03:00:00 +0000
ROA not after:            Fri 22 Sep 2023 03:00:00 +0000
asID:                     264778
IP address blocks:        2803:b500::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122164 (0x1dd34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
        Validity
            Not Before: Sep 22 03:00:00 2021 GMT
            Not After : Sep 22 03:00:00 2023 GMT
        Subject: CN=7f3d91eb9bb5cabe237f88867ea0f1092e4bb746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:17:25:ba:8c:70:2e:77:1d:e2:0c:8f:ff:
                    af:69:54:d7:12:38:53:08:98:75:f2:1c:87:79:2f:
                    c6:0d:8f:d7:f8:5f:18:42:0b:d3:5e:ba:e1:c6:7d:
                    73:f8:94:1d:91:f7:1b:13:9e:02:ec:0f:56:57:aa:
                    ec:98:97:8b:c5:02:e6:6f:2c:98:c6:78:30:d4:d0:
                    57:7f:21:3b:c7:9b:92:c2:36:aa:6a:24:31:19:81:
                    80:81:82:a2:cf:43:56:e2:95:5c:f8:23:d4:3d:13:
                    fb:bc:07:2f:dc:15:a8:13:9f:94:21:9b:48:c1:79:
                    b4:cd:1f:d5:42:a6:9a:f7:08:3c:08:07:e5:10:55:
                    5e:ab:88:97:fc:36:47:30:09:ae:17:1f:6d:1a:70:
                    29:c5:af:2d:98:63:70:7b:a7:f6:37:33:dc:93:12:
                    38:cc:b3:8b:0d:3c:d9:3f:77:01:c4:cd:a4:18:d3:
                    89:75:27:bb:55:a9:5e:cd:e2:a4:cb:84:6c:24:3e:
                    88:8d:c6:f9:93:a9:6d:f3:c2:05:3f:66:07:bb:3d:
                    8c:19:f0:99:f6:0d:09:82:0b:41:bd:a4:b3:8a:85:
                    38:ee:b0:29:4e:bd:1e:6f:6d:d9:1d:74:aa:c9:54:
                    40:c0:2b:86:58:73:fa:90:1f:16:28:b1:e9:db:1b:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D5:3A:88:07:01:32:4B:7F:15:B2:1A:C2:28:AC:FD:59:68:F5:A0
            X509v3 Authority Key Identifier:
                keyid:3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/7f3d91eb9bb5cabe237f88867ea0f1092e4bb746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/9fbfa45db21e97087d6b1789e849e148e8fceaeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b500::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:32:6e:58:94:99:5e:5d:e9:de:39:1a:bc:6a:9d:42:d5:
         ab:b9:25:6b:a3:cb:fa:80:bc:5b:ef:d2:61:19:ea:fa:04:c5:
         2a:06:10:b0:83:72:10:2f:83:a9:8c:3b:02:4e:50:4e:e6:c4:
         c7:e5:3e:61:0e:ea:ec:58:97:eb:c9:40:01:eb:32:6e:73:46:
         a8:e1:67:15:c1:f5:9b:9b:1a:52:82:51:74:0a:a3:57:80:08:
         44:84:b6:b6:a7:fb:d9:19:6a:a7:ad:1f:34:06:c4:c5:e8:7b:
         a9:51:df:63:ad:04:5f:aa:03:54:69:46:f6:fa:ff:dd:9e:ff:
         be:92:0d:e7:9c:c8:ec:38:52:17:a3:d8:5c:e3:9d:a9:cf:96:
         a1:34:0b:53:ff:f9:98:3e:fc:68:90:85:a0:34:b9:c9:e2:32:
         71:ab:29:20:6d:be:13:60:15:95:12:3c:be:01:23:49:e2:9c:
         6f:ff:5b:f2:98:66:8a:df:5d:15:5d:fd:d0:9c:2f:8d:fb:53:
         01:f3:0e:fa:9b:c5:dc:5f:45:d5:01:0e:2b:06:5b:dd:8f:3a:
         21:72:e7:a2:0a:db:69:d2:89:64:b5:62:74:a9:99:5c:84:28:
         98:f4:44:ae:79:69:18:90:ef:08:06:47:f3:10:ad:b6:cc:e8:
         30:1c:0a:0f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAd00MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
YmZhNDVkYjIxZTk3MDg3ZDZiMTc4OWU4NDllMTQ4ZThmY2VhZWIwHhcNMjEwOTIy
MDMwMDAwWhcNMjMwOTIyMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZjNkOTFlYjliYjVj
YWJlMjM3Zjg4ODY3ZWEwZjEwOTJlNGJiNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgqYXJbqMcC53HeIMj/+vaVTXEjhTCJh18hyHeS/GDY/X+F8Y
QgvTXrrhxn1z+JQdkfcbE54C7A9WV6rsmJeLxQLmbyyYxngw1NBXfyE7x5uSwjaq
aiQxGYGAgYKiz0NW4pVc+CPUPRP7vAcv3BWoE5+UIZtIwXm0zR/VQqaa9wg8CAfl
EFVeq4iX/DZHMAmuFx9tGnApxa8tmGNwe6f2NzPckxI4zLOLDTzZP3cBxM2kGNOJ
dSe7ValezeKky4RsJD6Ijcb5k6lt88IFP2YHuz2MGfCZ9g0JggtBvaSzioU47rAp
Tr0eb23ZHXSqyVRAwCuGWHP6kB8WKLHp2xvogwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPzVOogHATJLfxWyGsIorP1ZaPWgMB8GA1UdIwQYMBaAFDxcX2aVt57ws4Rp
9GZhj9pb1KerMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZiZmE0
NWRiMjFlOTcwODdkNmIxNzg5ZTg0OWUxNDhlOGZjZWFlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQwNTBjMjItOTZlNS00NTM0LWI1MDMtODc5M2Jm
YmZiMWM5LzdmM2Q5MWViOWJiNWNhYmUyMzdmODg4NjdlYTBmMTA5MmU0YmI3NDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDA1MGMyMi05NmU1LTQ1MzQtYjUwMy04Nzkz
YmZiZmIxYzkvOWZiZmE0NWRiMjFlOTcwODdkNmIxNzg5ZTg0OWUxNDhlOGZjZWFl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDtQAwDQYJKoZIhvcNAQELBQADggEBAD7XMm5YlJleXene
ORq8ap1C1au5JWujy/qAvFvv0mEZ6voExSoGELCDchAvg6mMOwJOUE7mxMflPmEO
6uxYl+vJQAHrMm5zRqjhZxXB9ZubGlKCUXQKo1eACESEtran+9kZaqetHzQGxMXo
e6lR32OtBF+qA1RpRvb6/92e/76SDeecyOw4Uhej2FzjnanPlqE0C1P/+Zg+/GiQ
haA0ucniMnGrKSBtvhNgFZUSPL4BI0ninG//W/KYZorfXRVd/dCcL437UwHzDvqb
xdxfRdUBDisGW92POiFy56IK22nSiWS1YnSpmVyEKJj0RK55aRiQ7wgGR/MQrbbM
6DAcCg8=
-----END CERTIFICATE-----