Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/3804570a7ea15f7fc78f83f1bdb19005aa6a3f66.roa
File:                     3804570a7ea15f7fc78f83f1bdb19005aa6a3f66.roa (raw, json)
Hash identifier:          ig4M+sferc9pb/70zCr2etUuLIiZyw4j6xsgJ7VQp7A=
Subject key identifier:   42:F8:FA:3F:FF:AC:2F:E6:A3:EC:3E:E3:D1:8A:02:D0:6B:2C:E5:10
Certificate issuer:       /CN=1d39e33473e4bb1b07dda4a78b92c9b0f538c685
Certificate serial:       0D1C8F
Authority key identifier: F8:44:59:C4:4D:8A:E6:17:2A:87:3E:3D:D2:41:C2:89:60:F8:B1:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/3804570a7ea15f7fc78f83f1bdb19005aa6a3f66.roa
Signing time:             Wed 24 Mar 2021 14:47:30 +0000
ROA not before:           Wed 24 Mar 2021 14:47:29 +0000
ROA not after:            Tue 24 Mar 2026 14:47:29 +0000
asID:                     52285
IP address blocks:        2803:4f00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859279 (0xd1c8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d39e33473e4bb1b07dda4a78b92c9b0f538c685
        Validity
            Not Before: Mar 24 14:47:29 2021 GMT
            Not After : Mar 24 14:47:29 2026 GMT
        Subject: CN=3804570a7ea15f7fc78f83f1bdb19005aa6a3f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:9d:46:5b:f5:69:2e:cb:b0:24:4a:14:40:
                    41:91:f3:17:9f:81:6b:0e:b9:66:e8:6d:97:9c:2d:
                    01:66:14:c5:56:8a:cc:3d:60:68:78:52:61:5d:78:
                    7e:f3:f5:5a:82:67:e3:df:9b:84:03:8a:87:90:28:
                    dd:9d:95:3d:99:3c:36:17:14:5b:f9:2d:5d:97:74:
                    be:25:86:5e:1b:23:04:c7:96:fe:b6:ab:6d:54:cc:
                    23:4a:81:0f:69:79:4d:d2:56:f5:3c:3e:3c:e9:9d:
                    88:94:bc:cb:7e:ba:52:bd:89:c3:d1:b9:4b:0b:9e:
                    80:19:a5:44:34:47:32:62:d4:b3:e5:85:1c:b5:9b:
                    c9:90:28:0a:81:73:6d:a8:05:78:18:44:42:c8:bc:
                    6e:10:6f:51:3a:90:4a:b9:a8:e5:63:41:6d:e1:a6:
                    6e:6f:8f:0a:99:27:a1:d9:2f:3a:46:de:3b:df:f7:
                    80:f8:7c:36:6e:7f:71:08:be:48:13:f4:17:84:b0:
                    ff:4a:eb:08:3b:b0:d3:29:ff:f0:35:c3:91:35:ce:
                    d0:f2:eb:72:02:f1:10:20:1d:64:20:35:73:fc:72:
                    c5:a6:b3:23:05:cf:bc:99:18:71:41:a8:b0:bd:2b:
                    83:4b:5b:15:f5:62:79:17:f6:b1:da:82:ab:b6:25:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:FA:3F:FF:AC:2F:E6:A3:EC:3E:E3:D1:8A:02:D0:6B:2C:E5:10
            X509v3 Authority Key Identifier:
                keyid:F8:44:59:C4:4D:8A:E6:17:2A:87:3E:3D:D2:41:C2:89:60:F8:B1:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/3804570a7ea15f7fc78f83f1bdb19005aa6a3f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edddd5b9-fd04-404a-8b3c-5aec1f9fe099/1d39e33473e4bb1b07dda4a78b92c9b0f538c685.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:22:b5:49:ba:a9:52:8d:2c:06:ab:23:6c:ee:8c:ab:ce:
         aa:03:e8:c2:47:1c:64:10:91:74:61:d5:01:de:8b:48:18:66:
         e7:37:8d:de:c1:76:34:6d:e3:31:27:41:c1:ab:fa:14:ba:fa:
         52:ea:aa:d5:68:5b:19:51:5b:bf:0f:88:82:3d:5c:a5:10:40:
         8c:96:26:b6:09:16:33:4a:02:a4:6f:ff:14:81:b3:da:2f:85:
         5d:42:1f:04:7b:c4:f7:a5:9c:37:92:49:38:19:63:bb:e0:a1:
         46:df:00:16:95:55:de:ba:9f:1f:f3:9e:d3:ac:10:79:f2:0c:
         0b:60:ba:fa:e7:98:95:8f:94:4c:c5:3c:b9:37:8c:ba:2e:8c:
         b3:51:0d:5f:70:1e:f0:0e:f4:d8:02:3f:1b:57:b5:b4:84:f5:
         14:15:38:a6:2e:be:88:00:38:3d:4d:b7:12:19:0c:3f:bf:0b:
         47:24:59:e0:4b:dd:24:ce:79:b1:ca:cd:7c:a1:2a:bb:4f:12:
         5f:c9:01:9b:13:86:86:f3:fa:0f:0b:31:bc:83:81:72:3a:7a:
         85:ca:c3:a9:f9:85:f5:06:47:c4:94:37:cb:79:08:c2:ba:0d:
         b7:18:f2:4a:4a:26:ab:95:b7:a2:a6:54:41:dd:f3:33:00:ac:
         e5:85:8d:a2
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDRyPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFk
MzllMzM0NzNlNGJiMWIwN2RkYTRhNzhiOTJjOWIwZjUzOGM2ODUwHhcNMjEwMzI0
MTQ0NzI5WhcNMjYwMzI0MTQ0NzI5WjAzMTEwLwYDVQQDEygzODA0NTcwYTdlYTE1
ZjdmYzc4ZjgzZjFiZGIxOTAwNWFhNmEzZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArUWdRlv1aS7LsCRKFEBBkfMXn4FrDrlm6G2XnC0BZhTFVorM
PWBoeFJhXXh+8/Vagmfj35uEA4qHkCjdnZU9mTw2FxRb+S1dl3S+JYZeGyMEx5b+
tqttVMwjSoEPaXlN0lb1PD486Z2IlLzLfrpSvYnD0blLC56AGaVENEcyYtSz5YUc
tZvJkCgKgXNtqAV4GERCyLxuEG9ROpBKuajlY0Ft4aZub48KmSeh2S86Rt473/eA
+Hw2bn9xCL5IE/QXhLD/SusIO7DTKf/wNcORNc7Q8utyAvEQIB1kIDVz/HLFprMj
Bc+8mRhxQaiwvSuDS1sV9WJ5F/ax2oKrtiVxGwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFEL4+j//rC/mo+w+49GKAtBrLOUQMB8GA1UdIwQYMBaAFPhEWcRNiuYXKoc+
PdJBwolg+LG4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWQzOWUz
MzQ3M2U0YmIxYjA3ZGRhNGE3OGI5MmM5YjBmNTM4YzY4NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWRkZGQ1YjktZmQwNC00MDRhLThiM2MtNWFlYzFm
OWZlMDk5LzM4MDQ1NzBhN2VhMTVmN2ZjNzhmODNmMWJkYjE5MDA1YWE2YTNmNjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZGRkZDViOS1mZDA0LTQwNGEtOGIzYy01YWVj
MWY5ZmUwOTkvMWQzOWUzMzQ3M2U0YmIxYjA3ZGRhNGE3OGI5MmM5YjBmNTM4YzY4
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDTwAwDQYJKoZIhvcNAQELBQADggEBAErBIrVJuqlSjSwG
qyNs7oyrzqoD6MJHHGQQkXRh1QHei0gYZuc3jd7BdjRt4zEnQcGr+hS6+lLqqtVo
WxlRW78PiII9XKUQQIyWJrYJFjNKAqRv/xSBs9ovhV1CHwR7xPelnDeSSTgZY7vg
oUbfABaVVd66nx/zntOsEHnyDAtguvrnmJWPlEzFPLk3jLoujLNRDV9wHvAO9NgC
PxtXtbSE9RQVOKYuvogAOD1NtxIZDD+/C0ckWeBL3STOebHKzXyhKrtPEl/JAZsT
hobz+g8LMbyDgXI6eoXKw6n5hfUGR8SUN8t5CMK6DbcY8kpKJquVt6KmVEHd8zMA
rOWFjaI=
-----END CERTIFICATE-----