Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/e052a930e1a73a0cbd3472b79339d8b6de7466a3.roa
File:                     e052a930e1a73a0cbd3472b79339d8b6de7466a3.roa (raw, json)
Hash identifier:          GabnM8XujICdyyDP98d4qvBQSkwtrKWSTPWBQYBSB90=
Subject key identifier:   1A:31:98:DA:84:D6:FF:09:C7:6B:FA:9B:D3:7D:DC:DC:D0:14:8A:D9
Certificate issuer:       /CN=f212dc622881566bdfae962b6246371233dfcd20
Certificate serial:       0F4C
Authority key identifier: 39:4A:E1:0A:B0:2D:99:26:70:DF:4E:9B:77:76:31:4F:0E:E0:A4:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f212dc622881566bdfae962b6246371233dfcd20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/e052a930e1a73a0cbd3472b79339d8b6de7466a3.roa
Signing time:             Tue 02 Nov 2021 02:28:07 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Wed 01 Nov 2023 03:00:00 +0000
asID:                     271996
IP address blocks:        2803:3110::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3916 (0xf4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f212dc622881566bdfae962b6246371233dfcd20
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Nov  1 03:00:00 2023 GMT
        Subject: CN=e052a930e1a73a0cbd3472b79339d8b6de7466a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:a3:c8:3c:73:ba:d4:53:f2:27:44:6c:17:
                    04:31:70:7b:bc:93:63:00:50:98:b1:fc:91:37:06:
                    69:c1:5d:40:9d:ca:5d:b3:83:a4:e4:0a:15:65:65:
                    bc:42:30:da:c4:56:6c:b7:3e:16:09:6e:be:11:58:
                    95:0e:9f:00:07:b2:34:cb:16:5c:a5:05:78:f6:8a:
                    10:00:c9:7a:66:f2:0b:0b:41:94:31:cf:fa:88:2a:
                    1c:63:86:5c:ab:94:4c:9d:83:4b:6c:5f:5b:b2:c2:
                    d5:2d:62:fe:7f:7b:71:4a:d5:3a:4d:97:3d:82:9e:
                    8f:37:55:3d:8d:81:23:69:1d:5a:b2:82:2f:de:11:
                    03:b3:6a:a4:4d:33:89:33:a2:c4:42:ca:76:8a:18:
                    fa:0a:a7:db:5e:e8:4d:33:9c:5f:1c:e9:89:3d:3b:
                    c7:0c:9b:cf:36:27:2c:ba:2c:b4:d8:9a:3e:80:7d:
                    01:a6:db:ca:e6:f7:d8:f2:d1:80:fe:6f:38:64:82:
                    f3:77:49:cc:c0:79:b4:20:11:8a:ab:2f:68:9a:c1:
                    16:40:53:4f:68:ea:4d:79:08:a8:c1:00:83:b6:79:
                    ef:cd:fa:d3:6d:21:71:1b:5f:a4:20:39:ed:5b:6b:
                    11:e3:2f:b7:0d:80:4c:6b:e6:a8:b6:8b:1b:7f:6e:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:31:98:DA:84:D6:FF:09:C7:6B:FA:9B:D3:7D:DC:DC:D0:14:8A:D9
            X509v3 Authority Key Identifier:
                keyid:39:4A:E1:0A:B0:2D:99:26:70:DF:4E:9B:77:76:31:4F:0E:E0:A4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f212dc622881566bdfae962b6246371233dfcd20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/e052a930e1a73a0cbd3472b79339d8b6de7466a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3110::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:3d:fe:20:8e:ee:48:f7:71:5e:0f:d8:14:3a:4a:ab:67:15:
         57:87:5d:3e:32:cb:24:ab:24:07:27:7a:4a:97:aa:04:b2:f8:
         77:9a:bb:ad:90:cb:1c:6d:bc:76:39:3a:3c:c1:9c:bb:69:dc:
         c8:2c:42:a5:b9:e7:01:8d:c6:d2:bf:ce:d9:8c:a9:e6:ae:7e:
         ff:82:31:32:cf:ed:49:d5:26:1f:0c:c2:59:9d:24:93:0d:da:
         27:0f:48:74:88:dd:42:59:9d:1d:d3:7d:5a:54:31:8d:ec:18:
         64:63:5e:47:1f:c0:b6:f5:3f:8d:23:a2:2f:67:eb:5f:23:cf:
         9f:a6:46:c7:6a:7f:e9:eb:14:9c:a0:4d:e8:65:23:76:4e:fd:
         13:ad:92:56:a3:ee:56:48:18:87:af:11:13:0f:6f:e4:e9:60:
         89:fc:e4:3b:48:fa:dd:93:7c:51:85:92:bd:e3:11:47:20:d2:
         db:fc:73:06:79:fb:e0:fb:8e:91:7e:c3:ae:4a:e6:04:18:fc:
         a8:76:dd:ac:94:27:11:0e:6b:b9:d0:8f:fa:ed:10:aa:83:1d:
         a2:48:05:85:fb:8f:86:62:2a:68:08:cb:c4:77:a5:b7:35:f5:
         b1:24:b8:7d:2d:cc:00:cf:d5:ec:ce:be:60:33:4c:fa:3d:4b:
         2d:b2:e5:ea
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZjIx
MmRjNjIyODgxNTY2YmRmYWU5NjJiNjI0NjM3MTIzM2RmY2QyMDAeFw0yMTExMDEw
MzAwMDBaFw0yMzExMDEwMzAwMDBaMDMxMTAvBgNVBAMTKGUwNTJhOTMwZTFhNzNh
MGNiZDM0NzJiNzkzMzlkOGI2ZGU3NDY2YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvVqPIPHO61FPyJ0RsFwQxcHu8k2MAUJix/JE3BmnBXUCdyl2z
g6TkChVlZbxCMNrEVmy3PhYJbr4RWJUOnwAHsjTLFlylBXj2ihAAyXpm8gsLQZQx
z/qIKhxjhlyrlEydg0tsX1uywtUtYv5/e3FK1TpNlz2Cno83VT2NgSNpHVqygi/e
EQOzaqRNM4kzosRCynaKGPoKp9te6E0znF8c6Yk9O8cMm882Jyy6LLTYmj6AfQGm
28rm99jy0YD+bzhkgvN3SczAebQgEYqrL2iawRZAU09o6k15CKjBAIO2ee/N+tNt
IXEbX6QgOe1baxHjL7cNgExr5qi2ixt/bqBFAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUGjGY2oTW/wnHa/qb033c3NAUitkwHwYDVR0jBBgwFoAUOUrhCrAtmSZw306b
d3YxTw7gpMgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mMjEyZGM2
MjI4ODE1NjZiZGZhZTk2MmI2MjQ2MzcxMjMzZGZjZDIwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mOTYzOWNhYS04NTM0LTQ4MDQtODVlMS01Nzk5M2Q4
YjEwNTAvZTA1MmE5MzBlMWE3M2EwY2JkMzQ3MmI3OTMzOWQ4YjZkZTc0NjZhMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2Y5NjM5Y2FhLTg1MzQtNDgwNC04NWUxLTU3OTkz
ZDhiMTA1MC9mMjEyZGM2MjI4ODE1NjZiZGZhZTk2MmI2MjQ2MzcxMjMzZGZjZDIw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAMxEDANBgkqhkiG9w0BAQsFAAOCAQEAZj3+II7uSPdxXg/Y
FDpKq2cVV4ddPjLLJKskByd6SpeqBLL4d5q7rZDLHG28djk6PMGcu2ncyCxCpbnn
AY3G0r/O2Yyp5q5+/4IxMs/tSdUmHwzCWZ0kkw3aJw9IdIjdQlmdHdN9WlQxjewY
ZGNeRx/AtvU/jSOiL2frXyPPn6ZGx2p/6esUnKBN6GUjdk79E62SVqPuVkgYh68R
Ew9v5OlgifzkO0j63ZN8UYWSveMRRyDS2/xzBnn74PuOkX7DrkrmBBj8qHbdrJQn
EQ5rudCP+u0QqoMdokgFhfuPhmIqaAjLxHeltzX1sSS4fS3MAM/V7M6+YDNM+j1L
LbLl6g==
-----END CERTIFICATE-----