Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa
File:                     d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa (raw, json)
Hash identifier:          osUGITiWW/MuxhN2nkpniADZsrqb6gop6R+E8stNxjI=
Subject key identifier:   74:FB:BA:D9:B0:78:72:C7:EB:10:64:A4:03:AD:50:F6:01:7E:B5:C3
Certificate issuer:       /CN=915f68a6528ca709ff174bd5596ac8710fb56d18
Certificate serial:       0CF0C8
Authority key identifier: D3:3B:AA:08:ED:C7:29:48:1D:C7:F5:BF:E6:28:5D:A3:85:70:FA:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/915f68a6528ca709ff174bd5596ac8710fb56d18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa
Signing time:             Wed 24 Mar 2021 14:46:19 +0000
ROA not before:           Wed 24 Mar 2021 14:46:19 +0000
ROA not after:            Tue 24 Mar 2026 14:46:19 +0000
asID:                     263813
IP address blocks:        2803:b240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848072 (0xcf0c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=915f68a6528ca709ff174bd5596ac8710fb56d18
        Validity
            Not Before: Mar 24 14:46:19 2021 GMT
            Not After : Mar 24 14:46:19 2026 GMT
        Subject: CN=d8ea93927c0cf18ec0fa2b990a32f5556159f14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:97:b3:eb:6f:44:aa:27:80:04:8b:82:70:
                    43:0f:e3:3b:f7:2d:03:ac:b6:d8:b6:bd:3f:f8:fd:
                    37:0d:43:7e:c0:09:56:66:93:a8:dc:3f:78:40:c2:
                    e8:cb:ab:13:ea:1b:ab:c0:6d:b7:48:81:b6:4b:b8:
                    2d:74:7e:f6:9f:f4:13:c4:83:31:8a:fa:a1:8c:a7:
                    36:01:56:53:98:2a:84:15:3a:c4:cb:cb:6a:5c:f4:
                    77:b7:f2:44:e3:7e:ab:d5:4f:af:a5:a3:d1:57:b8:
                    e1:85:4c:cf:ee:02:53:5b:7e:90:af:92:8a:21:76:
                    c3:f1:23:fa:cc:d7:89:5b:56:fb:8a:3b:90:b8:dc:
                    47:20:fc:36:cc:8b:6e:95:38:53:48:41:6f:fe:fd:
                    6a:db:1e:0d:2b:19:e0:4e:ec:7a:4f:76:fb:b8:b5:
                    00:2a:31:f7:72:44:b5:7f:34:d2:e6:79:8e:5f:1f:
                    c3:4f:ae:09:f2:1d:4b:f8:24:49:91:89:2d:06:22:
                    5f:5e:f9:37:e3:3b:25:50:91:44:ea:dc:8a:9e:9f:
                    bb:bb:19:e1:82:49:58:f0:3e:d4:53:b2:45:95:c0:
                    21:7e:1d:c1:08:b1:40:9f:c8:97:f9:8a:71:88:cd:
                    b6:4e:02:bf:9b:44:c3:23:55:3c:ae:40:ae:e8:7e:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:BA:D9:B0:78:72:C7:EB:10:64:A4:03:AD:50:F6:01:7E:B5:C3
            X509v3 Authority Key Identifier:
                keyid:D3:3B:AA:08:ED:C7:29:48:1D:C7:F5:BF:E6:28:5D:A3:85:70:FA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/915f68a6528ca709ff174bd5596ac8710fb56d18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/d8ea93927c0cf18ec0fa2b990a32f5556159f14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fcfe44b3-9e0d-4f02-b399-0494ae9b4f39/915f68a6528ca709ff174bd5596ac8710fb56d18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b240::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:02:79:4f:eb:68:92:20:08:60:cb:82:51:ea:04:20:e2:
         34:70:f2:71:ef:c5:75:f7:90:c0:8f:cf:66:7c:3a:ae:f1:bd:
         64:7a:29:e9:7b:70:44:d7:6e:16:41:08:5d:bb:7a:9f:4b:72:
         e2:2e:1f:f5:5a:25:06:a0:f0:14:ef:62:59:d8:0b:cc:6b:46:
         04:5c:09:64:c0:e1:1e:86:6d:b2:b2:7c:ae:52:2d:6a:92:df:
         e4:19:2a:1c:2c:06:7f:69:45:c3:c5:9b:6b:b6:ca:d8:24:97:
         82:da:b6:c0:fa:36:f6:d6:b8:42:9a:7f:90:4d:1d:e4:d1:49:
         19:f1:80:be:44:8c:2a:77:6d:e9:5c:38:62:bc:56:c6:43:da:
         20:23:4d:1c:15:d9:f9:24:58:9c:95:e7:5f:5b:b7:37:3d:b5:
         59:3b:1d:fe:1b:be:55:37:f5:16:ba:b0:36:be:60:66:2b:c8:
         d7:e2:7e:aa:5b:41:07:38:2c:2b:eb:db:19:3f:c2:9b:e1:9a:
         d2:4c:89:a0:a3:29:79:09:f3:3f:c3:d4:3b:1b:e2:8c:ac:4a:
         a5:f1:2f:62:d6:b9:0a:a3:ca:b9:dc:7a:6f:54:ab:c9:81:5a:
         a5:7b:97:2b:2f:d8:63:d3:16:ff:f0:6b:05:27:b6:c1:b1:28:
         6f:07:4d:a5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDPDIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
NWY2OGE2NTI4Y2E3MDlmZjE3NGJkNTU5NmFjODcxMGZiNTZkMTgwHhcNMjEwMzI0
MTQ0NjE5WhcNMjYwMzI0MTQ0NjE5WjAzMTEwLwYDVQQDEyhkOGVhOTM5MjdjMGNm
MThlYzBmYTJiOTkwYTMyZjU1NTYxNTlmMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjGWXs+tvRKongASLgnBDD+M79y0DrLbYtr0/+P03DUN+wAlW
ZpOo3D94QMLoy6sT6hurwG23SIG2S7gtdH72n/QTxIMxivqhjKc2AVZTmCqEFTrE
y8tqXPR3t/JE436r1U+vpaPRV7jhhUzP7gJTW36Qr5KKIXbD8SP6zNeJW1b7ijuQ
uNxHIPw2zItulThTSEFv/v1q2x4NKxngTux6T3b7uLUAKjH3ckS1fzTS5nmOXx/D
T64J8h1L+CRJkYktBiJfXvk34zslUJFE6tyKnp+7uxnhgklY8D7UU7JFlcAhfh3B
CLFAn8iX+YpxiM22TgK/m0TDI1U8rkCu6H70uQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHT7utmweHLH6xBkpAOtUPYBfrXDMB8GA1UdIwQYMBaAFNM7qgjtxylIHcf1
v+YoXaOFcPqSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTE1ZjY4
YTY1MjhjYTcwOWZmMTc0YmQ1NTk2YWM4NzEwZmI1NmQxOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmNmZTQ0YjMtOWUwZC00ZjAyLWIzOTktMDQ5NGFl
OWI0ZjM5L2Q4ZWE5MzkyN2MwY2YxOGVjMGZhMmI5OTBhMzJmNTU1NjE1OWYxNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mY2ZlNDRiMy05ZTBkLTRmMDItYjM5OS0wNDk0
YWU5YjRmMzkvOTE1ZjY4YTY1MjhjYTcwOWZmMTc0YmQ1NTk2YWM4NzEwZmI1NmQx
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDskAwDQYJKoZIhvcNAQELBQADggEBAGVNAnlP62iSIAhg
y4JR6gQg4jRw8nHvxXX3kMCPz2Z8Oq7xvWR6Kel7cETXbhZBCF27ep9LcuIuH/Va
JQag8BTvYlnYC8xrRgRcCWTA4R6GbbKyfK5SLWqS3+QZKhwsBn9pRcPFm2u2ytgk
l4LatsD6NvbWuEKaf5BNHeTRSRnxgL5EjCp3belcOGK8VsZD2iAjTRwV2fkkWJyV
519btzc9tVk7Hf4bvlU39Ra6sDa+YGYryNfifqpbQQc4LCvr2xk/wpvhmtJMiaCj
KXkJ8z/D1Dsb4oysSqXxL2LWuQqjyrncem9Uq8mBWqV7lysv2GPTFv/wawUntsGx
KG8HTaU=
-----END CERTIFICATE-----