Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/78209c1de9a46c9760ecd17dfc3f11a5152fecb2.roa
File:                     78209c1de9a46c9760ecd17dfc3f11a5152fecb2.roa (raw, json)
Hash identifier:          is4rIcuZvGD1gW3yy37y1gQ/OJ7ttlCyWZ+uG3bYHKw=
Subject key identifier:   B1:7C:DB:15:25:38:74:1B:62:C1:BC:5C:9F:B2:BA:C5:E1:28:80:91
Certificate issuer:       /CN=63d522badd2c6e16fc1798c8d5e89ba380ece7ea
Certificate serial:       024429
Authority key identifier: 7B:22:92:10:51:82:02:E7:A6:C2:39:56:50:5D:74:12:26:9D:26:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d522badd2c6e16fc1798c8d5e89ba380ece7ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/78209c1de9a46c9760ecd17dfc3f11a5152fecb2.roa
Signing time:             Wed 24 Mar 2021 14:35:33 +0000
ROA not before:           Wed 24 Mar 2021 14:35:33 +0000
ROA not after:            Tue 24 Mar 2026 14:35:33 +0000
asID:                     14080
IP address blocks:        2801:17c::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148521 (0x24429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d522badd2c6e16fc1798c8d5e89ba380ece7ea
        Validity
            Not Before: Mar 24 14:35:33 2021 GMT
            Not After : Mar 24 14:35:33 2026 GMT
        Subject: CN=78209c1de9a46c9760ecd17dfc3f11a5152fecb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:fb:8d:93:c9:b4:b7:c9:81:d8:a6:81:80:
                    6e:13:da:14:09:1c:30:dd:ee:13:6f:cb:3b:41:98:
                    d9:90:9a:72:64:09:57:8d:eb:fb:1e:98:01:34:ec:
                    f5:e5:51:1f:7c:0a:47:f4:a0:6a:5a:2a:7c:18:e7:
                    cd:2e:bc:8e:84:d2:f7:a6:96:47:35:fd:39:b2:e3:
                    6c:c6:66:7a:37:83:ce:0e:1d:a6:ea:1a:c1:d1:51:
                    4f:16:9d:0e:69:19:30:75:b3:d6:7d:24:68:92:63:
                    ee:75:ac:07:d1:a0:36:29:13:6f:69:e3:8d:97:01:
                    fa:a9:6a:40:e2:1e:d3:15:2d:a0:43:06:43:3e:ca:
                    98:74:91:43:69:6d:66:9f:f6:44:f5:6f:b0:1e:1c:
                    c7:d8:7f:a7:7b:85:32:cb:d7:e1:ee:83:e6:e1:99:
                    4c:31:af:81:f3:f1:61:89:32:85:36:2a:b2:56:b4:
                    04:d9:cd:0c:4f:d7:6a:0a:de:19:da:84:6a:e0:d7:
                    32:6e:84:80:ee:a5:7a:05:88:0e:9b:63:d4:47:6f:
                    d6:4f:54:57:64:24:15:18:91:e1:ee:1c:da:0b:d1:
                    32:98:90:c6:80:ef:f6:96:dc:f7:b3:f1:19:c5:1d:
                    e8:50:97:c9:92:0a:c3:5c:72:37:8f:3e:f7:f4:7c:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:DB:15:25:38:74:1B:62:C1:BC:5C:9F:B2:BA:C5:E1:28:80:91
            X509v3 Authority Key Identifier:
                keyid:7B:22:92:10:51:82:02:E7:A6:C2:39:56:50:5D:74:12:26:9D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d522badd2c6e16fc1798c8d5e89ba380ece7ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/78209c1de9a46c9760ecd17dfc3f11a5152fecb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/63d522badd2c6e16fc1798c8d5e89ba380ece7ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17c::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:44:f0:ec:b6:a6:10:5d:88:9f:e7:fd:db:ac:96:1c:e1:
         96:06:e6:8a:3f:9e:f9:49:f7:4b:71:99:b5:74:ed:0a:70:04:
         4a:d1:10:1d:87:88:ad:cd:ac:dd:54:58:bd:42:e8:e0:9d:ad:
         a9:65:bc:98:da:66:77:cc:d8:fe:92:c3:3b:0a:55:a5:45:e6:
         01:32:f4:99:a1:09:8b:a8:a4:15:2f:8c:7e:e9:03:91:82:7b:
         02:5d:77:e1:8d:73:cf:0b:4e:e9:27:4a:b3:8a:eb:b3:16:4a:
         70:3d:1a:c0:25:d1:ba:ed:06:5f:d6:47:0a:90:c8:46:13:10:
         23:0a:90:66:cc:bb:40:d5:69:ae:2b:e2:bc:13:0e:01:78:06:
         91:60:c2:0e:3e:3e:cb:d9:4a:9a:c8:1b:42:95:26:dc:b4:ca:
         d3:f8:64:18:6d:9b:ff:c4:4a:2d:a9:ca:83:98:fe:a3:f1:f5:
         ef:31:24:37:27:25:95:b1:a5:71:ef:b6:6c:56:ad:2d:dc:e8:
         b7:07:26:4a:5c:84:46:76:ee:70:13:98:86:69:79:ca:48:ae:
         f5:6f:12:b8:96:04:f5:21:f8:e1:4d:07:e2:c8:a4:00:4e:27:
         2d:cf:32:87:09:ad:f8:b9:2c:0f:56:04:92:ff:52:d5:59:9e:
         18:93:1e:9c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAkQpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
ZDUyMmJhZGQyYzZlMTZmYzE3OThjOGQ1ZTg5YmEzODBlY2U3ZWEwHhcNMjEwMzI0
MTQzNTMzWhcNMjYwMzI0MTQzNTMzWjAzMTEwLwYDVQQDEyg3ODIwOWMxZGU5YTQ2
Yzk3NjBlY2QxN2RmYzNmMTFhNTE1MmZlY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA44b7jZPJtLfJgdimgYBuE9oUCRww3e4Tb8s7QZjZkJpyZAlX
jev7HpgBNOz15VEffApH9KBqWip8GOfNLryOhNL3ppZHNf05suNsxmZ6N4PODh2m
6hrB0VFPFp0OaRkwdbPWfSRokmPudawH0aA2KRNvaeONlwH6qWpA4h7TFS2gQwZD
PsqYdJFDaW1mn/ZE9W+wHhzH2H+ne4Uyy9fh7oPm4ZlMMa+B8/FhiTKFNiqyVrQE
2c0MT9dqCt4Z2oRq4NcyboSA7qV6BYgOm2PUR2/WT1RXZCQVGJHh7hzaC9EymJDG
gO/2ltz3s/EZxR3oUJfJkgrDXHI3jz739HxLXQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLF82xUlOHQbYsG8XJ+yusXhKICRMB8GA1UdIwQYMBaAFHsikhBRggLnpsI5
VlBddBImnSaOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjNkNTIy
YmFkZDJjNmUxNmZjMTc5OGM4ZDVlODliYTM4MGVjZTdlYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg3MzQ4Y2EtNjkzOS00ZjdjLWE4ZWItOGI3NWI5
ZWIyNDQyLzc4MjA5YzFkZTlhNDZjOTc2MGVjZDE3ZGZjM2YxMWE1MTUyZmVjYjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODczNDhjYS02OTM5LTRmN2MtYThlYi04Yjc1
YjllYjI0NDIvNjNkNTIyYmFkZDJjNmUxNmZjMTc5OGM4ZDVlODliYTM4MGVjZTdl
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBAXwAADANBgkqhkiG9w0BAQsFAAOCAQEALe9E8Oy2phBd
iJ/n/duslhzhlgbmij+e+Un3S3GZtXTtCnAEStEQHYeIrc2s3VRYvULo4J2tqWW8
mNpmd8zY/pLDOwpVpUXmATL0maEJi6ikFS+MfukDkYJ7Al134Y1zzwtO6SdKs4rr
sxZKcD0awCXRuu0GX9ZHCpDIRhMQIwqQZsy7QNVprivivBMOAXgGkWDCDj4+y9lK
msgbQpUm3LTK0/hkGG2b/8RKLanKg5j+o/H17zEkNycllbGlce+2bFatLdzotwcm
SlyERnbucBOYhml5ykiu9W8SuJYE9SH44U0H4sikAE4nLc8yhwmt+LksD1YEkv9S
1VmeGJMenA==
-----END CERTIFICATE-----