Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/010c2ab1-bf36-4590-a3a3-3bd074ef112b/df95ff0ed4990fc56934c945266fed8ccd94d2e1.roa
File:                     df95ff0ed4990fc56934c945266fed8ccd94d2e1.roa (raw, json)
Hash identifier:          CNK6nQkzlvZoBboDbWmQcgq7LFhv3WEB4seSHnzh22k=
Subject key identifier:   59:76:C1:3A:5A:B9:7E:97:4C:E9:87:B0:55:73:DA:18:B2:5E:A7:C7
Certificate issuer:       /CN=5dba8b915f6b44375980ded8423d4ecb1785c0dd
Certificate serial:       072B
Authority key identifier: 68:8A:A4:AA:91:16:F1:6A:E5:00:D0:2D:E5:53:E1:4C:0A:C9:21:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dba8b915f6b44375980ded8423d4ecb1785c0dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/010c2ab1-bf36-4590-a3a3-3bd074ef112b/df95ff0ed4990fc56934c945266fed8ccd94d2e1.roa
Signing time:             Sat 27 May 2023 18:58:33 +0000
ROA not before:           Fri 26 May 2023 18:58:33 +0000
ROA not after:            Tue 27 May 2025 18:58:33 +0000
asID:                     19429
IP address blocks:        2801:1f:3800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dba8b915f6b44375980ded8423d4ecb1785c0dd
        Validity
            Not Before: May 26 18:58:33 2023 GMT
            Not After : May 27 18:58:33 2025 GMT
        Subject: CN=df95ff0ed4990fc56934c945266fed8ccd94d2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ec:2a:6a:c5:0b:6c:18:cf:2b:7d:1f:ad:94:
                    2d:3e:d8:29:02:34:ea:75:65:44:13:6a:81:e3:87:
                    0f:9a:d6:d6:a6:6d:88:37:86:2a:ab:d6:2f:bb:dc:
                    12:3c:f9:92:89:97:64:c5:49:50:eb:66:de:91:3a:
                    dd:81:7b:f0:6f:14:7c:71:cb:b5:5c:e6:23:b3:d6:
                    78:b7:6f:e2:03:9a:4c:a1:66:af:a9:66:4f:c6:c2:
                    21:fc:18:6f:7d:4e:a4:15:3f:24:9f:57:70:66:c1:
                    b0:2c:15:12:44:31:15:5b:81:05:d5:be:f0:18:44:
                    5c:c5:b2:28:95:97:7d:33:45:52:93:4f:39:20:94:
                    6a:54:5e:3a:14:0c:b8:f9:e7:79:e1:ea:d5:b0:5c:
                    d3:0f:37:8d:00:37:d7:0e:a9:6d:c9:4c:31:a0:28:
                    2b:e5:94:25:13:f7:a2:64:b3:48:77:8b:8d:c7:e1:
                    51:fd:ac:be:d2:8f:da:26:ca:18:f7:f2:40:d2:d1:
                    e9:95:39:58:0c:6c:c9:01:2d:89:e5:48:68:62:95:
                    ad:1b:c4:4d:a6:a8:21:54:de:e0:30:3b:e0:b5:ef:
                    d2:64:3a:dc:b4:47:f2:b3:e0:f9:a6:84:8a:6b:1e:
                    b8:16:a2:1e:8d:d3:42:83:0c:3c:79:12:47:54:44:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:76:C1:3A:5A:B9:7E:97:4C:E9:87:B0:55:73:DA:18:B2:5E:A7:C7
            X509v3 Authority Key Identifier:
                keyid:68:8A:A4:AA:91:16:F1:6A:E5:00:D0:2D:E5:53:E1:4C:0A:C9:21:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dba8b915f6b44375980ded8423d4ecb1785c0dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/010c2ab1-bf36-4590-a3a3-3bd074ef112b/df95ff0ed4990fc56934c945266fed8ccd94d2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/010c2ab1-bf36-4590-a3a3-3bd074ef112b/5dba8b915f6b44375980ded8423d4ecb1785c0dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:25:c5:89:98:9c:b7:3f:70:68:e5:ea:5a:50:4d:00:25:
         98:45:e4:3a:56:27:9b:70:38:7f:87:63:74:c3:a5:47:ab:08:
         62:83:00:25:93:f0:92:7d:2a:7f:ed:7e:02:7b:3d:47:12:d7:
         08:0c:8e:20:f1:52:cc:a6:e5:a9:e4:1d:bf:53:8d:ba:31:d5:
         ba:3c:58:53:5a:60:f8:38:b5:b5:9a:65:0b:ba:3c:61:02:b1:
         ad:6f:3b:60:6c:2a:93:a6:c0:1a:d6:f7:95:d4:af:cf:a2:9d:
         dc:30:ef:77:a5:15:cb:47:a2:db:4c:e5:fb:6c:24:e7:c1:33:
         03:ff:92:53:ba:1f:8d:7c:6b:09:c7:e4:9c:e7:6a:29:74:56:
         1f:e4:0f:d1:9a:e1:c7:2f:04:64:49:7e:51:91:67:a2:a8:07:
         45:7a:2c:69:d4:c0:6c:59:82:27:b0:9f:22:97:17:53:69:24:
         d3:15:a9:3e:c6:f7:a7:ab:39:a5:53:09:95:45:27:25:ff:f6:
         8b:db:12:12:73:5f:98:69:e8:d1:a6:e9:43:ca:bc:f5:36:67:
         b4:00:21:b6:96:1a:2a:bb:46:f3:ce:f7:e5:bd:26:a5:10:d4:
         0b:67:58:9d:fb:f6:6e:40:a9:1d:3c:75:62:4e:73:ac:a5:26:
         d3:df:2f:95
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICByswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNWRi
YThiOTE1ZjZiNDQzNzU5ODBkZWQ4NDIzZDRlY2IxNzg1YzBkZDAeFw0yMzA1MjYx
ODU4MzNaFw0yNTA1MjcxODU4MzNaMDMxMTAvBgNVBAMTKGRmOTVmZjBlZDQ5OTBm
YzU2OTM0Yzk0NTI2NmZlZDhjY2Q5NGQyZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn7CpqxQtsGM8rfR+tlC0+2CkCNOp1ZUQTaoHjhw+a1tambYg3
hiqr1i+73BI8+ZKJl2TFSVDrZt6ROt2Be/BvFHxxy7Vc5iOz1ni3b+IDmkyhZq+p
Zk/GwiH8GG99TqQVPySfV3BmwbAsFRJEMRVbgQXVvvAYRFzFsiiVl30zRVKTTzkg
lGpUXjoUDLj553nh6tWwXNMPN40AN9cOqW3JTDGgKCvllCUT96Jks0h3i43H4VH9
rL7Sj9omyhj38kDS0emVOVgMbMkBLYnlSGhila0bxE2mqCFU3uAwO+C179JkOty0
R/Kz4PmmhIprHrgWoh6N00KDDDx5EkdURN2JAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUWXbBOlq5fpdM6YewVXPaGLJep8cwHwYDVR0jBBgwFoAUaIqkqpEW8WrlANAt
5VPhTArJIXgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81ZGJhOGI5
MTVmNmI0NDM3NTk4MGRlZDg0MjNkNGVjYjE3ODVjMGRkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wMTBjMmFiMS1iZjM2LTQ1OTAtYTNhMy0zYmQwNzRl
ZjExMmIvZGY5NWZmMGVkNDk5MGZjNTY5MzRjOTQ1MjY2ZmVkOGNjZDk0ZDJlMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzAxMGMyYWIxLWJmMzYtNDU5MC1hM2EzLTNiZDA3
NGVmMTEyYi81ZGJhOGI5MTVmNmI0NDM3NTk4MGRlZDg0MjNkNGVjYjE3ODVjMGRk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEAHzgAMA0GCSqGSIb3DQEBCwUAA4IBAQAq+CXFiZictz9w
aOXqWlBNACWYReQ6ViebcDh/h2N0w6VHqwhigwAlk/CSfSp/7X4Cez1HEtcIDI4g
8VLMpuWp5B2/U426MdW6PFhTWmD4OLW1mmULujxhArGtbztgbCqTpsAa1veV1K/P
op3cMO93pRXLR6LbTOX7bCTnwTMD/5JTuh+NfGsJx+Sc52opdFYf5A/RmuHHLwRk
SX5RkWeiqAdFeixp1MBsWYInsJ8ilxdTaSTTFak+xvenqzmlUwmVRScl//aL2xIS
c1+YaejRpulDyrz1Nme0ACG2lhoqu0bzzvflvSalENQLZ1id+/ZuQKkdPHViTnOs
pSbT3y+V
-----END CERTIFICATE-----