Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/ff3106f0fc9d16bf568cdff39471f61c6056781a.roa
File:                     ff3106f0fc9d16bf568cdff39471f61c6056781a.roa (raw, json)
Hash identifier:          uQysG9Ga6rsImyw87YWdPZAmZ+WukmoGWHI/3o5uX/Y=
Subject key identifier:   3D:4F:32:6A:1A:E6:86:1A:3C:D0:B6:BC:43:6D:C3:15:73:D1:94:40
Certificate issuer:       /CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
Certificate serial:       09B221
Authority key identifier: 64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/ff3106f0fc9d16bf568cdff39471f61c6056781a.roa
Signing time:             Wed 24 Mar 2021 14:34:46 +0000
ROA not before:           Wed 24 Mar 2021 14:34:46 +0000
ROA not after:            Tue 24 Mar 2026 14:34:46 +0000
asID:                     19429
IP address blocks:        2801:10a:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635425 (0x9b221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
        Validity
            Not Before: Mar 24 14:34:46 2021 GMT
            Not After : Mar 24 14:34:46 2026 GMT
        Subject: CN=ff3106f0fc9d16bf568cdff39471f61c6056781a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:5e:04:3b:d9:42:8c:0c:8d:a6:26:6b:c9:
                    f0:56:25:97:92:88:92:4a:6e:c6:d4:95:3d:81:7b:
                    e1:e6:fd:d2:e1:d3:b6:8d:75:86:e6:ac:d4:f0:4f:
                    3a:1f:54:f6:4e:90:bd:59:9e:1c:af:67:8b:86:91:
                    ba:6b:58:27:13:6f:74:74:7d:d9:b3:45:9f:c3:1b:
                    83:1a:90:52:f5:f0:a4:d9:c9:29:e9:07:b2:f2:5f:
                    43:ec:4b:eb:b2:49:be:b8:f8:00:8c:aa:e0:fb:cb:
                    04:48:75:c1:98:6d:e4:16:bb:8b:1c:fa:95:0c:a8:
                    32:e9:73:13:90:20:5c:67:c1:93:17:77:f3:69:53:
                    4f:98:8d:cf:45:9e:0c:12:34:58:0d:e3:c9:fa:d9:
                    4b:dd:c8:ea:40:c6:8b:66:70:f9:73:36:fe:e1:d8:
                    b5:fa:f6:26:6f:d8:b8:32:9f:5b:15:14:51:8a:08:
                    b6:f0:30:ee:a6:b4:1e:28:41:73:a1:f0:f8:36:c7:
                    75:99:7b:1e:9b:f6:7b:9a:db:1f:56:eb:91:bb:81:
                    08:97:46:99:32:88:74:1f:c7:4f:1d:a7:82:14:70:
                    de:d5:3f:83:77:3a:c5:fb:55:68:10:17:62:67:c7:
                    04:d0:d0:6d:cf:88:02:a2:33:68:66:c0:56:46:07:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4F:32:6A:1A:E6:86:1A:3C:D0:B6:BC:43:6D:C3:15:73:D1:94:40
            X509v3 Authority Key Identifier:
                keyid:64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/ff3106f0fc9d16bf568cdff39471f61c6056781a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/9f4add842c04cc0e056fa508d773c646d1b9f40c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10a:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:20:eb:58:7e:06:db:fd:ee:6f:ad:fb:64:d5:f7:8a:5a:45:
         40:39:4a:b4:9d:ba:ba:09:73:a8:a9:99:ca:4d:a0:c0:16:84:
         0c:e7:08:9f:df:0c:46:cf:63:2a:21:e5:e8:c7:32:f4:6d:cd:
         4b:66:ac:34:b8:d3:4f:28:c6:a9:2d:26:61:c7:d3:e9:16:c7:
         3f:85:0e:fe:81:65:a1:fe:b2:a5:99:65:2d:66:95:47:4f:ff:
         93:97:1c:64:9f:d3:bb:b6:6e:58:8b:a5:fe:89:01:76:8d:7e:
         c3:4e:46:4b:49:3b:09:90:d9:32:97:55:fd:a7:ad:c5:e9:a2:
         7f:50:0b:18:64:86:ed:96:90:e5:1f:11:d6:b1:13:a8:27:07:
         a8:f9:0c:c4:fe:cf:ab:e7:a5:da:b6:48:b3:40:39:25:ec:bd:
         d0:69:3d:80:d0:dc:f6:26:04:c6:21:4f:a5:9a:c1:b9:20:e4:
         af:73:92:fe:1c:82:4e:9c:9a:d1:53:80:b4:8d:65:f0:02:5b:
         c1:fb:26:dc:f6:c0:b6:6d:0c:4a:fe:5f:9c:55:59:8a:51:43:
         4c:b8:eb:0c:fc:b4:d9:81:2b:99:81:cf:32:77:a8:26:8c:ed:
         57:76:ec:14:b9:41:88:39:80:18:85:8a:26:11:03:e8:94:8d:
         f0:a0:ce:db
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCbIhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
NGFkZDg0MmMwNGNjMGUwNTZmYTUwOGQ3NzNjNjQ2ZDFiOWY0MGMwHhcNMjEwMzI0
MTQzNDQ2WhcNMjYwMzI0MTQzNDQ2WjAzMTEwLwYDVQQDEyhmZjMxMDZmMGZjOWQx
NmJmNTY4Y2RmZjM5NDcxZjYxYzYwNTY3ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1yVeBDvZQowMjaYma8nwViWXkoiSSm7G1JU9gXvh5v3S4dO2
jXWG5qzU8E86H1T2TpC9WZ4cr2eLhpG6a1gnE290dH3Zs0WfwxuDGpBS9fCk2ckp
6Qey8l9D7Evrskm+uPgAjKrg+8sESHXBmG3kFruLHPqVDKgy6XMTkCBcZ8GTF3fz
aVNPmI3PRZ4MEjRYDePJ+tlL3cjqQMaLZnD5czb+4di1+vYmb9i4Mp9bFRRRigi2
8DDuprQeKEFzofD4Nsd1mXsem/Z7mtsfVuuRu4EIl0aZMoh0H8dPHaeCFHDe1T+D
dzrF+1VoEBdiZ8cE0NBtz4gCojNoZsBWRgc0rwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFD1PMmoa5oYaPNC2vENtwxVz0ZRAMB8GA1UdIwQYMBaAFGQJmx7sn8kUyRvh
AihM2cZKzrPVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWY0YWRk
ODQyYzA0Y2MwZTA1NmZhNTA4ZDc3M2M2NDZkMWI5ZjQwYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDVlNDZlMTYtNDU3YS00OWRkLTlkNDMtYjA4MGY0
MjU1NWI0L2ZmMzEwNmYwZmM5ZDE2YmY1NjhjZGZmMzk0NzFmNjFjNjA1Njc4MWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNWU0NmUxNi00NTdhLTQ5ZGQtOWQ0My1iMDgw
ZjQyNTU1YjQvOWY0YWRkODQyYzA0Y2MwZTA1NmZhNTA4ZDc3M2M2NDZkMWI5ZjQw
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAQoAAjANBgkqhkiG9w0BAQsFAAOCAQEARyDrWH4G2/3u
b637ZNX3ilpFQDlKtJ26uglzqKmZyk2gwBaEDOcIn98MRs9jKiHl6Mcy9G3NS2as
NLjTTyjGqS0mYcfT6RbHP4UO/oFlof6ypZllLWaVR0//k5ccZJ/Tu7ZuWIul/okB
do1+w05GS0k7CZDZMpdV/aetxemif1ALGGSG7ZaQ5R8R1rETqCcHqPkMxP7Pq+el
2rZIs0A5Jey90Gk9gNDc9iYExiFPpZrBuSDkr3OS/hyCTpya0VOAtI1l8AJbwfsm
3PbAtm0MSv5fnFVZilFDTLjrDPy02YErmYHPMneoJoztV3bsFLlBiDmAGIWKJhED
6JSN8KDO2w==
-----END CERTIFICATE-----