Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/4554c25ad01d61fb5a064e6d622de4bc8a944984.roa
File:                     4554c25ad01d61fb5a064e6d622de4bc8a944984.roa (raw, json)
Hash identifier:          uIhjELHy69/6V8EH2CuByVbQHySDEmnj1k1khdDCgtA=
Subject key identifier:   78:CF:C9:95:0A:F6:5D:62:7B:F5:ED:0C:72:15:02:8D:EC:27:C9:C2
Certificate issuer:       /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial:       1AD741
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/4554c25ad01d61fb5a064e6d622de4bc8a944984.roa
Signing time:             Thu 01 Sep 2022 18:48:38 +0000
ROA not before:           Thu 01 Sep 2022 18:46:39 +0000
ROA not after:            Sun 01 Sep 2024 18:46:39 +0000
asID:                     271911
IP address blocks:        2803:a820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759041 (0x1ad741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
        Validity
            Not Before: Sep  1 18:46:39 2022 GMT
            Not After : Sep  1 18:46:39 2024 GMT
        Subject: CN=4554c25ad01d61fb5a064e6d622de4bc8a944984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:59:dc:bb:58:26:96:33:ff:6f:af:ee:4e:
                    03:78:7d:f7:00:af:70:c9:20:d0:22:6b:2a:21:4d:
                    6e:d3:ab:ee:da:16:19:f4:c3:9a:a7:f8:b7:b3:07:
                    6d:9d:c0:45:47:d0:94:4d:90:12:68:e3:08:81:70:
                    8d:25:7d:44:2f:fa:75:82:36:13:5b:49:42:3d:a4:
                    e2:cb:92:5c:eb:59:f2:89:76:bf:3d:46:5a:e6:4b:
                    39:97:0d:8d:f8:b9:83:d2:76:b9:eb:de:1f:d2:2b:
                    b7:d7:b0:47:15:f2:c6:1a:72:93:49:c2:6c:f7:b2:
                    54:5e:02:3b:66:50:05:35:d2:c2:e6:f8:06:5d:ff:
                    ea:b8:b1:60:55:96:27:8c:22:16:8f:4b:65:af:e5:
                    cf:4c:e8:3d:a1:99:61:5c:6b:b9:22:78:eb:5d:cb:
                    2e:6b:77:83:a6:10:f0:80:c6:5b:ae:90:52:a6:0f:
                    44:cf:7e:d3:2b:af:c2:cd:9c:fc:d7:1b:56:8b:f8:
                    7a:23:45:3a:b8:b1:10:c6:02:f7:6a:ff:6d:69:6d:
                    c5:bc:d4:5f:56:a8:38:da:f8:05:4a:82:b1:6f:a4:
                    b1:46:31:84:28:20:85:f8:8e:ca:ec:fd:15:56:e2:
                    80:82:e1:03:31:05:c7:41:c7:e2:8f:63:da:50:ae:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:C9:95:0A:F6:5D:62:7B:F5:ED:0C:72:15:02:8D:EC:27:C9:C2
            X509v3 Authority Key Identifier:
                keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/4554c25ad01d61fb5a064e6d622de4bc8a944984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:01:4e:7f:81:6d:70:fe:01:6b:7e:97:b1:ed:c8:8f:cb:
         1c:48:53:13:ad:cc:82:80:35:5c:d3:56:0a:86:04:e8:ba:78:
         00:7b:7c:34:ae:c1:db:02:f2:d2:75:95:a4:fa:36:0e:f4:5a:
         8e:bd:f9:a0:a0:18:78:ea:e0:df:51:12:d7:9b:51:d3:05:9d:
         5a:19:dd:df:34:24:f0:b6:3c:df:1c:36:c4:3d:6c:43:8d:d3:
         ab:e2:ef:6c:da:46:64:60:54:cf:3e:41:dd:e7:30:f6:e5:6f:
         1d:e0:00:d8:4f:70:6c:3d:33:a9:46:ae:48:ac:e8:2c:59:06:
         40:cd:f8:5a:61:70:b3:75:ba:80:3c:8a:08:c1:de:a5:0c:59:
         84:5c:26:93:d1:80:0a:0c:0f:4e:63:69:18:f3:1c:a1:27:7d:
         0a:9b:32:dd:79:81:84:2e:a9:de:df:ab:56:e7:e3:c0:f0:e5:
         b5:67:e3:e8:4f:ad:83:d6:d3:ac:54:66:9a:50:61:ad:c7:cb:
         47:c4:9c:2e:90:64:a8:79:e0:5c:eb:53:77:20:b5:27:01:42:
         19:c2:53:fc:0c:11:c3:91:35:30:02:8e:24:2d:c5:dc:14:96:
         81:9a:94:0a:12:f3:ef:51:90:e9:e2:10:3b:12:91:ff:70:dc:
         b8:75:62:08
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGtdBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
MGEwNzMwODZiMzkzODRlOTA5Nzg2ZDBhMTk0NDE4YWNkMGJkNDkwHhcNMjIwOTAx
MTg0NjM5WhcNMjQwOTAxMTg0NjM5WjAzMTEwLwYDVQQDEyg0NTU0YzI1YWQwMWQ2
MWZiNWEwNjRlNmQ2MjJkZTRiYzhhOTQ0OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAusdZ3LtYJpYz/2+v7k4DeH33AK9wySDQImsqIU1u06vu2hYZ
9MOap/i3swdtncBFR9CUTZASaOMIgXCNJX1EL/p1gjYTW0lCPaTiy5Jc61nyiXa/
PUZa5ks5lw2N+LmD0na5694f0iu317BHFfLGGnKTScJs97JUXgI7ZlAFNdLC5vgG
Xf/quLFgVZYnjCIWj0tlr+XPTOg9oZlhXGu5InjrXcsua3eDphDwgMZbrpBSpg9E
z37TK6/CzZz81xtWi/h6I0U6uLEQxgL3av9taW3FvNRfVqg42vgFSoKxb6SxRjGE
KCCF+I7K7P0VVuKAguEDMQXHQcfij2PaUK7tHQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHjPyZUK9l1ie/XtDHIVAo3sJ8nCMB8GA1UdIwQYMBaAFNbaxmLPwxq/xneG
fKaBiz9NhvCdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjEwYTA3
MzA4NmIzOTM4NGU5MDk3ODZkMGExOTQ0MThhY2QwYmQ0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWM0OTRhY2QtNjdjMS00NmMwLWI2YzUtY2FhYmNi
Y2UxZDk0LzQ1NTRjMjVhZDAxZDYxZmI1YTA2NGU2ZDYyMmRlNGJjOGE5NDQ5ODQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYzQ5NGFjZC02N2MxLTQ2YzAtYjZjNS1jYWFi
Y2JjZTFkOTQvNjEwYTA3MzA4NmIzOTM4NGU5MDk3ODZkMGExOTQ0MThhY2QwYmQ0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDqCAwDQYJKoZIhvcNAQELBQADggEBAFZ+AU5/gW1w/gFr
fpex7ciPyxxIUxOtzIKANVzTVgqGBOi6eAB7fDSuwdsC8tJ1laT6Ng70Wo69+aCg
GHjq4N9REtebUdMFnVoZ3d80JPC2PN8cNsQ9bEON06vi72zaRmRgVM8+Qd3nMPbl
bx3gANhPcGw9M6lGrkis6CxZBkDN+FphcLN1uoA8igjB3qUMWYRcJpPRgAoMD05j
aRjzHKEnfQqbMt15gYQuqd7fq1bn48Dw5bVn4+hPrYPW06xUZppQYa3Hy0fEnC6Q
ZKh54FzrU3cgtScBQhnCU/wMEcORNTACjiQtxdwUloGalAoS8+9RkOniEDsSkf9w
3Lh1Ygg=
-----END CERTIFICATE-----