Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cccc3dc-ee3f-4b23-81db-bf3b87341ef5/5f276e64e46f2b97b18a66d6986fc9aece6fcef7.roa
File:                     5f276e64e46f2b97b18a66d6986fc9aece6fcef7.roa (raw, json)
Hash identifier:          Pv4K/Xeu6FIcnJ+JeQjLT6lYAjecOxkGKQVQxR2d+/4=
Subject key identifier:   D6:2B:23:34:DC:45:47:D5:62:16:40:68:15:E4:7E:34:5B:1E:AF:4F
Certificate issuer:       /CN=7d68a3724187b6d8701c00863ffee4273d3adcb9
Certificate serial:       059BA0
Authority key identifier: 95:67:E2:19:56:62:1A:C4:49:55:AD:27:32:06:F0:DD:20:7E:0F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d68a3724187b6d8701c00863ffee4273d3adcb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cccc3dc-ee3f-4b23-81db-bf3b87341ef5/5f276e64e46f2b97b18a66d6986fc9aece6fcef7.roa
Signing time:             Fri 19 May 2023 01:09:21 +0000
ROA not before:           Thu 18 May 2023 01:09:21 +0000
ROA not after:            Mon 19 May 2025 01:09:21 +0000
asID:                     19429
IP address blocks:        2801:15:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367520 (0x59ba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d68a3724187b6d8701c00863ffee4273d3adcb9
        Validity
            Not Before: May 18 01:09:21 2023 GMT
            Not After : May 19 01:09:21 2025 GMT
        Subject: CN=5f276e64e46f2b97b18a66d6986fc9aece6fcef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:0d:35:01:e4:6e:b5:3f:7f:6f:e0:81:88:
                    ff:f8:c6:ba:48:a2:21:41:2a:0b:96:a9:f8:ea:fd:
                    32:c1:d7:bb:9d:79:7c:60:24:17:43:7a:25:40:85:
                    67:dd:1b:62:da:e9:4c:89:24:84:1f:ad:56:ad:3d:
                    c1:34:7e:fc:49:5e:8a:ef:3b:17:9d:9c:ce:89:26:
                    76:f1:8d:b5:d5:84:b9:d8:fd:8d:d1:39:77:7a:20:
                    32:88:83:4e:ee:31:66:08:31:1a:f3:0b:9e:f1:e7:
                    ca:94:56:66:87:8c:f0:ae:77:99:6e:d1:0a:d8:17:
                    8f:56:b4:a7:60:23:41:21:67:3c:64:a6:ee:a0:3a:
                    a8:2e:da:fc:b4:e8:86:ab:15:91:12:0a:33:81:d5:
                    22:af:35:b7:be:e3:9c:57:8c:3b:67:d4:53:8c:ac:
                    6e:01:09:6a:a5:75:e3:67:da:53:27:f2:5e:eb:5c:
                    2b:67:6b:b7:56:d7:b7:1a:1d:b8:b0:eb:41:d9:91:
                    21:f3:fe:84:97:ad:96:1c:c4:a5:c6:4b:59:d5:09:
                    13:e2:87:76:d9:12:b4:b2:d9:70:93:62:53:92:c0:
                    e5:1e:e7:19:aa:98:d9:c3:ec:1e:ed:ad:3e:f2:a0:
                    81:0f:43:20:9d:49:3e:b0:24:b2:f8:ef:da:40:90:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2B:23:34:DC:45:47:D5:62:16:40:68:15:E4:7E:34:5B:1E:AF:4F
            X509v3 Authority Key Identifier:
                keyid:95:67:E2:19:56:62:1A:C4:49:55:AD:27:32:06:F0:DD:20:7E:0F:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d68a3724187b6d8701c00863ffee4273d3adcb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cccc3dc-ee3f-4b23-81db-bf3b87341ef5/5f276e64e46f2b97b18a66d6986fc9aece6fcef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cccc3dc-ee3f-4b23-81db-bf3b87341ef5/7d68a3724187b6d8701c00863ffee4273d3adcb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:26:43:40:14:2e:96:5f:d7:98:74:02:f2:84:5c:ee:7a:d5:
         ed:5e:91:e9:dc:51:11:3a:b2:42:a9:4d:b6:19:62:3c:87:bb:
         64:fc:31:5b:06:23:f7:d6:77:ae:fe:3d:4a:d3:9e:1e:84:54:
         a3:ef:91:f3:98:0f:37:0f:80:0f:ab:3c:68:79:9c:02:34:ec:
         59:08:7f:6c:d5:12:c9:b3:d1:41:50:84:77:1f:e5:80:a5:20:
         72:82:50:53:cd:cc:58:1f:53:59:51:fb:47:90:62:80:cb:c0:
         5a:f6:88:8f:81:cd:ac:ba:0a:dd:66:db:92:9a:e2:d9:02:ad:
         db:64:8c:84:e6:cf:3b:ac:af:54:ad:ea:e7:62:f6:1c:62:40:
         52:ee:e4:90:46:ae:d3:d9:1a:92:5b:bd:ae:cf:aa:c8:7d:6d:
         69:02:08:c6:70:84:3c:46:4b:4d:a3:b0:97:53:b0:a1:28:bf:
         29:7a:ce:fa:06:46:2f:46:f0:a2:61:1f:db:0f:35:af:68:5d:
         4e:34:03:6d:51:72:79:b3:f1:02:2d:a1:b0:89:3c:83:54:f4:
         bb:16:70:81:8c:b5:0e:8d:d2:3e:ca:fb:c4:e7:0d:fc:7d:49:
         ce:39:66:ea:94:81:16:8f:fa:6e:43:ac:fd:7d:27:8a:cb:f1:
         f8:7a:e9:49
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBZugMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk
NjhhMzcyNDE4N2I2ZDg3MDFjMDA4NjNmZmVlNDI3M2QzYWRjYjkwHhcNMjMwNTE4
MDEwOTIxWhcNMjUwNTE5MDEwOTIxWjAzMTEwLwYDVQQDEyg1ZjI3NmU2NGU0NmYy
Yjk3YjE4YTY2ZDY5ODZmYzlhZWNlNmZjZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnUYNNQHkbrU/f2/ggYj/+Ma6SKIhQSoLlqn46v0ywde7nXl8
YCQXQ3olQIVn3Rti2ulMiSSEH61WrT3BNH78SV6K7zsXnZzOiSZ28Y211YS52P2N
0Tl3eiAyiINO7jFmCDEa8wue8efKlFZmh4zwrneZbtEK2BePVrSnYCNBIWc8ZKbu
oDqoLtr8tOiGqxWREgozgdUirzW3vuOcV4w7Z9RTjKxuAQlqpXXjZ9pTJ/Je61wr
Z2u3Vte3Gh24sOtB2ZEh8/6El62WHMSlxktZ1QkT4od22RK0stlwk2JTksDlHucZ
qpjZw+we7a0+8qCBD0MgnUk+sCSy+O/aQJBiUQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNYrIzTcRUfVYhZAaBXkfjRbHq9PMB8GA1UdIwQYMBaAFJVn4hlWYhrESVWt
JzIG8N0gfg89MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2Q2OGEz
NzI0MTg3YjZkODcwMWMwMDg2M2ZmZWU0MjczZDNhZGNiOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjY2MzZGMtZWUzZi00YjIzLTgxZGItYmYzYjg3
MzQxZWY1LzVmMjc2ZTY0ZTQ2ZjJiOTdiMThhNjZkNjk4NmZjOWFlY2U2ZmNlZjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2NjYzNkYy1lZTNmLTRiMjMtODFkYi1iZjNi
ODczNDFlZjUvN2Q2OGEzNzI0MTg3YjZkODcwMWMwMDg2M2ZmZWU0MjczZDNhZGNi
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABVYADANBgkqhkiG9w0BAQsFAAOCAQEAMyZDQBQull/X
mHQC8oRc7nrV7V6R6dxRETqyQqlNthliPIe7ZPwxWwYj99Z3rv49StOeHoRUo++R
85gPNw+AD6s8aHmcAjTsWQh/bNUSybPRQVCEdx/lgKUgcoJQU83MWB9TWVH7R5Bi
gMvAWvaIj4HNrLoK3Wbbkpri2QKt22SMhObPO6yvVK3q52L2HGJAUu7kkEau09ka
klu9rs+qyH1taQIIxnCEPEZLTaOwl1OwoSi/KXrO+gZGL0bwomEf2w81r2hdTjQD
bVFyebPxAi2hsIk8g1T0uxZwgYy1Do3SPsr7xOcN/H1Jzjlm6pSBFo/6bkOs/X0n
isvx+HrpSQ==
-----END CERTIFICATE-----