Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/6560afd8b4212fb67bcd127682e453b33a512bbf.roa
File:                     6560afd8b4212fb67bcd127682e453b33a512bbf.roa (raw, json)
Hash identifier:          uZE4AJun3yIvsEXCBwE55Ff1vxU6B22w5moCNNxRp1A=
Subject key identifier:   FC:64:0B:F2:38:E1:FF:6B:D4:D5:6A:57:67:6D:C1:E3:09:D6:6F:17
Certificate issuer:       /CN=4452c063f42ef0ca8b3cf935d619efd87649c998
Certificate serial:       0AA2CC
Authority key identifier: 6C:C1:91:0F:E6:13:20:5F:A0:FC:C5:D5:97:3B:3F:B5:5B:C9:3B:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4452c063f42ef0ca8b3cf935d619efd87649c998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/6560afd8b4212fb67bcd127682e453b33a512bbf.roa
Signing time:             Wed 24 Mar 2021 14:36:44 +0000
ROA not before:           Wed 24 Mar 2021 14:36:43 +0000
ROA not after:            Tue 24 Mar 2026 14:36:43 +0000
asID:                     27951
IP address blocks:        2801:1fc::/48 maxlen: 48
                          2801:1fc:10::/48 maxlen: 48
                          2801:1fc:12::/48 maxlen: 48
                          2801:1fc:14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697036 (0xaa2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452c063f42ef0ca8b3cf935d619efd87649c998
        Validity
            Not Before: Mar 24 14:36:43 2021 GMT
            Not After : Mar 24 14:36:43 2026 GMT
        Subject: CN=6560afd8b4212fb67bcd127682e453b33a512bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:7a:91:1c:35:b4:1e:91:30:eb:3e:b9:48:
                    63:67:ea:81:bf:11:a6:b9:1d:da:91:cb:a7:79:6a:
                    9a:2e:b1:b1:b1:e3:17:c8:d2:6b:71:28:f4:4b:c9:
                    97:28:30:18:29:2c:44:86:83:f0:a4:95:17:ac:f7:
                    98:db:f9:d2:55:c6:a2:90:d1:b3:d6:2e:16:5a:68:
                    ac:ce:23:e5:52:a6:ca:2f:b7:7d:06:35:b2:cc:53:
                    75:ce:48:d3:fc:05:0d:3c:76:a2:47:c6:03:9d:53:
                    98:03:2c:d7:2c:40:1c:f8:4b:b3:dd:06:b3:97:3d:
                    31:bc:44:e5:fd:44:30:35:01:81:e3:38:0c:17:6a:
                    48:9a:80:af:20:8d:ad:4b:29:72:40:91:58:a2:d4:
                    e4:dd:49:9b:b0:4d:b1:16:21:2c:5d:51:73:11:6f:
                    d1:c4:7d:23:0e:db:bb:21:e9:c9:05:22:0e:9e:a0:
                    e5:56:1e:f6:c0:54:de:d8:4a:1d:28:7a:31:ec:3d:
                    ea:a0:ed:b0:9f:7a:fa:4d:89:c7:a2:ee:bd:aa:e4:
                    34:7d:3c:67:87:a8:84:4b:34:34:f2:4b:1c:db:d5:
                    fa:39:63:01:92:c4:8d:42:e5:bf:93:30:8a:21:97:
                    63:6f:eb:d5:74:74:47:f8:c5:de:c2:f9:35:fd:47:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:0B:F2:38:E1:FF:6B:D4:D5:6A:57:67:6D:C1:E3:09:D6:6F:17
            X509v3 Authority Key Identifier:
                keyid:6C:C1:91:0F:E6:13:20:5F:A0:FC:C5:D5:97:3B:3F:B5:5B:C9:3B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4452c063f42ef0ca8b3cf935d619efd87649c998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/6560afd8b4212fb67bcd127682e453b33a512bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1fc::/48
                  2801:1fc:10::/48
                  2801:1fc:12::/48
                  2801:1fc:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:16:38:ac:51:6b:62:51:24:07:d1:d9:d0:77:06:a0:22:
         5e:bc:b5:66:d8:b0:ee:b0:a3:a6:20:ea:40:1d:06:09:ee:e1:
         4f:5f:46:2f:59:3b:99:2f:f2:44:97:3b:83:2c:d8:c7:3a:d6:
         7e:fe:00:91:ff:f7:74:22:d6:3e:6a:5f:b8:af:42:b0:6a:48:
         8b:80:73:a5:95:16:d7:85:1a:99:91:bb:e6:59:b9:fe:d0:8d:
         7f:85:10:00:54:7e:68:5e:da:9d:06:78:32:1c:a7:e8:94:e6:
         94:d8:86:a8:ae:dd:6a:79:bf:fc:40:17:0f:c1:9d:50:f1:ab:
         20:aa:ca:42:92:9e:aa:92:ce:f6:5a:e5:39:74:5e:e2:0b:29:
         ca:1e:3a:2f:3b:0a:7f:de:b3:56:fb:23:93:4c:75:cc:fc:33:
         e0:ab:95:35:c3:91:1f:3a:8e:a1:5f:e2:06:70:d8:6a:84:04:
         1a:08:9e:cc:7d:39:f4:ba:ab:b4:5f:04:2f:d5:d2:03:c7:b7:
         5e:ac:d3:3a:74:e5:2f:a8:9c:2d:c9:57:93:f1:bb:55:b4:c3:
         68:b7:fd:ff:07:b1:a9:40:f5:f5:86:17:39:00:10:e4:ad:da:
         dc:d8:4f:76:7a:bf:ed:59:ea:c0:51:e3:b7:ca:6d:c7:4f:56:
         f9:d1:12:ba
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIDCqLMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0
NTJjMDYzZjQyZWYwY2E4YjNjZjkzNWQ2MTllZmQ4NzY0OWM5OTgwHhcNMjEwMzI0
MTQzNjQzWhcNMjYwMzI0MTQzNjQzWjAzMTEwLwYDVQQDEyg2NTYwYWZkOGI0MjEy
ZmI2N2JjZDEyNzY4MmU0NTNiMzNhNTEyYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmWV6kRw1tB6RMOs+uUhjZ+qBvxGmuR3akcuneWqaLrGxseMX
yNJrcSj0S8mXKDAYKSxEhoPwpJUXrPeY2/nSVcaikNGz1i4WWmisziPlUqbKL7d9
BjWyzFN1zkjT/AUNPHaiR8YDnVOYAyzXLEAc+Euz3Qazlz0xvETl/UQwNQGB4zgM
F2pImoCvII2tSylyQJFYotTk3UmbsE2xFiEsXVFzEW/RxH0jDtu7IenJBSIOnqDl
Vh72wFTe2EodKHox7D3qoO2wn3r6TYnHou69quQ0fTxnh6iESzQ08ksc29X6OWMB
ksSNQuW/kzCKIZdjb+vVdHRH+MXewvk1/Uf0yQIDAQABo4ICeTCCAnUwHQYDVR0O
BBYEFPxkC/I44f9r1NVqV2dtweMJ1m8XMB8GA1UdIwQYMBaAFGzBkQ/mEyBfoPzF
1Zc7P7VbyTt/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDQ1MmMw
NjNmNDJlZjBjYThiM2NmOTM1ZDYxOWVmZDg3NjQ5Yzk5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWRkNmMxOWYtMzFjZi00YTVlLThmNDctNmFjY2Ey
NDZmMzM5LzY1NjBhZmQ4YjQyMTJmYjY3YmNkMTI3NjgyZTQ1M2IzM2E1MTJiYmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZGQ2YzE5Zi0zMWNmLTRhNWUtOGY0Ny02YWNj
YTI0NmYzMzkvNDQ1MmMwNjNmNDJlZjBjYThiM2NmOTM1ZDYxOWVmZDg3NjQ5Yzk5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQu
MCwwKgQCAAIwJAMHACgBAfwAAAMHACgBAfwAEAMHACgBAfwAEgMHACgBAfwAFDAN
BgkqhkiG9w0BAQsFAAOCAQEAZf4WOKxRa2JRJAfR2dB3BqAiXry1Ztiw7rCjpiDq
QB0GCe7hT19GL1k7mS/yRJc7gyzYxzrWfv4Akf/3dCLWPmpfuK9CsGpIi4BzpZUW
14UamZG75lm5/tCNf4UQAFR+aF7anQZ4Mhyn6JTmlNiGqK7danm//EAXD8GdUPGr
IKrKQpKeqpLO9lrlOXRe4gspyh46LzsKf96zVvsjk0x1zPwz4KuVNcORHzqOoV/i
BnDYaoQEGgiezH059LqrtF8EL9XSA8e3XqzTOnTlL6icLclXk/G7VbTDaLf9/wex
qUD19YYXOQAQ5K3a3NhPdnq/7VnqwFHjt8ptx09W+dESug==
-----END CERTIFICATE-----