Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/bd724dbad5b6cf17200f36d805e02a149cd64177.roa
File:                     bd724dbad5b6cf17200f36d805e02a149cd64177.roa (raw, json)
Hash identifier:          KusZWxIZqrIkQSMNTgWcky4OYHc3N6XRGfBaSiXwm/o=
Subject key identifier:   8B:A2:78:30:ED:5A:1D:11:45:99:AD:37:14:9F:5E:7E:FC:17:56:FA
Certificate issuer:       /CN=c377b15b5c36ee1de24ca21880a56c0880146624
Certificate serial:       026403
Authority key identifier: 6A:9A:76:12:C1:25:F9:29:22:85:D2:AE:51:3D:48:69:2D:D8:D9:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c377b15b5c36ee1de24ca21880a56c0880146624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/bd724dbad5b6cf17200f36d805e02a149cd64177.roa
Signing time:             Wed 24 Mar 2021 14:35:15 +0000
ROA not before:           Wed 24 Mar 2021 14:35:14 +0000
ROA not after:            Tue 24 Mar 2026 14:35:14 +0000
asID:                     14080
IP address blocks:        2801:15c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156675 (0x26403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c377b15b5c36ee1de24ca21880a56c0880146624
        Validity
            Not Before: Mar 24 14:35:14 2021 GMT
            Not After : Mar 24 14:35:14 2026 GMT
        Subject: CN=bd724dbad5b6cf17200f36d805e02a149cd64177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:6c:79:40:44:09:6e:dd:bf:2e:ee:15:ea:
                    92:6c:2f:bb:07:98:f6:bf:71:57:88:bf:51:91:0d:
                    57:89:a7:72:d6:53:8c:52:7c:eb:c8:05:fb:d4:91:
                    7b:12:23:da:06:82:80:1a:1c:45:7e:cb:cd:a9:cc:
                    73:ee:dc:5e:9f:5d:0f:f4:c6:b2:e0:ff:70:41:68:
                    61:b1:89:3d:1d:b2:23:b7:f3:90:7d:c9:02:f4:6d:
                    f4:0e:66:62:95:32:36:6b:93:2a:27:7e:c7:19:55:
                    d7:5c:09:cf:bb:0e:be:59:0d:26:42:76:b6:1c:f6:
                    3a:99:c2:4e:a9:58:6b:73:08:2c:2c:bb:e4:5e:c0:
                    a5:4d:20:26:06:a7:b1:ef:7f:84:42:ee:a2:8b:e3:
                    68:97:db:eb:18:a2:89:bb:a8:05:0b:06:e0:31:8f:
                    b5:61:e5:71:19:64:49:1d:ab:e4:36:d2:be:e7:8f:
                    a4:3e:59:74:64:af:a8:f3:76:0d:68:e2:cc:90:4e:
                    ea:c3:61:c1:7d:ba:85:16:dc:54:89:0d:0d:1a:14:
                    ab:98:3d:82:f8:0d:c0:41:23:f4:88:d4:84:89:e2:
                    22:a6:06:0c:5a:ec:09:59:6e:61:b0:21:4a:0b:e2:
                    21:cc:2c:02:9f:32:20:0f:79:80:bf:6a:bf:38:69:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A2:78:30:ED:5A:1D:11:45:99:AD:37:14:9F:5E:7E:FC:17:56:FA
            X509v3 Authority Key Identifier:
                keyid:6A:9A:76:12:C1:25:F9:29:22:85:D2:AE:51:3D:48:69:2D:D8:D9:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c377b15b5c36ee1de24ca21880a56c0880146624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/bd724dbad5b6cf17200f36d805e02a149cd64177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/c377b15b5c36ee1de24ca21880a56c0880146624.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:c4:f6:f5:af:2b:a9:e8:c9:c5:0b:49:76:df:9c:ca:76:1d:
         d2:4c:a4:54:d9:d4:32:62:c6:25:2c:08:42:75:3d:71:39:74:
         42:1c:aa:a7:1d:e8:39:68:a7:76:6d:02:92:db:39:0d:8a:e7:
         0d:28:5f:0f:c2:d7:74:d9:00:a6:d8:e4:90:a5:27:12:24:51:
         03:a4:db:c8:96:c9:62:19:b2:77:a2:ba:59:d4:4b:86:29:ab:
         55:d8:cb:c6:65:5c:7c:49:e6:6c:d6:b0:41:27:7e:9e:a9:79:
         64:65:33:d0:04:73:71:51:4d:eb:de:55:a6:ab:c2:a2:cc:28:
         25:26:8c:08:14:3b:52:01:74:df:44:78:0e:e5:2f:51:de:62:
         81:9f:c1:1e:bd:04:89:d3:cb:ca:b2:88:38:82:2b:07:b4:f0:
         b5:1a:a5:02:8e:0c:cb:2f:da:b0:ef:a3:fc:06:c1:1b:66:2f:
         23:5c:0f:a0:0c:f9:2a:4d:63:8d:ba:8f:35:e9:d4:a2:8b:47:
         71:93:f9:9a:5f:d3:58:22:4f:88:13:14:c2:c4:cf:58:e8:d5:
         97:82:6a:21:fd:7e:73:b3:db:34:e8:da:a5:aa:30:c9:64:e4:
         d1:6f:a8:a0:6b:e6:7d:a5:1e:33:3f:b3:3c:99:96:a2:44:9f:
         e4:dc:52:57
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAmQDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz
NzdiMTViNWMzNmVlMWRlMjRjYTIxODgwYTU2YzA4ODAxNDY2MjQwHhcNMjEwMzI0
MTQzNTE0WhcNMjYwMzI0MTQzNTE0WjAzMTEwLwYDVQQDEyhiZDcyNGRiYWQ1YjZj
ZjE3MjAwZjM2ZDgwNWUwMmExNDljZDY0MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjFhseUBECW7dvy7uFeqSbC+7B5j2v3FXiL9RkQ1Xiady1lOM
UnzryAX71JF7EiPaBoKAGhxFfsvNqcxz7txen10P9May4P9wQWhhsYk9HbIjt/OQ
fckC9G30DmZilTI2a5MqJ37HGVXXXAnPuw6+WQ0mQna2HPY6mcJOqVhrcwgsLLvk
XsClTSAmBqex73+EQu6ii+Nol9vrGKKJu6gFCwbgMY+1YeVxGWRJHavkNtK+54+k
Pll0ZK+o83YNaOLMkE7qw2HBfbqFFtxUiQ0NGhSrmD2C+A3AQSP0iNSEieIipgYM
WuwJWW5hsCFKC+IhzCwCnzIgD3mAv2q/OGnr/wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIuieDDtWh0RRZmtNxSfXn78F1b6MB8GA1UdIwQYMBaAFGqadhLBJfkpIoXS
rlE9SGkt2Nk1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzM3N2Ix
NWI1YzM2ZWUxZGUyNGNhMjE4ODBhNTZjMDg4MDE0NjYyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjc1NjNiYjYtMmJlYS00ZmRhLWEyZWItNjIxNTg4
NGZjZmFjL2JkNzI0ZGJhZDViNmNmMTcyMDBmMzZkODA1ZTAyYTE0OWNkNjQxNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNzU2M2JiNi0yYmVhLTRmZGEtYTJlYi02MjE1
ODg0ZmNmYWMvYzM3N2IxNWI1YzM2ZWUxZGUyNGNhMjE4ODBhNTZjMDg4MDE0NjYy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAVwAADANBgkqhkiG9w0BAQsFAAOCAQEAxMT29a8rqejJ
xQtJdt+cynYd0kykVNnUMmLGJSwIQnU9cTl0Qhyqpx3oOWindm0Ckts5DYrnDShf
D8LXdNkAptjkkKUnEiRRA6TbyJbJYhmyd6K6WdRLhimrVdjLxmVcfEnmbNawQSd+
nql5ZGUz0ARzcVFN695VpqvCoswoJSaMCBQ7UgF030R4DuUvUd5igZ/BHr0EidPL
yrKIOIIrB7TwtRqlAo4Myy/asO+j/AbBG2YvI1wPoAz5Kk1jjbqPNenUootHcZP5
ml/TWCJPiBMUwsTPWOjVl4JqIf1+c7PbNOjapaowyWTk0W+ooGvmfaUeMz+zPJmW
okSf5NxSVw==
-----END CERTIFICATE-----