Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/91fde135e1642059b3ab6893f49768ede7f40a22.roa
File:                     91fde135e1642059b3ab6893f49768ede7f40a22.roa (raw, json)
Hash identifier:          zAIo59c7EnAPMLD/Tc8Fi517M7x2nbAJkuhqKeEXGfk=
Subject key identifier:   C5:73:E3:E2:F4:F3:3C:AC:9E:16:BF:E0:AC:9D:B0:E1:14:78:BE:31
Certificate issuer:       /CN=c421a24623084ac56fd5acff08e76a5dd734e47f
Certificate serial:       126FB6
Authority key identifier: 39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/91fde135e1642059b3ab6893f49768ede7f40a22.roa
Signing time:             Sun 03 Mar 2024 08:30:00 +0000
ROA not before:           Sun 03 Mar 2024 08:30:00 +0000
ROA not after:            Tue 03 Mar 2026 08:30:00 +0000
asID:                     272079
IP address blocks:        2801:1e:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208246 (0x126fb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c421a24623084ac56fd5acff08e76a5dd734e47f
        Validity
            Not Before: Mar  3 08:30:00 2024 GMT
            Not After : Mar  3 08:30:00 2026 GMT
        Subject: CN=91fde135e1642059b3ab6893f49768ede7f40a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:2c:19:54:96:75:0e:c0:2c:0a:5b:fc:9c:
                    7a:c7:81:05:43:f5:07:d8:bc:9c:3c:85:0c:4e:99:
                    ba:54:d2:1b:ba:59:d7:72:15:bb:7b:8e:04:c8:65:
                    d8:42:94:e3:11:07:2d:78:52:67:e2:31:be:21:f8:
                    d5:f7:08:33:d8:25:6d:29:00:9a:74:5a:34:f8:6e:
                    35:ff:45:85:63:94:e0:97:e7:74:d0:1b:1a:56:40:
                    1b:d0:91:6e:94:e1:85:e9:d9:8e:05:04:5d:0f:7e:
                    58:31:34:e3:bb:f9:c0:bb:82:9b:e0:73:61:d2:43:
                    ac:9f:2e:a5:68:82:ce:ef:55:58:7c:da:cb:b4:7a:
                    64:64:9b:5f:2f:e5:72:80:2a:7f:35:b2:4b:fa:65:
                    b3:9f:db:c2:39:27:dc:4e:7b:62:47:1d:31:c8:2c:
                    1e:ba:79:a0:79:2c:64:81:33:dc:c2:17:17:7f:eb:
                    cf:38:2a:cb:09:70:17:b6:bf:72:97:16:74:f2:23:
                    33:cb:9d:6b:a9:33:af:b4:11:19:06:77:75:5d:3b:
                    7e:bd:a1:85:50:39:6e:96:59:98:13:07:bc:0f:fc:
                    ed:62:7b:c7:1f:c8:71:31:26:ab:a5:2f:80:8f:d9:
                    ca:c6:a8:10:d5:c6:1b:01:c2:b5:91:79:1f:c8:13:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:73:E3:E2:F4:F3:3C:AC:9E:16:BF:E0:AC:9D:B0:E1:14:78:BE:31
            X509v3 Authority Key Identifier:
                keyid:39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/91fde135e1642059b3ab6893f49768ede7f40a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:bc:81:cc:fd:30:41:f2:2b:8a:33:a1:0f:c1:23:a9:38:
         b4:a5:2b:cc:0c:e6:32:1f:f4:5a:8c:98:e3:94:bf:12:1d:16:
         49:1f:fb:85:5c:27:9e:b5:94:ec:48:7f:ab:62:de:d4:c2:99:
         36:68:fa:07:b9:8f:8d:a8:af:35:6f:9d:af:e1:35:aa:71:1e:
         7c:d3:1e:6a:01:50:85:5c:d3:9e:f7:4f:12:83:71:36:d9:1d:
         e9:f5:1e:c3:f5:c5:7a:04:f3:cf:74:67:c4:f2:e8:2e:9a:07:
         38:49:8c:04:67:3d:bf:16:d9:aa:c3:9f:d5:37:b3:99:76:00:
         88:20:8a:e2:76:fe:2d:51:71:a4:c6:b1:64:23:bb:32:65:6e:
         44:9c:ec:64:8d:dc:08:47:3c:7f:fa:98:8a:f7:59:53:f0:83:
         94:81:f1:77:b5:8a:ae:06:df:24:89:db:c7:93:b3:b7:fa:2a:
         6b:5a:b1:2a:c7:35:0e:89:5d:f2:b5:09:fe:a0:16:e9:f5:37:
         9a:98:09:df:cb:bd:d8:c0:21:95:25:34:29:43:e2:af:5e:fa:
         7b:f8:cc:3f:31:a6:27:9c:ac:4f:a6:72:e0:c3:03:c9:82:67:
         da:ec:50:e0:db:7b:90:0b:35:0c:aa:c9:9d:0b:15:8b:fe:b7:
         5d:c1:f3:e1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDEm+2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjFhMjQ2MjMwODRhYzU2ZmQ1YWNmZjA4ZTc2YTVkZDczNGU0N2YwHhcNMjQwMzAz
MDgzMDAwWhcNMjYwMzAzMDgzMDAwWjAzMTEwLwYDVQQDEyg5MWZkZTEzNWUxNjQy
MDU5YjNhYjY4OTNmNDk3NjhlZGU3ZjQwYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp4QsGVSWdQ7ALApb/Jx6x4EFQ/UH2LycPIUMTpm6VNIbulnX
chW7e44EyGXYQpTjEQcteFJn4jG+IfjV9wgz2CVtKQCadFo0+G41/0WFY5Tgl+d0
0BsaVkAb0JFulOGF6dmOBQRdD35YMTTju/nAu4Kb4HNh0kOsny6laILO71VYfNrL
tHpkZJtfL+VygCp/NbJL+mWzn9vCOSfcTntiRx0xyCweunmgeSxkgTPcwhcXf+vP
OCrLCXAXtr9ylxZ08iMzy51rqTOvtBEZBnd1XTt+vaGFUDlullmYEwe8D/ztYnvH
H8hxMSarpS+Aj9nKxqgQ1cYbAcK1kXkfyBPakQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMVz4+L08zysnha/4KydsOEUeL4xMB8GA1UdIwQYMBaAFDmN0jGVtIbJg4we
97YD5zFzcqQwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyMWEy
NDYyMzA4NGFjNTZmZDVhY2ZmMDhlNzZhNWRkNzM0ZTQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzYwOTVkNWUtYjk1OS00NzM2LWE0ZTEtNzJiM2Rk
ZDdlNzYwLzkxZmRlMTM1ZTE2NDIwNTliM2FiNjg5M2Y0OTc2OGVkZTdmNDBhMjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNjA5NWQ1ZS1iOTU5LTQ3MzYtYTRlMS03MmIz
ZGRkN2U3NjAvYzQyMWEyNDYyMzA4NGFjNTZmZDVhY2ZmMDhlNzZhNWRkNzM0ZTQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB6YADANBgkqhkiG9w0BAQsFAAOCAQEAZey8gcz9MEHy
K4ozoQ/BI6k4tKUrzAzmMh/0WoyY45S/Eh0WSR/7hVwnnrWU7Eh/q2Le1MKZNmj6
B7mPjaivNW+dr+E1qnEefNMeagFQhVzTnvdPEoNxNtkd6fUew/XFegTzz3RnxPLo
LpoHOEmMBGc9vxbZqsOf1TezmXYAiCCK4nb+LVFxpMaxZCO7MmVuRJzsZI3cCEc8
f/qYivdZU/CDlIHxd7WKrgbfJInbx5Ozt/oqa1qxKsc1Dold8rUJ/qAW6fU3mpgJ
38u92MAhlSU0KUPir176e/jMPzGmJ5ysT6Zy4MMDyYJn2uxQ4Nt7kAs1DKrJnQsV
i/63XcHz4Q==
-----END CERTIFICATE-----