Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/fbf9df0bc612da9a1c6af419947cedfd1d87e224.roa
File:                     fbf9df0bc612da9a1c6af419947cedfd1d87e224.roa (raw, json)
Hash identifier:          h90WuaFEB3uagnkYda9Fa7CmIfjLOyXIqCfZizeKDOc=
Subject key identifier:   90:D4:6C:E5:05:FE:80:BB:73:7C:03:6D:BC:98:D6:73:29:5B:70:F4
Certificate issuer:       /CN=6b5d884a539dc194148028738ffe2577e3a345c2
Certificate serial:       11BF46
Authority key identifier: FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/fbf9df0bc612da9a1c6af419947cedfd1d87e224.roa
Signing time:             Tue 18 Apr 2023 08:30:03 +0000
ROA not before:           Mon 17 Apr 2023 08:30:03 +0000
ROA not after:            Wed 16 Apr 2025 08:30:03 +0000
asID:                     271901
IP address blocks:        2801:1de:4::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163078 (0x11bf46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5d884a539dc194148028738ffe2577e3a345c2
        Validity
            Not Before: Apr 17 08:30:03 2023 GMT
            Not After : Apr 16 08:30:03 2025 GMT
        Subject: CN=fbf9df0bc612da9a1c6af419947cedfd1d87e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:51:ae:68:46:5b:7c:5e:9c:83:19:3c:62:6a:
                    e5:a7:cf:b5:db:da:c0:1c:a9:25:d4:19:60:1f:6f:
                    72:bd:08:49:92:b8:19:68:9a:84:74:06:45:a7:b1:
                    62:76:14:07:38:b1:5d:79:74:5c:4d:11:98:16:f4:
                    d2:d6:c6:5c:d7:2f:52:78:e1:a7:99:30:58:70:97:
                    0c:50:af:e9:52:94:45:17:a7:6b:c5:9d:f4:bc:b3:
                    11:d5:21:20:f8:52:b2:7f:d6:71:93:5d:8a:7a:e6:
                    57:58:39:50:f8:d3:79:0c:43:c2:be:c9:9a:5e:67:
                    2a:a1:69:8e:e6:d7:a5:9c:2b:fc:6e:8b:81:69:d5:
                    de:1b:73:3b:6c:d2:7e:c5:2e:c4:e8:af:29:23:e1:
                    ad:18:48:e1:34:b2:d2:ef:b5:43:6f:98:46:3f:a7:
                    83:b2:50:86:dd:bb:c4:64:03:5e:b3:9c:ed:48:b3:
                    83:4f:df:32:71:00:7e:8a:bc:17:53:44:7e:a2:14:
                    6d:1c:6f:79:4b:e9:39:03:57:53:90:68:8a:22:89:
                    1a:f8:2d:1d:d9:81:7c:06:88:66:8a:44:66:3b:b9:
                    95:67:51:0c:c3:06:84:9c:3f:1f:08:13:b0:cc:20:
                    a8:ad:32:f3:57:40:61:a0:1d:7c:21:a0:c6:ba:5d:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:6C:E5:05:FE:80:BB:73:7C:03:6D:BC:98:D6:73:29:5B:70:F4
            X509v3 Authority Key Identifier:
                keyid:FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/fbf9df0bc612da9a1c6af419947cedfd1d87e224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/6b5d884a539dc194148028738ffe2577e3a345c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1de:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         63:23:a2:7d:b6:f5:b6:42:10:9e:f5:80:f3:20:64:45:fa:85:
         52:cb:9a:81:42:a4:07:16:4e:45:42:7f:67:62:2c:bd:58:7b:
         58:d5:05:af:8e:ab:c3:55:3b:7f:60:b6:3f:00:e5:57:6e:ef:
         fc:db:44:36:20:10:e6:3e:95:df:24:91:b2:65:84:95:18:5b:
         73:d1:ed:6c:18:ea:d7:15:9f:be:6a:c8:85:79:60:9a:a8:74:
         e5:d9:33:f5:cb:6e:c7:c7:d0:59:7f:73:0f:7a:2c:70:8c:26:
         74:d7:5c:5a:a5:d9:f9:01:de:34:ff:da:0e:a2:c9:6c:59:1f:
         a9:5a:40:e9:c7:aa:35:0f:2b:22:4a:aa:72:63:d3:f1:07:de:
         a7:88:31:67:f2:c5:bb:0e:c0:ba:ea:b1:4e:e9:6d:63:42:ab:
         98:32:c7:a5:d0:63:ec:25:99:75:56:ac:9e:ba:b5:53:af:78:
         7d:3f:9f:f6:06:e7:18:41:37:1c:f8:3b:9d:51:d3:91:80:c1:
         a6:75:23:23:b0:73:47:59:e6:a5:fc:0f:3a:89:92:3f:b8:3a:
         59:38:a0:63:ec:a2:75:a9:1e:df:48:6c:03:d6:21:42:f4:ca:
         cd:a7:a0:ab:55:30:8c:97:57:08:5d:ee:59:b4:ac:1f:6f:11:
         d9:be:4b:d3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDEb9GMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
NWQ4ODRhNTM5ZGMxOTQxNDgwMjg3MzhmZmUyNTc3ZTNhMzQ1YzIwHhcNMjMwNDE3
MDgzMDAzWhcNMjUwNDE2MDgzMDAzWjAzMTEwLwYDVQQDEyhmYmY5ZGYwYmM2MTJk
YTlhMWM2YWY0MTk5NDdjZWRmZDFkODdlMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgFGuaEZbfF6cgxk8Ymrlp8+129rAHKkl1BlgH29yvQhJkrgZ
aJqEdAZFp7FidhQHOLFdeXRcTRGYFvTS1sZc1y9SeOGnmTBYcJcMUK/pUpRFF6dr
xZ30vLMR1SEg+FKyf9Zxk12KeuZXWDlQ+NN5DEPCvsmaXmcqoWmO5telnCv8bouB
adXeG3M7bNJ+xS7E6K8pI+GtGEjhNLLS77VDb5hGP6eDslCG3bvEZANes5ztSLOD
T98ycQB+irwXU0R+ohRtHG95S+k5A1dTkGiKIoka+C0d2YF8BohmikRmO7mVZ1EM
wwaEnD8fCBOwzCCorTLzV0BhoB18IaDGul0hiwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJDUbOUF/oC7c3wDbbyY1nMpW3D0MB8GA1UdIwQYMBaAFP1+QMnL860IxeYv
gOisezK3836hMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmI1ZDg4
NGE1MzlkYzE5NDE0ODAyODczOGZmZTI1NzdlM2EzNDVjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2RkMTYxYTctNmRjYS00NDVjLWJkY2YtNTVmYjY0
ZTQ3NGYzL2ZiZjlkZjBiYzYxMmRhOWExYzZhZjQxOTk0N2NlZGZkMWQ4N2UyMjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZGQxNjFhNy02ZGNhLTQ0NWMtYmRjZi01NWZi
NjRlNDc0ZjMvNmI1ZDg4NGE1MzlkYzE5NDE0ODAyODczOGZmZTI1NzdlM2EzNDVj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHAigBAd4ABDANBgkqhkiG9w0BAQsFAAOCAQEAYyOifbb1tkIQ
nvWA8yBkRfqFUsuagUKkBxZORUJ/Z2IsvVh7WNUFr46rw1U7f2C2PwDlV27v/NtE
NiAQ5j6V3ySRsmWElRhbc9HtbBjq1xWfvmrIhXlgmqh05dkz9ctux8fQWX9zD3os
cIwmdNdcWqXZ+QHeNP/aDqLJbFkfqVpA6ceqNQ8rIkqqcmPT8Qfep4gxZ/LFuw7A
uuqxTultY0KrmDLHpdBj7CWZdVasnrq1U694fT+f9gbnGEE3HPg7nVHTkYDBpnUj
I7BzR1nmpfwPOomSP7g6WTigY+yidake30hsA9YhQvTKzaegq1UwjJdXCF3uWbSs
H28R2b5L0w==
-----END CERTIFICATE-----