Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fef7cfc-9a82-47cd-a85e-57ce07937c0b/5b96a6c8da364c2ce6fb75d78cc94fded3a7639a.roa
File:                     5b96a6c8da364c2ce6fb75d78cc94fded3a7639a.roa (raw, json)
Hash identifier:          xLgafM3x27LDYl9U1eAjsRZv/+0lU9GEsUwgIgfddGU=
Subject key identifier:   4F:0F:88:7A:2A:4E:E1:BD:52:4B:DF:87:E8:92:C6:13:89:63:4F:15
Certificate issuer:       /CN=5757108c6646b631d7d079d10998188c97df5bc7
Certificate serial:       0AC508
Authority key identifier: E3:CE:A1:A4:85:3D:F5:A7:32:4B:E3:4B:3B:67:51:4A:5B:C7:2C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5757108c6646b631d7d079d10998188c97df5bc7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fef7cfc-9a82-47cd-a85e-57ce07937c0b/5b96a6c8da364c2ce6fb75d78cc94fded3a7639a.roa
Signing time:             Wed 24 Mar 2021 14:35:09 +0000
ROA not before:           Wed 24 Mar 2021 14:35:09 +0000
ROA not after:            Tue 24 Mar 2026 14:35:09 +0000
asID:                     262589
IP address blocks:        2801:1a:c800::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705800 (0xac508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757108c6646b631d7d079d10998188c97df5bc7
        Validity
            Not Before: Mar 24 14:35:09 2021 GMT
            Not After : Mar 24 14:35:09 2026 GMT
        Subject: CN=5b96a6c8da364c2ce6fb75d78cc94fded3a7639a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:e9:7b:80:f5:4a:14:3d:eb:6a:f8:d1:5c:
                    91:64:3e:60:fe:d4:5b:38:32:bc:8e:8d:19:fa:74:
                    c7:84:13:0c:d4:5d:9c:e7:ff:e8:07:55:33:ea:a6:
                    30:e3:ba:33:16:ba:32:14:be:3b:d9:c1:42:1d:43:
                    e2:4a:4b:f2:d8:66:fc:0f:93:86:ad:94:42:f6:c4:
                    e3:91:60:68:01:2d:3e:b3:64:a8:15:0c:8d:e5:3e:
                    62:64:12:d4:3d:37:ba:d0:f5:ef:d9:74:36:8a:2c:
                    7a:8b:e2:b0:e5:06:1f:11:19:b3:0d:a8:5f:15:30:
                    ac:e0:80:e2:27:d9:66:1f:0d:3c:e4:28:73:c2:7f:
                    ed:cc:70:7e:97:8d:09:e7:ea:ba:4f:85:fe:f7:97:
                    4f:e0:cc:df:2c:85:30:10:6a:ec:6e:ed:38:3a:3c:
                    52:6a:27:85:af:fc:91:f4:93:c1:0a:d5:38:c5:7e:
                    13:4f:88:b5:94:38:a8:68:75:66:2d:be:04:48:69:
                    b9:06:cf:b2:3a:94:26:7b:df:0d:a9:e5:73:6a:1b:
                    c1:09:59:40:db:00:3e:96:c2:79:6f:d1:25:8a:2e:
                    07:34:92:b1:44:95:58:5f:33:be:0d:53:01:5f:87:
                    0b:78:79:21:40:3c:74:20:36:9a:89:47:5f:bf:ff:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0F:88:7A:2A:4E:E1:BD:52:4B:DF:87:E8:92:C6:13:89:63:4F:15
            X509v3 Authority Key Identifier:
                keyid:E3:CE:A1:A4:85:3D:F5:A7:32:4B:E3:4B:3B:67:51:4A:5B:C7:2C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5757108c6646b631d7d079d10998188c97df5bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fef7cfc-9a82-47cd-a85e-57ce07937c0b/5b96a6c8da364c2ce6fb75d78cc94fded3a7639a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fef7cfc-9a82-47cd-a85e-57ce07937c0b/5757108c6646b631d7d079d10998188c97df5bc7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:66:6a:52:c8:00:60:b3:b7:36:1c:ea:60:fc:ff:83:e8:b5:
         09:d1:51:8f:31:96:41:f7:ac:65:c6:76:7a:38:3a:f8:0d:1a:
         c5:28:eb:58:d4:f4:a2:bc:ef:a8:04:a8:c2:d6:0b:b4:db:ae:
         fd:55:cf:48:ed:68:ff:4c:4c:72:79:84:51:83:93:11:53:c8:
         d3:00:50:87:0c:05:42:a0:c3:1f:97:eb:fa:08:0b:2d:dd:99:
         73:62:67:72:27:ca:7e:df:ab:f7:d3:6a:d6:52:5a:24:75:bb:
         d6:15:1b:23:3c:22:48:b6:72:10:4d:12:eb:92:e6:47:be:2d:
         8e:4e:58:1e:c6:7d:bb:92:9c:98:8d:ec:23:65:6c:98:d5:bd:
         97:ed:b6:f9:34:69:e3:6d:97:2c:1b:15:97:00:4e:d3:ef:ed:
         88:5a:bd:aa:5e:a4:e2:df:28:35:d1:7e:91:af:e4:08:71:0f:
         68:34:cf:d1:19:88:8c:56:ee:ad:42:49:d5:7e:a2:0a:89:66:
         d3:6b:e2:9c:2e:98:03:6b:fe:29:a3:ee:b6:21:96:c9:2f:d5:
         f6:47:ee:b8:70:a0:ef:73:e9:9e:14:25:1a:a1:27:04:4d:62:
         38:c2:fb:c4:d0:e4:58:d9:ad:34:1b:a2:c1:f8:a6:67:06:68:
         0e:b5:dd:f4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCsUIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU3
NTcxMDhjNjY0NmI2MzFkN2QwNzlkMTA5OTgxODhjOTdkZjViYzcwHhcNMjEwMzI0
MTQzNTA5WhcNMjYwMzI0MTQzNTA5WjAzMTEwLwYDVQQDEyg1Yjk2YTZjOGRhMzY0
YzJjZTZmYjc1ZDc4Y2M5NGZkZWQzYTc2MzlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmYbpe4D1ShQ962r40VyRZD5g/tRbODK8jo0Z+nTHhBMM1F2c
5//oB1Uz6qYw47ozFroyFL472cFCHUPiSkvy2Gb8D5OGrZRC9sTjkWBoAS0+s2So
FQyN5T5iZBLUPTe60PXv2XQ2iix6i+Kw5QYfERmzDahfFTCs4IDiJ9lmHw085Chz
wn/tzHB+l40J5+q6T4X+95dP4MzfLIUwEGrsbu04OjxSaieFr/yR9JPBCtU4xX4T
T4i1lDioaHVmLb4ESGm5Bs+yOpQme98NqeVzahvBCVlA2wA+lsJ5b9Elii4HNJKx
RJVYXzO+DVMBX4cLeHkhQDx0IDaaiUdfv/9GpQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFE8PiHoqTuG9Ukvfh+iSxhOJY08VMB8GA1UdIwQYMBaAFOPOoaSFPfWnMkvj
SztnUUpbxyxYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTc1NzEw
OGM2NjQ2YjYzMWQ3ZDA3OWQxMDk5ODE4OGM5N2RmNWJjNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2ZlZjdjZmMtOWE4Mi00N2NkLWE4NWUtNTdjZTA3
OTM3YzBiLzViOTZhNmM4ZGEzNjRjMmNlNmZiNzVkNzhjYzk0ZmRlZDNhNzYzOWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZmVmN2NmYy05YTgyLTQ3Y2QtYTg1ZS01N2Nl
MDc5MzdjMGIvNTc1NzEwOGM2NjQ2YjYzMWQ3ZDA3OWQxMDk5ODE4OGM5N2RmNWJj
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABrIADANBgkqhkiG9w0BAQsFAAOCAQEAKGZqUsgAYLO3
NhzqYPz/g+i1CdFRjzGWQfesZcZ2ejg6+A0axSjrWNT0orzvqASowtYLtNuu/VXP
SO1o/0xMcnmEUYOTEVPI0wBQhwwFQqDDH5fr+ggLLd2Zc2JncifKft+r99Nq1lJa
JHW71hUbIzwiSLZyEE0S65LmR74tjk5YHsZ9u5KcmI3sI2VsmNW9l+22+TRp422X
LBsVlwBO0+/tiFq9ql6k4t8oNdF+ka/kCHEPaDTP0RmIjFburUJJ1X6iColm02vi
nC6YA2v+KaPutiGWyS/V9kfuuHCg73PpnhQlGqEnBE1iOML7xNDkWNmtNBuiwfim
ZwZoDrXd9A==
-----END CERTIFICATE-----