Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/95ec15215053d432c7cf958d38340a76a1fbc9a6.roa
File:                     95ec15215053d432c7cf958d38340a76a1fbc9a6.roa (raw, json)
Hash identifier:          0/Vb92baB9elv5x8/dkPVctZAR5gICZnwpoWM2in51g=
Subject key identifier:   51:41:A1:DA:FF:32:41:D0:C1:2F:F8:56:AD:BB:EF:36:C1:D3:2A:E0
Certificate issuer:       /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial:       0EB702
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/95ec15215053d432c7cf958d38340a76a1fbc9a6.roa
Signing time:             Thu 23 Nov 2023 20:22:57 +0000
ROA not before:           Thu 23 Nov 2023 20:22:57 +0000
ROA not after:            Sun 23 Nov 2025 20:22:57 +0000
asID:                     262589
IP address blocks:        2801:1d:8801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964354 (0xeb702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
        Validity
            Not Before: Nov 23 20:22:57 2023 GMT
            Not After : Nov 23 20:22:57 2025 GMT
        Subject: CN=95ec15215053d432c7cf958d38340a76a1fbc9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:c6:89:50:60:25:3c:1e:15:74:47:df:f4:
                    49:e1:94:9d:59:1f:2e:45:f9:c2:bf:e2:78:ab:cf:
                    7e:62:d8:6f:b6:7f:50:8b:5d:c8:b3:c1:da:1a:c6:
                    b8:43:c1:1e:00:07:23:f8:0e:50:2a:91:d8:76:cd:
                    d2:c2:d4:20:22:f9:09:74:f1:ac:bb:8e:bc:0a:a0:
                    9a:20:59:49:9d:34:89:2c:22:96:da:72:00:65:65:
                    c1:68:d2:c9:7b:4b:36:c7:a7:47:02:47:d0:20:26:
                    9f:e8:8c:56:b7:96:77:f2:6e:d4:18:28:5f:7b:38:
                    7c:f3:c9:c8:e0:68:81:08:29:76:6f:c3:00:6e:49:
                    a3:1c:c9:48:d0:86:11:30:2d:2e:00:f0:ac:9b:64:
                    ec:73:50:28:b3:63:34:34:c5:e5:73:2a:24:77:b8:
                    f4:19:87:29:73:5b:67:b0:e2:bf:f3:d1:f9:88:9b:
                    35:6c:18:6b:11:85:c0:11:e0:e6:14:ab:08:d3:9c:
                    8a:ef:3b:5e:52:48:ae:b4:05:32:78:7c:93:2a:00:
                    31:d5:d2:bc:34:1e:17:e3:0a:bb:5a:67:77:65:85:
                    19:12:1c:fc:28:3f:d8:97:3b:e7:98:d0:9a:9e:61:
                    09:ae:f4:34:57:01:0e:82:26:8e:3b:8b:b1:bb:70:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:A1:DA:FF:32:41:D0:C1:2F:F8:56:AD:BB:EF:36:C1:D3:2A:E0
            X509v3 Authority Key Identifier:
                keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/95ec15215053d432c7cf958d38340a76a1fbc9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8801::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:4f:a8:42:13:2e:e0:68:40:53:90:d3:bd:15:89:80:8d:
         d4:eb:9d:dd:9a:7f:1b:71:af:57:b5:d7:d2:93:cc:0d:f4:a2:
         93:da:04:81:ec:f7:90:3e:30:0d:70:df:46:e2:82:e8:85:81:
         56:4d:fb:10:61:0f:61:98:2b:bd:7c:0f:75:83:56:c9:71:b1:
         45:d8:b1:73:44:87:eb:bf:00:3a:cf:78:64:71:9f:3a:26:78:
         4b:21:f3:32:a2:5b:fa:86:fe:fd:be:08:c1:4c:9e:43:6b:b5:
         3d:b2:81:b4:ec:b1:bc:fd:32:71:af:0d:28:79:3a:3b:a9:3a:
         ee:ed:6c:6c:6a:0b:ae:2d:47:98:9a:35:91:af:89:d3:30:a5:
         a4:4a:64:1a:7e:a9:0c:f5:53:2e:98:04:0c:47:82:a8:4b:84:
         56:5c:7e:3d:7d:ee:cf:42:3b:79:a7:28:76:11:61:50:0f:5b:
         70:7c:cb:d3:a6:67:58:47:68:b9:54:8f:cf:81:20:d8:9b:e5:
         79:b2:12:22:5e:b0:bc:8b:39:e4:cb:0e:57:5e:da:5c:f1:2a:
         65:ca:cc:b3:55:c5:5b:6c:fd:43:6f:9b:94:58:9e:cf:18:08:
         79:c0:15:11:7c:08:2d:45:c1:d4:52:d9:40:3e:34:da:7d:dd:
         c2:ae:6c:94
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDrcCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
NmNiMTE1M2Y5ZDI4MjNhMzQ1ZTA1MGFhMDhhNTk4NjljMTk3MmUwHhcNMjMxMTIz
MjAyMjU3WhcNMjUxMTIzMjAyMjU3WjAzMTEwLwYDVQQDEyg5NWVjMTUyMTUwNTNk
NDMyYzdjZjk1OGQzODM0MGE3NmExZmJjOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuZ/GiVBgJTweFXRH3/RJ4ZSdWR8uRfnCv+J4q89+Ythvtn9Q
i13Is8HaGsa4Q8EeAAcj+A5QKpHYds3SwtQgIvkJdPGsu468CqCaIFlJnTSJLCKW
2nIAZWXBaNLJe0s2x6dHAkfQICaf6IxWt5Z38m7UGChfezh888nI4GiBCCl2b8MA
bkmjHMlI0IYRMC0uAPCsm2Tsc1Aos2M0NMXlcyokd7j0GYcpc1tnsOK/89H5iJs1
bBhrEYXAEeDmFKsI05yK7zteUkiutAUyeHyTKgAx1dK8NB4X4wq7Wmd3ZYUZEhz8
KD/YlzvnmNCanmEJrvQ0VwEOgiaOO4uxu3DW5wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFFBodr/MkHQwS/4Vq277zbB0yrgMB8GA1UdIwQYMBaAFLGRTR7VaR8fkizu
X4rg9hjOHTcWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmM2Y2Ix
MTUzZjlkMjgyM2EzNDVlMDUwYWEwOGE1OTg2OWMxOTcyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjE0OWU2MzgtZGYzNi00NmMzLTgwNTUtNmIyNjMx
N2MyMzVlLzk1ZWMxNTIxNTA1M2Q0MzJjN2NmOTU4ZDM4MzQwYTc2YTFmYmM5YTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MTQ5ZTYzOC1kZjM2LTQ2YzMtODA1NS02YjI2
MzE3YzIzNWUvZmM2Y2IxMTUzZjlkMjgyM2EzNDVlMDUwYWEwOGE1OTg2OWMxOTcy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB2IATANBgkqhkiG9w0BAQsFAAOCAQEASzpPqEITLuBo
QFOQ070ViYCN1Oud3Zp/G3GvV7XX0pPMDfSik9oEgez3kD4wDXDfRuKC6IWBVk37
EGEPYZgrvXwPdYNWyXGxRdixc0SH678AOs94ZHGfOiZ4SyHzMqJb+ob+/b4IwUye
Q2u1PbKBtOyxvP0yca8NKHk6O6k67u1sbGoLri1HmJo1ka+J0zClpEpkGn6pDPVT
LpgEDEeCqEuEVlx+PX3uz0I7eacodhFhUA9bcHzL06ZnWEdouVSPz4Eg2JvlebIS
Il6wvIs55MsOV17aXPEqZcrMs1XFW2z9Q2+blFiezxgIecAVEXwILUXB1FLZQD40
2n3dwq5slA==
-----END CERTIFICATE-----