Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61c814e8-6cbd-4479-962b-622402a1e982/46f7909b291afdd7786c6582e3e97e899c043a60.roa
File:                     46f7909b291afdd7786c6582e3e97e899c043a60.roa (raw, json)
Hash identifier:          bA4BORTV1AVvaNQzDp20k6tUy9uYOPr/PF+JhPxCYcs=
Subject key identifier:   5B:8D:B8:7A:FF:1B:00:85:D7:3A:5A:4C:90:23:AE:78:BC:83:43:DB
Certificate issuer:       /CN=b87d2f3bd27dab4f77e11431d6ddac944c06fdc9
Certificate serial:       044A41
Authority key identifier: BC:84:D0:E0:00:DB:7D:F1:89:62:07:6E:E7:94:DE:C2:A9:65:46:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b87d2f3bd27dab4f77e11431d6ddac944c06fdc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61c814e8-6cbd-4479-962b-622402a1e982/46f7909b291afdd7786c6582e3e97e899c043a60.roa
Signing time:             Wed 24 Mar 2021 14:36:22 +0000
ROA not before:           Wed 24 Mar 2021 14:36:22 +0000
ROA not after:            Tue 24 Mar 2026 14:36:22 +0000
asID:                     271802
IP address blocks:        2801:19:a800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281153 (0x44a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87d2f3bd27dab4f77e11431d6ddac944c06fdc9
        Validity
            Not Before: Mar 24 14:36:22 2021 GMT
            Not After : Mar 24 14:36:22 2026 GMT
        Subject: CN=46f7909b291afdd7786c6582e3e97e899c043a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:31:22:28:3c:18:fe:57:a6:5d:18:f2:99:
                    63:db:f2:e6:d8:5d:db:cc:a6:e4:96:d4:9c:57:79:
                    d5:84:c4:f9:b9:1f:32:b2:ce:fd:46:2b:3d:2e:60:
                    a9:71:53:b1:7d:b8:e2:36:fb:75:ab:21:4a:91:b1:
                    78:c3:da:cd:13:c8:13:6b:42:06:ce:35:71:8c:8c:
                    82:c0:5c:31:e4:71:74:ad:c5:76:4a:dd:b7:78:bd:
                    d2:9a:1b:ce:37:18:c1:77:35:cb:3e:72:44:5e:4f:
                    46:04:a6:c0:62:ce:36:b8:5b:91:40:d6:1e:dc:43:
                    80:ec:62:57:0c:ac:bf:be:b1:7f:b7:0e:59:c2:e1:
                    2b:39:98:f5:e3:ea:80:0e:d7:f5:69:76:4c:2e:e3:
                    cd:22:76:48:79:93:62:7b:23:6e:16:79:98:f6:d6:
                    53:2f:fa:8d:c3:b1:e2:d9:8b:dd:e8:a5:4e:8d:2e:
                    de:c1:ab:46:e5:a6:d9:f3:cc:c7:37:78:b0:51:20:
                    d6:c5:ca:17:38:3b:f1:ad:3f:37:33:a3:37:ad:5b:
                    10:61:6c:35:01:ff:f3:fe:44:1d:7f:b6:b7:87:34:
                    95:e8:5d:6e:87:cc:40:a3:2f:78:ac:a1:f0:d1:91:
                    6b:4f:dc:e8:11:85:83:6a:9e:00:b7:5b:c3:70:91:
                    12:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:B8:7A:FF:1B:00:85:D7:3A:5A:4C:90:23:AE:78:BC:83:43:DB
            X509v3 Authority Key Identifier:
                keyid:BC:84:D0:E0:00:DB:7D:F1:89:62:07:6E:E7:94:DE:C2:A9:65:46:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b87d2f3bd27dab4f77e11431d6ddac944c06fdc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61c814e8-6cbd-4479-962b-622402a1e982/46f7909b291afdd7786c6582e3e97e899c043a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61c814e8-6cbd-4479-962b-622402a1e982/b87d2f3bd27dab4f77e11431d6ddac944c06fdc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:cd:74:0f:ae:90:f8:be:e5:49:6f:b5:a3:82:ec:a9:19:
         36:2b:fd:85:c3:2e:75:a9:05:2d:f8:b6:d5:3e:8b:97:ee:94:
         09:31:c9:c4:04:4e:cd:c1:13:d4:e7:3b:02:75:b3:0e:30:89:
         98:21:e1:a4:b0:16:cf:2e:08:ed:ef:32:e0:93:36:9a:67:92:
         83:ed:57:ba:58:57:d2:26:c9:7d:b7:8d:4c:ed:2b:39:21:2a:
         aa:7a:93:91:0e:ad:0e:2f:f8:fa:af:02:2e:40:db:b0:52:fe:
         0a:4a:ee:20:3e:ce:05:cd:2f:f3:e8:7b:0d:74:67:81:9e:1a:
         d3:54:45:dd:71:71:21:54:c6:a6:74:41:6e:af:42:3b:d7:c9:
         1b:f1:3d:16:5f:9e:0e:92:4d:67:2c:b6:a9:4d:ea:20:81:2e:
         82:69:22:c7:94:21:93:cd:31:f7:9c:bb:f7:eb:b5:2d:0d:d1:
         ae:5b:12:3e:4d:3f:0a:2b:98:bf:f2:a9:60:07:1e:dc:d0:cf:
         68:51:c9:ee:6f:5a:fc:af:1d:42:98:d3:ff:b8:f7:39:3d:cf:
         d9:f3:20:b8:de:89:e6:5a:bb:31:4c:9a:f7:f7:4a:82:9e:3d:
         2d:49:eb:6a:e1:29:26:c3:a6:e0:31:bd:a7:65:1e:1c:a3:dd:
         b3:31:78:95
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBEpBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
N2QyZjNiZDI3ZGFiNGY3N2UxMTQzMWQ2ZGRhYzk0NGMwNmZkYzkwHhcNMjEwMzI0
MTQzNjIyWhcNMjYwMzI0MTQzNjIyWjAzMTEwLwYDVQQDEyg0NmY3OTA5YjI5MWFm
ZGQ3Nzg2YzY1ODJlM2U5N2U4OTljMDQzYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvqMxIig8GP5Xpl0Y8plj2/Lm2F3bzKbkltScV3nVhMT5uR8y
ss79Ris9LmCpcVOxfbjiNvt1qyFKkbF4w9rNE8gTa0IGzjVxjIyCwFwx5HF0rcV2
St23eL3SmhvONxjBdzXLPnJEXk9GBKbAYs42uFuRQNYe3EOA7GJXDKy/vrF/tw5Z
wuErOZj14+qADtf1aXZMLuPNInZIeZNieyNuFnmY9tZTL/qNw7Hi2Yvd6KVOjS7e
watG5abZ88zHN3iwUSDWxcoXODvxrT83M6M3rVsQYWw1Af/z/kQdf7a3hzSV6F1u
h8xAoy94rKHw0ZFrT9zoEYWDap4At1vDcJES8wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFuNuHr/GwCF1zpaTJAjrni8g0PbMB8GA1UdIwQYMBaAFLyE0OAA233xiWIH
bueU3sKpZUYgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjg3ZDJm
M2JkMjdkYWI0Zjc3ZTExNDMxZDZkZGFjOTQ0YzA2ZmRjOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjFjODE0ZTgtNmNiZC00NDc5LTk2MmItNjIyNDAy
YTFlOTgyLzQ2Zjc5MDliMjkxYWZkZDc3ODZjNjU4MmUzZTk3ZTg5OWMwNDNhNjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MWM4MTRlOC02Y2JkLTQ0NzktOTYyYi02MjI0
MDJhMWU5ODIvYjg3ZDJmM2JkMjdkYWI0Zjc3ZTExNDMxZDZkZGFjOTQ0YzA2ZmRj
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABmoADANBgkqhkiG9w0BAQsFAAOCAQEAaVrNdA+ukPi+
5UlvtaOC7KkZNiv9hcMudakFLfi21T6Ll+6UCTHJxAROzcET1Oc7AnWzDjCJmCHh
pLAWzy4I7e8y4JM2mmeSg+1XulhX0ibJfbeNTO0rOSEqqnqTkQ6tDi/4+q8CLkDb
sFL+CkruID7OBc0v8+h7DXRngZ4a01RF3XFxIVTGpnRBbq9CO9fJG/E9Fl+eDpJN
Zyy2qU3qIIEugmkix5Qhk80x95y79+u1LQ3RrlsSPk0/CiuYv/KpYAce3NDPaFHJ
7m9a/K8dQpjT/7j3OT3P2fMguN6J5lq7MUya9/dKgp49LUnrauEpJsOm4DG9p2Ue
HKPdszF4lQ==
-----END CERTIFICATE-----