Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/f45261f291551f9e1a7ce670496e4cfecd5feb4c.roa
File:                     f45261f291551f9e1a7ce670496e4cfecd5feb4c.roa (raw, json)
Hash identifier:          q33WpmQkORZ6WwCQfWRr9rhBZpqP0vKJlF2+sZ5e5Xo=
Subject key identifier:   F0:D7:02:6B:DD:86:AD:E4:96:49:F5:53:F7:0D:5E:09:A0:D4:43:CD
Certificate issuer:       /CN=0617fe284eadaecc300caf805a55753001bc6052
Certificate serial:       0417
Authority key identifier: 23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/f45261f291551f9e1a7ce670496e4cfecd5feb4c.roa
Signing time:             Wed 02 Nov 2022 00:20:37 +0000
ROA not before:           Tue 01 Nov 2022 00:13:10 +0000
ROA not after:            Sat 02 Nov 2024 00:13:10 +0000
asID:                     270141
IP address blocks:        2806:3dc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0617fe284eadaecc300caf805a55753001bc6052
        Validity
            Not Before: Nov  1 00:13:10 2022 GMT
            Not After : Nov  2 00:13:10 2024 GMT
        Subject: CN=f45261f291551f9e1a7ce670496e4cfecd5feb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dd:cd:67:19:71:73:19:6b:47:a6:d0:b1:5b:
                    dc:b9:aa:e8:d2:df:51:bd:f2:2d:75:18:53:c7:da:
                    42:4a:3a:e2:4b:b9:53:3d:30:e9:56:e3:3b:6e:98:
                    6a:2f:37:8b:1e:30:61:ba:75:26:3c:65:30:3e:af:
                    4b:0a:85:57:dc:dc:50:5e:a1:f9:a3:52:2c:d2:c0:
                    6e:90:6d:c5:16:54:58:18:cc:7f:d2:a5:00:38:ae:
                    a6:26:e3:1a:40:97:62:70:f6:4c:f5:bd:46:45:7a:
                    e5:3e:3b:b9:3b:f0:a3:3f:a1:98:67:a3:ff:6c:b5:
                    61:0f:cd:31:32:3a:d4:c1:8b:61:d3:a8:7c:a3:82:
                    01:0e:04:41:04:d2:41:e3:46:18:7c:00:09:4d:92:
                    05:03:bc:9b:3b:81:6a:a1:3a:0f:21:25:e4:3b:71:
                    a9:63:1e:a9:af:cd:7c:12:2f:4a:8a:2d:d4:aa:f0:
                    46:a0:f3:08:c6:22:b1:ea:f0:35:3f:19:08:c7:0f:
                    ae:af:15:fb:af:3c:15:cd:ba:9c:31:8c:9e:d0:54:
                    ca:8a:9b:14:24:a3:99:f8:e5:9f:e6:3c:f8:69:11:
                    9b:04:c3:44:c6:8a:82:05:7e:51:ca:3a:89:bd:de:
                    42:3e:ed:4a:ba:b3:a8:29:0a:84:a3:54:c1:d0:5d:
                    f0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:02:6B:DD:86:AD:E4:96:49:F5:53:F7:0D:5E:09:A0:D4:43:CD
            X509v3 Authority Key Identifier:
                keyid:23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/f45261f291551f9e1a7ce670496e4cfecd5feb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:c6:08:b0:78:a4:ce:50:91:34:da:e7:ec:2a:09:3b:50:28:
         1f:51:54:12:7d:c8:98:2e:73:9d:b1:40:f6:57:10:d1:35:19:
         0c:f3:47:16:2a:72:9b:fd:74:ee:26:4e:9a:23:08:94:c5:aa:
         ca:48:45:0d:31:b4:09:16:11:c8:33:87:51:2a:c6:a8:a9:50:
         01:45:cc:6b:ec:d4:6f:bc:3f:73:d3:25:e4:f3:2b:4e:d0:12:
         2a:00:fb:8a:0f:75:58:4f:f1:fb:41:e3:26:f8:4c:e0:35:37:
         c9:30:b7:4e:65:02:b2:65:3e:08:cb:6e:a2:4e:7b:23:e3:cd:
         2d:5d:97:62:72:bd:29:c5:f8:98:77:52:4d:e4:75:61:63:1f:
         7f:5a:3a:0f:24:97:11:90:e0:eb:9b:2e:f1:6e:a0:eb:d4:2c:
         47:1e:7c:bb:20:43:e0:09:b2:1a:b9:25:84:08:92:8b:31:cd:
         34:af:74:36:c6:1c:87:d5:3a:ac:dc:1b:7c:e3:14:6d:4f:b9:
         b7:46:0c:70:82:53:b5:1f:d6:54:ea:85:6a:81:e8:2b:79:b7:
         9e:1b:2a:77:f8:76:cf:87:8e:46:ee:71:3b:37:db:09:a3:ec:
         9f:70:e7:ce:23:71:9b:0f:a4:76:98:2e:f8:ae:ec:1c:ff:86:
         9e:1e:e6:7e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYx
N2ZlMjg0ZWFkYWVjYzMwMGNhZjgwNWE1NTc1MzAwMWJjNjA1MjAeFw0yMjExMDEw
MDEzMTBaFw0yNDExMDIwMDEzMTBaMDMxMTAvBgNVBAMTKGY0NTI2MWYyOTE1NTFm
OWUxYTdjZTY3MDQ5NmU0Y2ZlY2Q1ZmViNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCH3c1nGXFzGWtHptCxW9y5qujS31G98i11GFPH2kJKOuJLuVM9
MOlW4ztumGovN4seMGG6dSY8ZTA+r0sKhVfc3FBeofmjUizSwG6QbcUWVFgYzH/S
pQA4rqYm4xpAl2Jw9kz1vUZFeuU+O7k78KM/oZhno/9stWEPzTEyOtTBi2HTqHyj
ggEOBEEE0kHjRhh8AAlNkgUDvJs7gWqhOg8hJeQ7caljHqmvzXwSL0qKLdSq8Eag
8wjGIrHq8DU/GQjHD66vFfuvPBXNupwxjJ7QVMqKmxQko5n45Z/mPPhpEZsEw0TG
ioIFflHKOom93kI+7Uq6s6gpCoSjVMHQXfDjAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQU8NcCa92GreSWSfVT9w1eCaDUQ80wHwYDVR0jBBgwFoAUIxGsBGgDgL1tcgF+
I7ImSCRWPHgwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wNjE3ZmUy
ODRlYWRhZWNjMzAwY2FmODA1YTU1NzUzMDAxYmM2MDUyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82ODU0MTJiOS0wYTEyLTQ5NDUtOTliNy0wZDc4ZDQw
NjFiZjMvZjQ1MjYxZjI5MTU1MWY5ZTFhN2NlNjcwNDk2ZTRjZmVjZDVmZWI0Yy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzY4NTQxMmI5LTBhMTItNDk0NS05OWI3LTBkNzhk
NDA2MWJmMy8wNjE3ZmUyODRlYWRhZWNjMzAwY2FmODA1YTU1NzUzMDAxYmM2MDUy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAYD3DANBgkqhkiG9w0BAQsFAAOCAQEAYMYIsHikzlCRNNrn
7CoJO1AoH1FUEn3ImC5znbFA9lcQ0TUZDPNHFipym/107iZOmiMIlMWqykhFDTG0
CRYRyDOHUSrGqKlQAUXMa+zUb7w/c9Ml5PMrTtASKgD7ig91WE/x+0HjJvhM4DU3
yTC3TmUCsmU+CMtuok57I+PNLV2XYnK9KcX4mHdSTeR1YWMff1o6DySXEZDg65su
8W6g69QsRx58uyBD4AmyGrklhAiSizHNNK90NsYch9U6rNwbfOMUbU+5t0YMcIJT
tR/WVOqFaoHoK3m3nhsqd/h2z4eORu5xOzfbCaPsn3DnziNxmw+kdpgu+K7sHP+G
nh7mfg==
-----END CERTIFICATE-----