Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/71fd9b25548d0416db6c93e192e96003efd5a26c.roa
File:                     71fd9b25548d0416db6c93e192e96003efd5a26c.roa (raw, json)
Hash identifier:          79Gd79M6XJNngp+eKyDcSA3iUPjzYN9fi0yO4QBLIPE=
Subject key identifier:   98:41:85:1D:96:CA:21:41:4A:45:67:38:92:75:8F:75:4D:54:FD:26
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       D6A5
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/71fd9b25548d0416db6c93e192e96003efd5a26c.roa
Signing time:             Fri 28 Jan 2022 21:28:57 +0000
ROA not before:           Fri 28 Jan 2022 03:00:00 +0000
ROA not after:            Sun 28 Jan 2024 03:00:00 +0000
asID:                     10753
IP address blocks:        2801:1b:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54949 (0xd6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Jan 28 03:00:00 2022 GMT
            Not After : Jan 28 03:00:00 2024 GMT
        Subject: CN=71fd9b25548d0416db6c93e192e96003efd5a26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:ef:20:76:71:35:ed:4c:34:2d:1e:0a:10:
                    71:7b:9d:8a:79:ea:6b:88:13:d7:c2:c7:91:19:2d:
                    08:95:c2:55:b7:49:5d:31:c1:dc:cc:a3:f1:9b:29:
                    d8:62:9e:49:d5:f4:5d:8b:af:53:03:60:6f:9b:00:
                    3d:ce:7d:6c:44:dd:db:fe:48:d3:9a:f8:59:8b:41:
                    24:c5:f6:85:88:56:e9:2f:ef:19:de:95:54:96:cd:
                    c7:09:76:d2:fd:0c:61:48:5e:0c:c6:95:a5:fd:69:
                    0a:91:e3:8f:44:5c:0b:2c:93:b9:32:52:41:87:a7:
                    ce:9b:d7:77:52:80:85:7c:d0:25:61:0a:0d:bd:c9:
                    3d:d4:a6:e7:3d:b8:5d:01:c1:cb:52:13:ff:88:bf:
                    52:98:7e:8f:d9:8d:cc:22:da:17:27:15:94:cf:84:
                    9a:47:78:9d:d1:f2:25:03:db:77:37:dd:49:13:8a:
                    b9:d7:ab:ed:ec:ce:f6:ed:1b:7d:b1:a1:6d:85:2b:
                    9d:04:e7:a6:96:4c:d0:cb:54:72:09:b2:bd:74:9f:
                    68:03:84:57:6d:e9:07:68:ea:bb:92:56:a9:0d:d7:
                    0a:8c:43:2b:51:18:6d:3e:6d:4a:23:f8:13:76:fd:
                    a6:7b:bd:de:74:d2:9e:83:d2:e4:b6:53:fc:5c:07:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:41:85:1D:96:CA:21:41:4A:45:67:38:92:75:8F:75:4D:54:FD:26
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/71fd9b25548d0416db6c93e192e96003efd5a26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:4b:f4:f8:65:37:c2:a5:ce:44:33:ea:52:b9:6b:96:18:
         f7:8b:06:a6:38:49:cc:87:7d:bf:9b:06:3d:07:78:2c:36:a2:
         52:0c:2b:ef:17:56:24:aa:0d:51:5b:17:9e:29:6a:89:f8:a1:
         62:37:68:21:38:bc:79:62:81:34:66:70:2c:55:63:e7:14:85:
         20:37:c9:41:b0:2e:34:52:13:f1:07:7a:2e:36:d6:64:06:c8:
         27:23:a6:10:20:80:3f:75:e4:ad:ed:fa:7e:ac:64:6a:5d:8b:
         ef:d4:15:ac:36:3a:73:c8:20:ff:e5:89:27:f9:ec:42:78:31:
         97:03:68:67:69:30:f7:b2:8f:4d:b5:1e:db:32:1c:0a:99:8d:
         bb:36:8e:e2:96:40:32:2b:be:40:ce:94:37:f2:4d:1c:54:cc:
         cd:ec:b5:09:37:37:1c:dc:92:fc:17:e7:e4:d4:c5:d6:ba:e8:
         2c:0e:84:00:46:50:03:ea:db:53:6f:62:da:3f:16:18:df:34:
         ee:cf:cd:79:67:f3:e0:50:1a:68:61:d4:a6:ab:9a:d8:72:d3:
         95:cb:e9:f2:b0:ab:ed:0d:ef:f8:81:24:b6:5d:ac:f3:45:f8:
         09:3f:07:02:8c:06:72:8b:ff:12:9a:55:df:3d:b8:2c:62:43:
         5c:cf:4c:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDANalMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
YzQ1N2I5ZTRjNGZiMmNhZWViZTVkNzg0NjUzY2FlYzMzOWY1NTYwHhcNMjIwMTI4
MDMwMDAwWhcNMjQwMTI4MDMwMDAwWjAzMTEwLwYDVQQDEyg3MWZkOWIyNTU0OGQw
NDE2ZGI2YzkzZTE5MmU5NjAwM2VmZDVhMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkLzvIHZxNe1MNC0eChBxe52KeepriBPXwseRGS0IlcJVt0ld
McHczKPxmynYYp5J1fRdi69TA2BvmwA9zn1sRN3b/kjTmvhZi0EkxfaFiFbpL+8Z
3pVUls3HCXbS/QxhSF4MxpWl/WkKkeOPRFwLLJO5MlJBh6fOm9d3UoCFfNAlYQoN
vck91KbnPbhdAcHLUhP/iL9SmH6P2Y3MItoXJxWUz4SaR3id0fIlA9t3N91JE4q5
16vt7M727Rt9saFthSudBOemlkzQy1RyCbK9dJ9oA4RXbekHaOq7klapDdcKjEMr
URhtPm1KI/gTdv2me73edNKeg9LktlP8XAdFCwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJhBhR2WyiFBSkVnOJJ1j3VNVP0mMB8GA1UdIwQYMBaAFAn/ItE+KkIxQG0h
uU4oBkChgQwNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVjNDU3
YjllNGM0ZmIyY2FlZWJlNWQ3ODQ2NTNjYWVjMzM5ZjU1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM1NzE0NmEtNDk5Mi00MmJlLTkxZDktOWJkOGY3
NDZmM2JmLzcxZmQ5YjI1NTQ4ZDA0MTZkYjZjOTNlMTkyZTk2MDAzZWZkNWEyNmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzU3MTQ2YS00OTkyLTQyYmUtOTFkOS05YmQ4
Zjc0NmYzYmYvMTVjNDU3YjllNGM0ZmIyY2FlZWJlNWQ3ODQ2NTNjYWVjMzM5ZjU1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABsYADANBgkqhkiG9w0BAQsFAAOCAQEAULdL9PhlN8Kl
zkQz6lK5a5YY94sGpjhJzId9v5sGPQd4LDaiUgwr7xdWJKoNUVsXnilqifihYjdo
ITi8eWKBNGZwLFVj5xSFIDfJQbAuNFIT8Qd6LjbWZAbIJyOmECCAP3Xkre36fqxk
al2L79QVrDY6c8gg/+WJJ/nsQngxlwNoZ2kw97KPTbUe2zIcCpmNuzaO4pZAMiu+
QM6UN/JNHFTMzey1CTc3HNyS/Bfn5NTF1rroLA6EAEZQA+rbU29i2j8WGN807s/N
eWfz4FAaaGHUpqua2HLTlcvp8rCr7Q3v+IEktl2s80X4CT8HAowGcov/EppV3z24
LGJDXM9MZw==
-----END CERTIFICATE-----