Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/d009b189dc5584bb2c828a9812b93d5f404913ff.roa
File:                     d009b189dc5584bb2c828a9812b93d5f404913ff.roa (raw, json)
Hash identifier:          sL9y7Gk1O1d1iqecACdTZ385hb/o9y/i6sDj8jP/Ffw=
Subject key identifier:   5D:41:C7:34:E6:B5:78:64:13:6E:84:FE:22:2F:4C:95:E2:CE:A0:4E
Certificate issuer:       /CN=5d102c8f4fcf978ba445fa1b13f0a5937e71aa61
Certificate serial:       A0BD
Authority key identifier: 41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/d009b189dc5584bb2c828a9812b93d5f404913ff.roa
Signing time:             Mon 08 Aug 2022 15:41:11 +0000
ROA not before:           Mon 08 Aug 2022 15:40:28 +0000
ROA not after:            Thu 08 Aug 2024 15:40:28 +0000
asID:                     272821
IP address blocks:        2801:1d4:640::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41149 (0xa0bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d102c8f4fcf978ba445fa1b13f0a5937e71aa61
        Validity
            Not Before: Aug  8 15:40:28 2022 GMT
            Not After : Aug  8 15:40:28 2024 GMT
        Subject: CN=d009b189dc5584bb2c828a9812b93d5f404913ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:de:ae:92:54:72:74:d1:c7:fe:80:0a:a5:
                    70:b8:56:7c:a9:1a:02:56:fa:b0:5f:38:f3:b3:32:
                    28:0e:dc:d6:9d:be:2e:2b:a1:dd:4b:f1:a6:5d:9e:
                    70:75:0f:70:36:92:9d:6d:01:22:c6:3c:e9:82:70:
                    f3:ad:d4:34:30:c5:2e:07:f8:ca:65:5c:a1:3e:f6:
                    e8:b7:87:cf:2f:c4:ac:fc:92:0d:76:e7:3b:53:66:
                    2e:eb:55:41:39:fc:55:67:25:65:f1:cc:e2:7b:3f:
                    0b:b6:75:a1:ae:99:2d:50:08:80:e5:4c:38:37:bc:
                    ed:c3:96:ec:6c:58:f6:65:fc:52:17:cd:3f:31:c5:
                    99:f6:6c:59:ef:a8:eb:03:4f:72:86:1f:3b:12:8e:
                    4d:fe:59:de:67:b4:a6:d5:ed:0f:52:13:38:74:2c:
                    14:20:41:99:9c:0e:89:e4:ad:1b:54:4d:0f:4c:74:
                    1f:68:39:09:79:74:ef:3a:f5:dd:44:76:7d:38:3d:
                    97:f4:37:57:f5:cc:bc:b7:63:69:1f:0d:6e:32:65:
                    2e:fe:5f:09:26:76:93:e0:0f:78:a2:cc:25:0f:83:
                    3e:3a:42:e8:13:35:21:83:43:88:00:81:d6:d5:af:
                    47:a3:14:66:8e:52:3e:1d:cd:61:f7:8b:b2:16:30:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:C7:34:E6:B5:78:64:13:6E:84:FE:22:2F:4C:95:E2:CE:A0:4E
            X509v3 Authority Key Identifier:
                keyid:41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/d009b189dc5584bb2c828a9812b93d5f404913ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d4:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:2f:a4:35:16:0a:38:03:cd:7a:6e:b2:85:e9:c3:a6:1f:
         41:81:8b:7b:35:fc:dd:42:97:e2:6e:51:be:a7:e1:2e:4d:d1:
         e5:ac:e5:81:01:4a:09:d4:75:f3:a3:5d:d3:de:79:94:9d:cc:
         9b:38:aa:7a:36:6e:a9:a3:c7:c7:1e:54:0f:d0:1c:5c:3d:62:
         f3:c0:7d:60:b0:41:b0:dc:b5:dd:ff:d8:28:c1:fd:c5:bd:09:
         10:b6:40:45:fc:35:f5:de:2c:1a:d3:87:2b:18:5b:21:e6:e2:
         39:f7:30:a1:0a:c1:78:64:c2:e2:18:53:4c:b9:27:62:d8:6a:
         22:83:1d:b6:b3:e4:7b:ab:9a:cd:c2:03:92:37:64:c8:e1:f0:
         8d:6d:96:53:d1:c6:be:d0:62:d9:75:14:c5:50:87:7b:27:95:
         59:14:c2:a8:f8:60:34:56:e2:9b:a7:39:7a:a8:2e:92:2e:93:
         a6:ec:f0:bd:74:1e:22:03:a3:92:98:3b:26:b9:f2:17:16:27:
         7b:be:ca:a2:84:2c:06:8a:8d:ef:fa:81:08:05:87:e7:50:6c:
         71:00:62:bf:e2:23:6f:a4:92:bc:f8:16:63:8e:05:51:e9:e7:
         7f:3f:82:d6:65:c9:93:45:41:78:97:22:ca:88:40:34:1a:3a:
         da:f7:d4:bf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAKC9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MTAyYzhmNGZjZjk3OGJhNDQ1ZmExYjEzZjBhNTkzN2U3MWFhNjEwHhcNMjIwODA4
MTU0MDI4WhcNMjQwODA4MTU0MDI4WjAzMTEwLwYDVQQDEyhkMDA5YjE4OWRjNTU4
NGJiMmM4MjhhOTgxMmI5M2Q1ZjQwNDkxM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgSLerpJUcnTRx/6ACqVwuFZ8qRoCVvqwXzjzszIoDtzWnb4u
K6HdS/GmXZ5wdQ9wNpKdbQEixjzpgnDzrdQ0MMUuB/jKZVyhPvbot4fPL8Ss/JIN
duc7U2Yu61VBOfxVZyVl8cziez8LtnWhrpktUAiA5Uw4N7ztw5bsbFj2ZfxSF80/
McWZ9mxZ76jrA09yhh87Eo5N/lneZ7Sm1e0PUhM4dCwUIEGZnA6J5K0bVE0PTHQf
aDkJeXTvOvXdRHZ9OD2X9DdX9cy8t2NpHw1uMmUu/l8JJnaT4A94oswlD4M+OkLo
EzUhg0OIAIHW1a9HoxRmjlI+Hc1h94uyFjBZKwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFF1BxzTmtXhkE26E/iIvTJXizqBOMB8GA1UdIwQYMBaAFEEqliRb+ahf4cYQ
NbFeOAbT1LxRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQxMDJj
OGY0ZmNmOTc4YmE0NDVmYTFiMTNmMGE1OTM3ZTcxYWE2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzRkNDkzZmItMzAxNS00MmMyLWFjZTYtZWViZDRi
OTMyYzBiL2QwMDliMTg5ZGM1NTg0YmIyYzgyOGE5ODEyYjkzZDVmNDA0OTEzZmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NGQ0OTNmYi0zMDE1LTQyYzItYWNlNi1lZWJk
NGI5MzJjMGIvNWQxMDJjOGY0ZmNmOTc4YmE0NDVmYTFiMTNmMGE1OTM3ZTcxYWE2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAdQGQDANBgkqhkiG9w0BAQsFAAOCAQEAlC4vpDUWCjgD
zXpusoXpw6YfQYGLezX83UKX4m5RvqfhLk3R5azlgQFKCdR186Nd0955lJ3Mmziq
ejZuqaPHxx5UD9AcXD1i88B9YLBBsNy13f/YKMH9xb0JELZARfw19d4sGtOHKxhb
IebiOfcwoQrBeGTC4hhTTLknYthqIoMdtrPke6uazcIDkjdkyOHwjW2WU9HGvtBi
2XUUxVCHeyeVWRTCqPhgNFbim6c5eqguki6TpuzwvXQeIgOjkpg7JrnyFxYne77K
ooQsBoqN7/qBCAWH51BscQBiv+Ijb6SSvPgWY44FUennfz+C1mXJk0VBeJciyohA
NBo62vfUvw==
-----END CERTIFICATE-----