Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9700573cd6d22bb5fcef8743e2f2711410e294e2.roa
File:                     9700573cd6d22bb5fcef8743e2f2711410e294e2.roa (raw, json)
Hash identifier:          PpYICE8rLx5LZkxM/ky0HaJSNB63jyGdedoDm7tY8e8=
Subject key identifier:   CB:30:23:3F:6A:79:69:FB:C9:19:9D:CD:9F:05:02:37:05:17:DB:44
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E6002
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9700573cd6d22bb5fcef8743e2f2711410e294e2.roa
Signing time:             Wed 24 Mar 2021 22:49:50 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     27841
IP address blocks:        2800:68:41::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942082 (0xe6002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=9700573cd6d22bb5fcef8743e2f2711410e294e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:31:dd:e2:e3:37:f4:04:5c:fe:b5:f3:92:
                    4c:ba:ed:e9:80:8e:df:f2:1b:47:cc:8d:b2:a4:46:
                    dc:68:e5:be:fd:67:cf:82:c0:52:81:38:ba:86:2e:
                    98:c4:1e:2a:f6:40:5d:4a:9b:9d:d0:df:86:2f:34:
                    0c:59:eb:87:34:d1:b6:74:5e:60:a0:a5:26:22:e7:
                    06:27:9d:8c:eb:08:48:ba:20:1d:7f:ae:33:71:33:
                    bb:91:3d:26:5b:bb:38:93:94:fa:2f:6e:b9:8d:a4:
                    be:fc:a2:a8:77:0a:23:04:d0:1a:13:ff:71:d1:81:
                    94:ff:51:93:91:e1:24:6d:ce:e6:c6:f9:f0:e1:b6:
                    6d:e6:6c:1c:4b:7b:66:7e:82:df:6f:25:dc:e1:6a:
                    2c:8e:05:22:b6:45:e8:3b:64:62:42:5a:2d:87:aa:
                    5e:3d:42:4b:82:a4:63:5b:91:ec:ec:a1:2e:6b:0c:
                    29:34:ac:7f:eb:e5:0a:68:79:b5:08:b8:cd:32:98:
                    92:31:31:f8:d1:ab:eb:58:c7:b7:29:f1:21:e2:fd:
                    67:b1:c0:3f:20:6c:33:ab:e6:b7:28:1a:42:23:ac:
                    e2:1a:7f:6d:b6:54:3b:b4:a3:79:da:9e:c5:0a:57:
                    38:70:85:dd:a8:59:72:fb:6b:64:c9:84:a5:db:a7:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:30:23:3F:6A:79:69:FB:C9:19:9D:CD:9F:05:02:37:05:17:DB:44
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9700573cd6d22bb5fcef8743e2f2711410e294e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:41::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:68:22:e7:6e:0e:d4:e2:87:09:6c:79:bc:64:ea:91:fd:
         3d:de:c6:9d:1d:f0:e6:87:1d:ad:e4:50:98:2e:f3:7b:6f:32:
         8c:ac:de:7a:28:bd:d4:24:39:e6:15:7c:98:e5:09:71:12:98:
         01:b3:01:af:d2:a5:57:32:85:3d:c8:48:be:ce:8f:7a:9f:80:
         0a:e2:9d:5b:9f:0f:e4:d9:31:bc:fe:d6:2b:30:00:e5:fe:eb:
         bd:24:6d:95:19:3e:db:ca:da:d8:d0:35:03:b0:40:81:e2:76:
         31:44:ee:be:36:d6:9b:f2:fe:69:37:c8:c6:ef:93:aa:f2:27:
         b4:d0:84:73:ff:6a:91:87:6d:5b:5f:19:f7:d0:28:e0:cd:15:
         52:c8:34:ff:46:9f:43:35:bb:88:fc:a8:8b:a7:d8:27:9e:2b:
         da:60:4b:2c:dd:2d:3f:21:7f:9b:48:2d:89:87:6d:40:08:a8:
         0f:f7:f7:76:f8:e8:1b:7a:31:57:c2:9b:81:4f:d7:93:4e:cc:
         03:9d:4b:fd:72:8c:11:a8:cd:53:e0:f0:cb:51:22:b5:88:63:
         78:68:1c:fe:a5:69:b1:f6:fc:d2:a3:00:2d:8e:76:9a:61:ad:
         ed:9b:44:52:f3:7c:05:12:fa:a1:2f:9e:dd:62:c4:39:43:fd:
         28:1a:63:05
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDmACMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg5NzAwNTczY2Q2ZDIy
YmI1ZmNlZjg3NDNlMmYyNzExNDEwZTI5NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkssx3eLjN/QEXP6185JMuu3pgI7f8htHzI2ypEbcaOW+/WfP
gsBSgTi6hi6YxB4q9kBdSpud0N+GLzQMWeuHNNG2dF5goKUmIucGJ52M6whIuiAd
f64zcTO7kT0mW7s4k5T6L265jaS+/KKodwojBNAaE/9x0YGU/1GTkeEkbc7mxvnw
4bZt5mwcS3tmfoLfbyXc4WosjgUitkXoO2RiQloth6pePUJLgqRjW5Hs7KEuawwp
NKx/6+UKaHm1CLjNMpiSMTH40avrWMe3KfEh4v1nscA/IGwzq+a3KBpCI6ziGn9t
tlQ7tKN52p7FClc4cIXdqFly+2tkyYSl26c7tQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMswIz9qeWn7yRmdzZ8FAjcFF9tEMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzk3MDA1NzNjZDZkMjJiYjVmY2VmODc0M2UyZjI3MTE0MTBlMjk0ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgAAGgAQTANBgkqhkiG9w0BAQsFAAOCAQEAE+RoIuduDtTi
hwlsebxk6pH9Pd7GnR3w5ocdreRQmC7ze28yjKzeeii91CQ55hV8mOUJcRKYAbMB
r9KlVzKFPchIvs6Pep+ACuKdW58P5NkxvP7WKzAA5f7rvSRtlRk+28ra2NA1A7BA
geJ2MUTuvjbWm/L+aTfIxu+TqvIntNCEc/9qkYdtW18Z99Ao4M0VUsg0/0afQzW7
iPyoi6fYJ54r2mBLLN0tPyF/m0gtiYdtQAioD/f3dvjoG3oxV8KbgU/Xk07MA51L
/XKMEajNU+Dwy1EitYhjeGgc/qVpsfb80qMALY52mmGt7ZtEUvN8BRL6oS+e3WLE
OUP9KBpjBQ==
-----END CERTIFICATE-----