Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b4c9a83f1fd8aae8cb5d721a8ba962d742845e78.roa
File:                     b4c9a83f1fd8aae8cb5d721a8ba962d742845e78.roa (raw, json)
Hash identifier:          lM9niDeEuYEJNpnRY5yx1FqODe7CDwO4DHqEo5pbnI4=
Subject key identifier:   07:18:2E:0F:45:FB:EC:B4:D7:A2:F4:B8:16:C9:F8:A7:96:37:CC:2C
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E4A40
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b4c9a83f1fd8aae8cb5d721a8ba962d742845e78.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:dc0::/48 maxlen: 48
                          2800:68:dc41::/48 maxlen: 48
                          2800:68:43::/48 maxlen: 48
                          2800:68:44::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936512 (0xe4a40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=b4c9a83f1fd8aae8cb5d721a8ba962d742845e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:7e:75:96:fc:c0:b3:63:a1:5a:6a:f1:38:
                    2b:be:9d:d3:07:45:aa:c9:45:28:b3:bb:90:a0:90:
                    26:a6:f1:b0:9f:ad:13:9e:16:8c:34:d4:19:b1:64:
                    0e:41:88:a9:d7:53:a1:fb:3b:61:ec:f6:38:ad:90:
                    a5:84:95:1f:9c:54:67:22:8c:3f:6d:d9:a9:67:14:
                    6f:71:67:e4:a6:bf:dc:7e:a1:3c:fe:4a:5b:da:9c:
                    45:9f:76:1a:ab:e2:1f:df:8b:b6:80:35:dc:60:1a:
                    2a:6e:45:82:32:b3:69:ec:07:f3:ca:17:48:3a:98:
                    84:5d:9e:9f:14:ff:17:c5:f5:ca:57:fc:b8:f3:54:
                    c4:45:25:b6:b0:61:40:06:d1:59:1d:94:2a:9e:5a:
                    46:3a:3b:90:2a:f2:06:ba:05:c8:2b:85:01:3c:45:
                    ac:a0:99:a8:6a:32:ea:82:df:ef:ea:42:3d:76:fe:
                    9a:e2:26:9e:44:72:b7:72:df:62:1c:71:ce:26:48:
                    82:a0:a2:00:aa:04:8d:9b:07:a6:e0:13:8b:24:9d:
                    8e:9a:f1:c6:43:3c:2b:7f:ab:8c:87:a2:f5:a5:b3:
                    38:8a:92:43:b3:c5:bc:83:50:f4:e0:96:bf:03:4c:
                    e0:66:09:92:15:6e:d7:eb:a2:4f:88:f2:5c:80:b2:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:18:2E:0F:45:FB:EC:B4:D7:A2:F4:B8:16:C9:F8:A7:96:37:CC:2C
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b4c9a83f1fd8aae8cb5d721a8ba962d742845e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:43::-2800:68:44:ffff:ffff:ffff:ffff:ffff
                  2800:68:dc0::/48
                  2800:68:dc41::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:12:da:70:43:ff:63:c2:39:70:d2:aa:50:2d:89:35:ec:cf:
         c0:4d:19:57:c8:86:39:36:c5:4d:49:ab:db:05:b1:ac:05:1f:
         cb:14:54:c7:ad:9e:13:0d:6d:63:ef:ae:1f:04:62:7a:a3:fc:
         78:46:63:90:9a:87:2c:f4:75:4f:a1:5a:8d:66:ff:83:c9:08:
         b9:f4:cd:84:27:84:1c:8c:e6:3f:3b:54:3e:60:4b:c7:af:c6:
         94:e8:9c:79:8c:ba:14:2d:ad:cc:e5:de:e0:58:ef:f8:9e:f4:
         46:b1:83:de:6d:b9:81:04:1e:1f:c6:72:41:a8:0f:e9:4a:a5:
         26:70:b3:ad:1e:06:58:c5:17:fd:d6:04:0d:96:29:34:b0:a0:
         72:74:79:1a:c9:f7:08:a3:7f:6c:b0:0e:13:d5:9e:24:9e:69:
         c3:d2:1a:03:45:e2:75:9f:e6:ba:b1:ed:c1:b0:05:20:2a:73:
         0e:0b:f9:2b:f1:a6:0d:51:3d:7b:20:e1:f0:7f:17:88:6a:b5:
         5b:15:4a:d5:21:76:41:0d:37:30:6a:5d:63:1b:71:03:18:91:
         fa:0c:d2:07:63:37:95:c9:b7:c1:ac:5a:0c:ba:10:59:7b:99:
         c1:d2:b2:93:4e:7d:29:38:fe:67:99:bf:5e:27:80:23:1d:dc:
         e1:85:66:8e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDDkpAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjEwMzI0
MTQzOTA3WhcNMjYwMzI0MTQzOTA3WjAzMTEwLwYDVQQDEyhiNGM5YTgzZjFmZDhh
YWU4Y2I1ZDcyMWE4YmE5NjJkNzQyODQ1ZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkIl+dZb8wLNjoVpq8Tgrvp3TB0WqyUUos7uQoJAmpvGwn60T
nhaMNNQZsWQOQYip11Oh+zth7PY4rZClhJUfnFRnIow/bdmpZxRvcWfkpr/cfqE8
/kpb2pxFn3Yaq+If34u2gDXcYBoqbkWCMrNp7AfzyhdIOpiEXZ6fFP8XxfXKV/y4
81TERSW2sGFABtFZHZQqnlpGOjuQKvIGugXIK4UBPEWsoJmoajLqgt/v6kI9dv6a
4iaeRHK3ct9iHHHOJkiCoKIAqgSNmwem4BOLJJ2OmvHGQzwrf6uMh6L1pbM4ipJD
s8W8g1D04Ja/A0zgZgmSFW7X66JPiPJcgLKO8QIDAQABo4ICezCCAncwHQYDVR0O
BBYEFAcYLg9F++y016L0uBbJ+KeWN8wsMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjL2I0YzlhODNmMWZkOGFhZThjYjVkNzIxYThiYTk2MmQ3NDI4NDVlNzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQw
MC4wLAQCAAIwJjASAwcAKAAAaABDAwcAKAAAaABEAwcAKAAAaA3AAwcAKAAAaNxB
MA0GCSqGSIb3DQEBCwUAA4IBAQAEEtpwQ/9jwjlw0qpQLYk17M/ATRlXyIY5NsVN
SavbBbGsBR/LFFTHrZ4TDW1j764fBGJ6o/x4RmOQmocs9HVPoVqNZv+DyQi59M2E
J4QcjOY/O1Q+YEvHr8aU6Jx5jLoULa3M5d7gWO/4nvRGsYPebbmBBB4fxnJBqA/p
SqUmcLOtHgZYxRf91gQNlik0sKBydHkayfcIo39ssA4T1Z4knmnD0hoDReJ1n+a6
se3BsAUgKnMOC/kr8aYNUT17IOHwfxeIarVbFUrVIXZBDTcwal1jG3EDGJH6DNIH
YzeVybfBrFoMuhBZe5nB0rKTTn0pOP5nmb9eJ4AjHdzhhWaO
-----END CERTIFICATE-----