Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6e6a2dd7f5a8db4760d97d7226c9a38c3639860a.roa
File:                     6e6a2dd7f5a8db4760d97d7226c9a38c3639860a.roa (raw, json)
Hash identifier:          uRHUQgQx94Hl8ZbCzvEn7lcZmNOfGGLxzkUkTwuoh5o=
Subject key identifier:   AA:BC:59:F7:F7:1B:49:77:BC:6A:31:D5:54:E1:8C:E9:A8:71:7E:DE
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       16E9D1
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6e6a2dd7f5a8db4760d97d7226c9a38c3639860a.roa
Signing time:             Mon 14 Feb 2022 18:01:38 +0000
ROA not before:           Mon 14 Feb 2022 03:00:00 +0000
ROA not after:            Wed 14 Feb 2024 03:00:00 +0000
asID:                     52323
IP address blocks:        2800:600:302::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501649 (0x16e9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Feb 14 03:00:00 2022 GMT
            Not After : Feb 14 03:00:00 2024 GMT
        Subject: CN=6e6a2dd7f5a8db4760d97d7226c9a38c3639860a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:2c:50:86:ee:ae:39:f7:7d:37:b9:cc:98:
                    76:e1:d8:ce:a9:37:19:17:60:6c:59:fa:88:b9:10:
                    8f:78:52:7b:3c:97:fd:32:c6:60:b9:e2:e3:7c:e4:
                    94:1a:67:cd:9a:7b:88:be:fe:32:6f:32:44:20:5d:
                    01:ee:fe:0e:76:20:07:e2:fa:17:21:11:8f:a6:f7:
                    30:32:60:9f:1b:f9:75:7f:c3:f7:cc:54:67:0e:25:
                    fb:b6:5a:e2:ae:63:bb:74:a8:06:c2:6c:88:f9:c8:
                    14:5d:d1:69:a1:30:9b:b1:01:e0:52:e0:9a:2c:4e:
                    1f:ee:3f:3e:d2:21:ca:7b:bf:a2:2a:35:a3:95:cd:
                    a2:cf:e4:b3:08:84:84:7c:e6:b5:ab:9d:0c:3f:be:
                    ea:8a:29:03:83:e1:a4:6d:29:d0:e2:3c:c6:65:f7:
                    61:af:b8:ed:91:bd:10:38:a4:5d:04:b4:3d:16:c1:
                    35:3a:29:d0:a8:49:9a:4f:d6:37:a8:28:e0:6f:59:
                    b7:ee:d6:88:f6:bc:12:1c:7c:7e:9a:48:f8:b7:7f:
                    ec:50:4b:db:9c:ca:29:5b:f7:11:97:7c:c7:90:2d:
                    ce:9d:74:e4:e1:ad:61:b4:2f:61:1e:46:82:f4:8d:
                    d4:54:55:b9:e7:ab:b0:61:8c:5e:5c:00:3b:ab:cd:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BC:59:F7:F7:1B:49:77:BC:6A:31:D5:54:E1:8C:E9:A8:71:7E:DE
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6e6a2dd7f5a8db4760d97d7226c9a38c3639860a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600:302::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:85:e1:21:bf:8f:63:29:74:76:dd:ee:8e:5e:86:e6:a5:
         96:29:8a:0a:f4:cc:e6:05:b4:c2:10:ce:e9:69:e1:1f:0e:47:
         00:1d:19:c5:ce:9b:7d:46:25:ec:dc:ae:d7:c7:f7:68:90:f1:
         76:2b:a0:7d:55:0a:df:84:ea:e5:d6:dd:21:b4:b9:3c:f0:b8:
         0d:ff:cb:43:ef:d5:7e:78:f5:76:6c:00:2a:c9:ea:d0:bd:14:
         6a:62:6b:88:5a:d0:7e:cf:ec:47:38:d3:93:14:b3:1c:f4:18:
         80:d9:3d:f4:9d:d0:17:df:e2:aa:ab:5b:c7:e8:56:5a:28:b6:
         a7:29:91:41:f1:76:0c:46:09:47:aa:64:41:8c:17:b6:6b:b4:
         77:f2:42:0f:95:bc:76:71:0f:17:66:2c:dd:aa:fe:20:d4:ea:
         9d:84:29:fb:12:09:9f:ba:30:a0:5a:8d:e7:a6:5e:29:2a:66:
         b6:20:67:9c:e2:3a:75:67:a3:2d:01:55:1e:45:de:9b:30:a8:
         aa:e5:83:e1:9a:7f:8b:66:d2:20:0c:ee:1f:5d:a2:e2:f3:d7:
         bb:75:66:59:9f:03:43:37:f2:cf:cc:92:9a:fa:0e:53:bb:e8:
         f1:db:f4:4a:a0:55:bd:d6:72:5e:f1:ce:65:28:55:43:a5:c9:
         65:4c:e3:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFunRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjIwMjE0
MDMwMDAwWhcNMjQwMjE0MDMwMDAwWjAzMTEwLwYDVQQDEyg2ZTZhMmRkN2Y1YThk
YjQ3NjBkOTdkNzIyNmM5YTM4YzM2Mzk4NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhp8sUIburjn3fTe5zJh24djOqTcZF2BsWfqIuRCPeFJ7PJf9
MsZgueLjfOSUGmfNmnuIvv4ybzJEIF0B7v4OdiAH4voXIRGPpvcwMmCfG/l1f8P3
zFRnDiX7tlrirmO7dKgGwmyI+cgUXdFpoTCbsQHgUuCaLE4f7j8+0iHKe7+iKjWj
lc2iz+SzCISEfOa1q50MP77qiikDg+GkbSnQ4jzGZfdhr7jtkb0QOKRdBLQ9FsE1
OinQqEmaT9Y3qCjgb1m37taI9rwSHHx+mkj4t3/sUEvbnMopW/cRl3zHkC3OnXTk
4a1htC9hHkaC9I3UVFW556uwYYxeXAA7q81x7QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFKq8Wff3G0l3vGox1VThjOmocX7eMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzZlNmEyZGQ3ZjVhOGRiNDc2MGQ5N2Q3MjI2YzlhMzhjMzYzOTg2MGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgABgADAjANBgkqhkiG9w0BAQsFAAOCAQEAdOKF4SG/j2Mp
dHbd7o5ehuallimKCvTM5gW0whDO6WnhHw5HAB0Zxc6bfUYl7Nyu18f3aJDxdiug
fVUK34Tq5dbdIbS5PPC4Df/LQ+/Vfnj1dmwAKsnq0L0UamJriFrQfs/sRzjTkxSz
HPQYgNk99J3QF9/iqqtbx+hWWii2pymRQfF2DEYJR6pkQYwXtmu0d/JCD5W8dnEP
F2Ys3ar+INTqnYQp+xIJn7owoFqN56ZeKSpmtiBnnOI6dWejLQFVHkXemzCoquWD
4Zp/i2bSIAzuH12i4vPXu3VmWZ8DQzfyz8ySmvoOU7vo8dv0SqBVvdZyXvHOZShV
Q6XJZUzj+Q==
-----END CERTIFICATE-----