Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/947dfb9d99437b0dd079657d685c19b53b95d9a2.roa
File:                     947dfb9d99437b0dd079657d685c19b53b95d9a2.roa (raw, json)
Hash identifier:          SoFaVre7WUekDgfIs7PuCHF3BjHZT8Wm2TA7a04kXHw=
Subject key identifier:   1F:D9:BD:39:A9:08:69:E2:2D:F5:A2:6B:6A:AE:29:0D:C5:E0:29:72
Certificate issuer:       /CN=e5babceb8619ac5c67e08f3cba305bc7a5427bd2
Certificate serial:       0291
Authority key identifier: F6:65:12:73:01:FA:F6:24:3A:35:FF:3B:B8:3D:F4:29:41:B4:DC:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5babceb8619ac5c67e08f3cba305bc7a5427bd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/947dfb9d99437b0dd079657d685c19b53b95d9a2.roa
Signing time:             Wed 29 Sep 2021 11:04:26 +0000
ROA not before:           Wed 29 Sep 2021 03:00:00 +0000
ROA not after:            Fri 29 Sep 2023 03:00:00 +0000
asID:                     271963
IP address blocks:        2801:18:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5babceb8619ac5c67e08f3cba305bc7a5427bd2
        Validity
            Not Before: Sep 29 03:00:00 2021 GMT
            Not After : Sep 29 03:00:00 2023 GMT
        Subject: CN=947dfb9d99437b0dd079657d685c19b53b95d9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:56:5e:2f:8d:b7:f3:26:59:21:f7:c4:02:
                    0b:2f:db:e1:c5:7c:68:8e:22:e5:ff:2c:a6:2d:e9:
                    fc:ec:42:1d:c3:f6:48:3a:64:ef:d9:03:47:67:28:
                    b7:40:fb:61:c0:7e:bf:8e:77:ef:2e:0c:88:9c:08:
                    fc:54:06:eb:d1:da:61:bf:a2:0a:22:d5:bc:e3:40:
                    64:68:61:a5:bf:12:04:dc:10:9b:58:87:b1:75:ed:
                    56:a2:d2:28:8d:f9:cb:00:05:70:13:73:f1:e5:9b:
                    7c:bc:c0:fa:43:fb:0c:dd:70:b2:98:ca:87:45:13:
                    a3:23:da:4b:38:ca:3e:ff:b4:b5:1f:4f:e9:82:7a:
                    97:0c:ad:1f:01:5c:8d:64:c3:3e:1b:2f:9a:dd:be:
                    86:68:90:db:89:06:69:e2:0d:35:40:cb:e9:e9:54:
                    d4:8b:f1:27:38:2d:ce:42:24:65:f8:a3:a6:f2:07:
                    1a:09:6f:e0:a2:8c:5b:7b:08:33:0f:8d:ad:ba:de:
                    8d:67:c2:e8:12:c2:eb:c8:d3:ba:15:f9:93:ee:50:
                    cb:a9:dd:bc:86:23:45:62:80:fa:03:6a:d1:83:76:
                    d2:d9:3e:b0:0a:1d:2e:9b:9e:c2:64:51:87:e0:c5:
                    9a:46:c0:e8:28:61:dc:3d:df:18:45:4c:fc:cb:19:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:BD:39:A9:08:69:E2:2D:F5:A2:6B:6A:AE:29:0D:C5:E0:29:72
            X509v3 Authority Key Identifier:
                keyid:F6:65:12:73:01:FA:F6:24:3A:35:FF:3B:B8:3D:F4:29:41:B4:DC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5babceb8619ac5c67e08f3cba305bc7a5427bd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/947dfb9d99437b0dd079657d685c19b53b95d9a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/e5babceb8619ac5c67e08f3cba305bc7a5427bd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:8c:9d:8c:dc:76:75:b6:a5:0b:df:c0:2f:73:66:83:22:
         a0:80:f2:9a:73:d7:0c:1d:79:78:3a:3c:6c:73:d4:7a:4b:02:
         f9:39:1e:0c:5b:d4:52:cb:44:87:85:e0:d6:e1:40:4f:36:9f:
         53:8c:18:10:2c:75:32:b0:39:99:d2:ea:a1:1c:78:6e:c6:c8:
         9f:fa:6d:78:fa:fd:ee:3e:b8:86:a2:75:86:7b:f3:c8:e3:46:
         9c:2a:7c:32:a1:ec:d8:19:74:3a:c2:83:95:43:f3:1b:26:29:
         8d:69:0e:3e:0a:f4:99:e4:0b:b1:ff:fa:47:4b:e4:f0:4b:42:
         ae:73:4f:47:e4:76:b8:46:e7:79:bb:17:d0:ec:4f:f2:23:98:
         a1:97:6b:d1:21:09:5e:76:ea:f8:84:0c:bf:9b:f0:e9:9e:e1:
         9b:c9:e5:97:52:36:52:a1:ca:7d:cd:de:b1:33:80:46:17:8b:
         1d:23:d6:d6:a4:d0:21:f8:26:e1:9e:17:f0:d9:0b:12:88:4c:
         3d:60:67:11:aa:1a:52:e4:11:f2:48:c1:68:20:31:0e:ed:4c:
         d6:d0:d2:5c:da:53:e6:f0:a4:f7:c0:4d:48:5d:e6:62:b2:ae:
         4b:ac:10:dd:74:cd:02:2d:7d:aa:4a:78:f7:2e:bc:2a:3b:50:
         a0:af:25:6d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICApEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZTVi
YWJjZWI4NjE5YWM1YzY3ZTA4ZjNjYmEzMDViYzdhNTQyN2JkMjAeFw0yMTA5Mjkw
MzAwMDBaFw0yMzA5MjkwMzAwMDBaMDMxMTAvBgNVBAMTKDk0N2RmYjlkOTk0Mzdi
MGRkMDc5NjU3ZDY4NWMxOWI1M2I5NWQ5YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCSLlZeL4238yZZIffEAgsv2+HFfGiOIuX/LKYt6fzsQh3D9kg6
ZO/ZA0dnKLdA+2HAfr+Od+8uDIicCPxUBuvR2mG/ogoi1bzjQGRoYaW/EgTcEJtY
h7F17Vai0iiN+csABXATc/Hlm3y8wPpD+wzdcLKYyodFE6Mj2ks4yj7/tLUfT+mC
epcMrR8BXI1kwz4bL5rdvoZokNuJBmniDTVAy+npVNSL8Sc4Lc5CJGX4o6byBxoJ
b+CijFt7CDMPja263o1nwugSwuvI07oV+ZPuUMup3byGI0VigPoDatGDdtLZPrAK
HS6bnsJkUYfgxZpGwOgoYdw93xhFTPzLGTlBAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUH9m9OakIaeIt9aJraq4pDcXgKXIwHwYDVR0jBBgwFoAU9mUScwH69iQ6Nf87
uD30KUG03MUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lNWJhYmNl
Yjg2MTlhYzVjNjdlMDhmM2NiYTMwNWJjN2E1NDI3YmQyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hMWI1ODBlZi1lYjk2LTQ0YzMtYmE4YS0xMzQ4Zjg1
YTUzMGQvOTQ3ZGZiOWQ5OTQzN2IwZGQwNzk2NTdkNjg1YzE5YjUzYjk1ZDlhMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ExYjU4MGVmLWViOTYtNDRjMy1iYThhLTEzNDhm
ODVhNTMwZC9lNWJhYmNlYjg2MTlhYzVjNjdlMDhmM2NiYTMwNWJjN2E1NDI3YmQy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEAGBgAMA0GCSqGSIb3DQEBCwUAA4IBAQB4rYydjNx2dbal
C9/AL3NmgyKggPKac9cMHXl4Ojxsc9R6SwL5OR4MW9RSy0SHheDW4UBPNp9TjBgQ
LHUysDmZ0uqhHHhuxsif+m14+v3uPriGonWGe/PI40acKnwyoezYGXQ6woOVQ/Mb
JimNaQ4+CvSZ5Aux//pHS+TwS0Kuc09H5Ha4Rud5uxfQ7E/yI5ihl2vRIQledur4
hAy/m/DpnuGbyeWXUjZSocp9zd6xM4BGF4sdI9bWpNAh+Cbhnhfw2QsSiEw9YGcR
qhpS5BHySMFoIDEO7UzW0NJc2lPm8KT3wE1IXeZisq5LrBDddM0CLX2qSnj3Lrwq
O1CgryVt
-----END CERTIFICATE-----