Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/871e21ac1a8fc0ff940ed6d2ac2fd07be1b0e358.roa
File:                     871e21ac1a8fc0ff940ed6d2ac2fd07be1b0e358.roa (raw, json)
Hash identifier:          bY/p0PlTKxN3/mFNFlkn5n8uyg7lCszJgcJ3frX2+Lk=
Subject key identifier:   1F:5D:0C:28:74:65:DA:C8:35:96:89:04:50:A0:C0:68:04:B1:5D:74
Certificate issuer:       /CN=bf7db3c4cf5f605f41b402229d28442a44a929a9
Certificate serial:       48FB
Authority key identifier: 35:78:C0:3B:A5:D6:EE:9B:FB:2F:31:52:B6:2A:6C:36:15:38:86:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf7db3c4cf5f605f41b402229d28442a44a929a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/871e21ac1a8fc0ff940ed6d2ac2fd07be1b0e358.roa
Signing time:             Fri 29 Dec 2023 15:18:46 +0000
ROA not before:           Fri 29 Dec 2023 15:18:46 +0000
ROA not after:            Mon 29 Dec 2025 15:18:46 +0000
asID:                     27941
IP address blocks:        2801:18:7800::/52 maxlen: 52

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18683 (0x48fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7db3c4cf5f605f41b402229d28442a44a929a9
        Validity
            Not Before: Dec 29 15:18:46 2023 GMT
            Not After : Dec 29 15:18:46 2025 GMT
        Subject: CN=871e21ac1a8fc0ff940ed6d2ac2fd07be1b0e358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:88:45:c6:51:a1:6b:71:7d:8e:dd:db:fc:d4:
                    44:e4:49:2e:2b:d4:58:9b:48:b4:be:e7:a2:6c:50:
                    08:c8:46:4e:66:f2:c1:d9:55:51:d5:b0:55:0c:ee:
                    0d:f7:4b:b1:a5:36:8d:5e:d1:7d:30:95:0c:85:d3:
                    5e:ef:88:4c:de:48:90:95:23:b1:55:d2:16:d7:cc:
                    4b:7a:3e:e2:22:22:ff:09:9b:89:ef:2a:5f:04:af:
                    92:c3:1d:20:a8:21:ca:cc:5a:83:34:9f:55:f8:39:
                    98:de:b9:e8:53:8d:4f:ef:06:b6:51:9c:8c:9b:a6:
                    89:3f:62:ae:0f:17:29:29:3f:de:10:e5:50:32:ab:
                    91:c0:df:1b:94:1f:3d:7e:d5:6d:b7:b6:90:db:7d:
                    af:9a:38:16:85:8c:48:11:25:8c:14:a8:02:dc:1a:
                    8b:9f:92:f7:90:14:1b:f3:98:19:dc:7d:50:1c:55:
                    0a:1e:71:b4:c7:2b:42:3c:7b:f9:75:9d:25:33:95:
                    31:da:5b:52:12:f6:d9:dc:90:c3:48:f4:59:09:44:
                    76:1e:e6:e9:9f:9a:d3:63:31:0b:2d:99:02:4c:05:
                    2a:ba:f9:8d:26:f6:d0:f0:b2:c0:eb:67:dd:1a:77:
                    c5:fa:10:0c:43:cb:aa:9e:ae:37:0d:12:d2:9b:e2:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5D:0C:28:74:65:DA:C8:35:96:89:04:50:A0:C0:68:04:B1:5D:74
            X509v3 Authority Key Identifier:
                keyid:35:78:C0:3B:A5:D6:EE:9B:FB:2F:31:52:B6:2A:6C:36:15:38:86:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf7db3c4cf5f605f41b402229d28442a44a929a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/871e21ac1a8fc0ff940ed6d2ac2fd07be1b0e358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/bf7db3c4cf5f605f41b402229d28442a44a929a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:7800::/52

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:b0:5c:f4:56:6e:cb:8f:d4:2a:c0:81:e5:98:27:b4:a5:
         44:96:da:6e:36:9a:bc:b7:5f:a9:8d:6b:d2:4d:0b:17:26:b7:
         61:df:af:bb:fa:eb:53:44:86:89:1f:73:a2:e8:8a:41:59:cd:
         a1:ec:4d:90:46:33:cb:38:ba:14:c8:9a:ea:fd:9e:2d:67:a3:
         cd:4b:9d:49:de:a1:4f:45:af:3d:ad:9a:70:a2:e1:60:f1:fc:
         ad:a1:9c:ca:b6:8b:02:00:57:7e:35:ac:7a:be:93:02:fc:e4:
         4d:bf:4e:89:84:9c:f5:e7:82:cf:aa:e8:a6:f0:72:e9:ee:70:
         ce:b7:49:6c:cb:3c:73:64:aa:f4:b6:62:51:50:30:d7:c4:08:
         4d:65:7f:d9:ad:46:85:87:87:78:0b:c5:08:40:80:4a:a5:e3:
         ff:67:f5:c8:e3:e0:cc:12:51:54:3b:8b:96:c4:1b:3b:a2:c8:
         51:80:20:fa:33:5a:20:55:e0:08:8a:a0:f6:73:d6:b7:ef:bf:
         61:1f:e7:27:7a:1b:10:75:69:5b:88:ee:28:cd:cc:7b:67:f1:
         f3:1b:65:e0:de:0a:4f:a5:0a:d5:b5:ad:59:7e:8c:d8:99:9e:
         af:c7:e7:32:08:8b:c4:43:a5:ed:c3:12:38:c7:80:43:a3:f1:
         2c:5e:a4:f0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgICSPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYmY3
ZGIzYzRjZjVmNjA1ZjQxYjQwMjIyOWQyODQ0MmE0NGE5MjlhOTAeFw0yMzEyMjkx
NTE4NDZaFw0yNTEyMjkxNTE4NDZaMDMxMTAvBgNVBAMTKDg3MWUyMWFjMWE4ZmMw
ZmY5NDBlZDZkMmFjMmZkMDdiZTFiMGUzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCAiEXGUaFrcX2O3dv81ETkSS4r1FibSLS+56JsUAjIRk5m8sHZ
VVHVsFUM7g33S7GlNo1e0X0wlQyF017viEzeSJCVI7FV0hbXzEt6PuIiIv8Jm4nv
Kl8Er5LDHSCoIcrMWoM0n1X4OZjeuehTjU/vBrZRnIybpok/Yq4PFykpP94Q5VAy
q5HA3xuUHz1+1W23tpDbfa+aOBaFjEgRJYwUqALcGoufkveQFBvzmBncfVAcVQoe
cbTHK0I8e/l1nSUzlTHaW1IS9tnckMNI9FkJRHYe5umfmtNjMQstmQJMBSq6+Y0m
9tDwssDrZ90ad8X6EAxDy6qerjcNEtKb4t4RAgMBAAGjggJfMIICWzAdBgNVHQ4E
FgQUH10MKHRl2sg1lokEUKDAaASxXXQwHwYDVR0jBBgwFoAUNXjAO6XW7pv7LzFS
tipsNhU4hrUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iZjdkYjNj
NGNmNWY2MDVmNDFiNDAyMjI5ZDI4NDQyYTQ0YTkyOWE5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hODJkYjBiNC1iNjFhLTRlNDQtYTdjMi03ZThjNDVh
YWFmNDYvODcxZTIxYWMxYThmYzBmZjk0MGVkNmQyYWMyZmQwN2JlMWIwZTM1OC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2E4MmRiMGI0LWI2MWEtNGU0NC1hN2MyLTdlOGM0
NWFhYWY0Ni9iZjdkYjNjNGNmNWY2MDVmNDFiNDAyMjI5ZDI4NDQyYTQ0YTkyOWE5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQw
EjAQBAIAAjAKAwgEKAEAGHgAADANBgkqhkiG9w0BAQsFAAOCAQEAelCwXPRWbsuP
1CrAgeWYJ7SlRJbabjaavLdfqY1r0k0LFya3Yd+vu/rrU0SGiR9zouiKQVnNoexN
kEYzyzi6FMia6v2eLWejzUudSd6hT0WvPa2acKLhYPH8raGcyraLAgBXfjWser6T
AvzkTb9OiYSc9eeCz6ropvBy6e5wzrdJbMs8c2Sq9LZiUVAw18QITWV/2a1GhYeH
eAvFCECASqXj/2f1yOPgzBJRVDuLlsQbO6LIUYAg+jNaIFXgCIqg9nPWt++/YR/n
J3obEHVpW4juKM3Me2fx8xtl4N4KT6UK1bWtWX6M2Jmer8fnMgiLxEOl7cMSOMeA
Q6PxLF6k8A==
-----END CERTIFICATE-----