Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa
File:                     fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa (raw, json)
Hash identifier:          0wGwvutCsS0f9rjFTkuXpSHAofEtbL3t1YjZQ18+8JA=
Subject key identifier:   CC:7C:31:7C:8C:E4:3D:39:0B:10:DB:1B:8C:92:14:94:41:34:B7:06
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E6632
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa
Signing time:             Wed 24 Mar 2021 14:38:32 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     26613
IP address blocks:        2800:370:4::/48 maxlen: 64
                          2800:370:18::/48 maxlen: 64
                          2800:370:3e::/48 maxlen: 64
                          2800:370:4007::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943666 (0xe6632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=fe6f4cdac64805324a8927c1ff815d7ad26cbcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:a9:8f:2d:a7:dc:fd:09:b1:cd:76:5d:6c:
                    0a:e8:76:5f:8d:ee:07:76:81:8f:25:25:b5:61:20:
                    07:b0:f7:ff:39:c6:dd:e4:b9:60:cc:61:48:3f:33:
                    f8:a4:48:8b:32:aa:57:73:3e:2e:93:e0:8a:52:2d:
                    41:ed:5d:56:27:1c:fb:2a:d4:78:34:07:fa:89:f8:
                    23:48:c6:e0:59:4c:b6:19:c7:67:16:22:07:80:30:
                    53:bf:52:6f:35:e2:99:56:1f:8a:43:d6:e2:62:4b:
                    ec:59:a8:22:c4:63:4e:40:71:58:9a:96:a6:89:7e:
                    dc:44:67:82:8e:f4:2c:76:ed:ec:05:5c:e8:35:2e:
                    40:c6:23:6c:f2:5d:ab:ee:3a:9a:6b:5c:46:d1:aa:
                    1b:cb:76:51:f0:37:01:2a:e1:fb:38:a6:2f:e2:73:
                    30:51:af:44:e2:16:cc:be:0e:c2:fc:cd:cf:32:34:
                    80:56:c8:6e:b5:80:05:c0:d6:b7:a4:6f:75:7e:95:
                    08:6c:82:40:ec:60:fd:41:50:a9:e0:9d:07:a7:6e:
                    a1:14:99:b9:94:bb:6e:8b:93:a6:8d:bf:ac:ab:1b:
                    51:a6:dc:52:3e:7e:e0:ae:b6:30:8c:7e:cf:e0:01:
                    7d:ff:03:01:39:04:e6:f4:30:c4:87:53:33:86:0b:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:31:7C:8C:E4:3D:39:0B:10:DB:1B:8C:92:14:94:41:34:B7:06
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fe6f4cdac64805324a8927c1ff815d7ad26cbcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:370:4::/48
                  2800:370:18::/48
                  2800:370:3e::/48
                  2800:370:4007::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:15:a6:da:32:79:fa:15:28:90:2f:3d:af:10:6f:6e:58:2c:
         13:fd:7e:2d:f1:aa:53:62:10:f9:94:a8:c8:ef:f1:55:31:3e:
         62:74:23:33:19:01:c4:06:cc:e9:c3:5b:39:fe:a1:a2:b9:c7:
         2e:5e:92:36:95:97:9d:43:52:8d:77:16:9c:8a:05:56:90:84:
         c1:91:77:cf:22:25:81:d7:ca:b9:c1:2e:3f:94:0f:13:97:8a:
         87:aa:a8:64:e5:d5:50:76:f9:48:9e:bb:29:1c:b7:df:f0:1a:
         16:0b:f1:3f:ad:e1:cb:bb:c5:f5:51:4a:7e:e3:53:f2:5d:d6:
         e2:e3:44:1f:b5:d9:88:93:d8:86:be:76:fc:6d:ee:7c:9c:b1:
         40:33:d9:42:7b:28:71:1b:58:28:42:54:02:88:3e:d7:bb:a3:
         fe:bb:65:f6:03:91:22:59:30:9f:14:d5:b5:9e:af:3e:ae:eb:
         f6:ea:e3:b7:7c:9f:af:d5:e1:09:c0:25:81:1a:ec:77:d8:97:
         4f:20:f0:13:a3:ed:70:26:7b:6c:49:34:5d:09:af:e2:f3:2b:
         0f:f1:b5:69:d7:5d:c4:d2:ae:4d:20:d4:60:79:9b:61:51:b5:
         ba:3f:ac:fb:8e:61:20:f7:e2:1c:6a:f6:e7:3d:94:9b:c3:55:
         30:b0:d8:58
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIDDmYyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjEwMzI0
MTQzODMxWhcNMjYwMzI0MTQzODMxWjAzMTEwLwYDVQQDEyhmZTZmNGNkYWM2NDgw
NTMyNGE4OTI3YzFmZjgxNWQ3YWQyNmNiY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjGipjy2n3P0Jsc12XWwK6HZfje4HdoGPJSW1YSAHsPf/Ocbd
5LlgzGFIPzP4pEiLMqpXcz4uk+CKUi1B7V1WJxz7KtR4NAf6ifgjSMbgWUy2Gcdn
FiIHgDBTv1JvNeKZVh+KQ9biYkvsWagixGNOQHFYmpamiX7cRGeCjvQsdu3sBVzo
NS5AxiNs8l2r7jqaa1xG0aoby3ZR8DcBKuH7OKYv4nMwUa9E4hbMvg7C/M3PMjSA
VshutYAFwNa3pG91fpUIbIJA7GD9QVCp4J0Hp26hFJm5lLtui5Omjb+sqxtRptxS
Pn7grrYwjH7P4AF9/wMBOQTm9DDEh1MzhgvvvQIDAQABo4ICeTCCAnUwHQYDVR0O
BBYEFMx8MXyM5D05CxDbG4ySFJRBNLcGMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5L2ZlNmY0Y2RhYzY0ODA1MzI0YTg5MjdjMWZmODE1ZDdhZDI2Y2JjYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQu
MCwwKgQCAAIwJAMHACgAA3AABAMHACgAA3AAGAMHACgAA3AAPgMHACgAA3BABzAN
BgkqhkiG9w0BAQsFAAOCAQEAFxWm2jJ5+hUokC89rxBvblgsE/1+LfGqU2IQ+ZSo
yO/xVTE+YnQjMxkBxAbM6cNbOf6hornHLl6SNpWXnUNSjXcWnIoFVpCEwZF3zyIl
gdfKucEuP5QPE5eKh6qoZOXVUHb5SJ67KRy33/AaFgvxP63hy7vF9VFKfuNT8l3W
4uNEH7XZiJPYhr52/G3ufJyxQDPZQnsocRtYKEJUAog+17uj/rtl9gORIlkwnxTV
tZ6vPq7r9urjt3yfr9XhCcAlgRrsd9iXTyDwE6PtcCZ7bEk0XQmv4vMrD/G1addd
xNKuTSDUYHmbYVG1uj+s+45hIPfiHGr25z2Um8NVMLDYWA==
-----END CERTIFICATE-----