Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/c971ca0d0397921088f5af515af04455ff978fc5.roa
File:                     c971ca0d0397921088f5af515af04455ff978fc5.roa (raw, json)
Hash identifier:          BTH+V2CDi3V2R6qEyl6bOwwxhqqMUpEqqtCJyfwQkSw=
Subject key identifier:   90:DD:B7:6D:FA:F4:AC:83:D6:A8:D2:F7:09:BA:EC:65:92:14:EF:12
Certificate issuer:       /CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
Certificate serial:       2853DF
Authority key identifier: D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/c971ca0d0397921088f5af515af04455ff978fc5.roa
Signing time:             Tue 09 Apr 2024 19:49:25 +0000
ROA not before:           Tue 09 Apr 2024 19:49:25 +0000
ROA not after:            Thu 09 Apr 2026 19:49:25 +0000
asID:                     64112
IP address blocks:        2801:14:9000:6::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642911 (0x2853df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
        Validity
            Not Before: Apr  9 19:49:25 2024 GMT
            Not After : Apr  9 19:49:25 2026 GMT
        Subject: CN=c971ca0d0397921088f5af515af04455ff978fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c4:bd:1b:30:4e:2e:f5:ee:d4:e1:22:d3:9c:
                    73:e8:80:68:5b:3f:a9:ca:61:c3:ba:92:89:47:cb:
                    40:d2:4c:73:e3:62:e7:70:6c:9a:52:13:88:d1:e9:
                    16:53:a3:61:05:f1:75:37:eb:30:03:56:54:8f:16:
                    1b:95:f4:47:eb:84:92:19:ed:0b:2f:59:8d:80:81:
                    b7:ae:60:2c:17:ac:81:b6:e0:73:c7:40:1b:1f:2f:
                    3a:17:e2:6f:ba:0f:45:92:b1:17:13:c0:b4:04:42:
                    89:7c:9c:0c:99:c2:84:cc:ff:bc:ba:d9:77:1f:60:
                    6f:a0:d3:3f:9b:e9:02:9b:ec:f4:55:ae:fa:22:cb:
                    0f:a1:3e:29:b4:e5:76:40:62:ae:6b:e5:16:44:c8:
                    ce:85:70:bd:c4:ac:1b:4d:44:b8:30:c9:05:ea:68:
                    36:44:a9:ef:9f:b9:c4:e4:71:4a:69:db:c8:29:c9:
                    c8:67:21:f4:5f:44:7d:82:26:54:b8:b1:f3:1e:1a:
                    21:e6:6b:55:88:d5:f3:5c:96:5c:29:8e:8e:e1:84:
                    18:f2:b7:bc:0e:ff:ed:ca:9d:2b:b2:5f:e9:7a:76:
                    60:bf:32:c1:4f:56:b0:86:5a:f0:bf:0c:ec:89:0b:
                    6a:44:b3:6d:0f:ec:dd:00:ec:98:b7:3f:e8:7f:9a:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DD:B7:6D:FA:F4:AC:83:D6:A8:D2:F7:09:BA:EC:65:92:14:EF:12
            X509v3 Authority Key Identifier:
                keyid:D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/c971ca0d0397921088f5af515af04455ff978fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:9000:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         54:04:5b:69:d6:60:4c:b5:e6:e8:36:cf:3c:22:06:c1:ad:d1:
         9b:18:7f:71:1f:89:57:6f:e6:8f:9a:66:3c:cb:ab:56:65:ce:
         6a:4f:60:73:1f:b6:9f:bb:37:79:73:67:33:37:3b:af:a9:e7:
         5b:bc:16:f5:8e:22:17:66:e4:f3:51:45:6d:1f:c7:4e:07:59:
         a1:3a:a4:ed:c9:fa:4d:97:60:4e:59:85:67:4c:48:7c:42:fb:
         3c:c6:a8:99:19:c0:5e:d9:49:7f:f3:d0:be:bc:7c:86:fb:4d:
         29:ea:2b:48:04:5f:f5:ac:6b:41:91:2a:a9:80:14:4b:b2:c3:
         3f:18:c1:10:c6:12:12:05:13:cd:59:2f:8f:90:73:2c:2c:ab:
         b0:88:0d:2a:70:ff:ab:af:90:ce:16:25:a5:d5:8f:6c:40:b5:
         48:34:4a:09:68:4f:89:f0:ca:eb:8c:4b:ea:df:50:6e:f4:49:
         ec:72:91:e8:06:9f:21:a9:d6:a6:87:f0:e3:f8:7f:f2:c7:7c:
         e8:9f:af:ac:57:ba:a6:4f:f5:95:37:6a:ba:1c:48:4d:21:c2:
         7d:9c:ac:f9:00:7d:f1:e2:db:30:a0:af:eb:b0:41:ab:9d:d7:
         6f:16:f2:67:6b:00:e7:a5:1d:eb:7f:3d:6c:7d:c3:0e:ca:d9:
         c5:91:d0:70
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIDKFPfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MWFhMmRlOWQ4MTIyMWZlZmE1MjRmZDY5NDQ4OWNlOGI2N2M4ZDQwHhcNMjQwNDA5
MTk0OTI1WhcNMjYwNDA5MTk0OTI1WjAzMTEwLwYDVQQDEyhjOTcxY2EwZDAzOTc5
MjEwODhmNWFmNTE1YWYwNDQ1NWZmOTc4ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj8S9GzBOLvXu1OEi05xz6IBoWz+pymHDupKJR8tA0kxz42Ln
cGyaUhOI0ekWU6NhBfF1N+swA1ZUjxYblfRH64SSGe0LL1mNgIG3rmAsF6yBtuBz
x0AbHy86F+Jvug9FkrEXE8C0BEKJfJwMmcKEzP+8utl3H2BvoNM/m+kCm+z0Va76
IssPoT4ptOV2QGKua+UWRMjOhXC9xKwbTUS4MMkF6mg2RKnvn7nE5HFKadvIKcnI
ZyH0X0R9giZUuLHzHhoh5mtViNXzXJZcKY6O4YQY8re8Dv/typ0rsl/penZgvzLB
T1awhlrwvwzsiQtqRLNtD+zdAOyYtz/of5oQdQIDAQABo4ICYDCCAlwwHQYDVR0O
BBYEFJDdt2369KyD1qjS9wm67GWSFO8SMB8GA1UdIwQYMBaAFND0yiB9ta1SrdTk
iAHO3sMCYpgyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgxYWEy
ZGU5ZDgxMjIxZmVmYTUyNGZkNjk0NDg5Y2U4YjY3YzhkNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmUwZGViYjYtYmRhMy00ODI4LTk4NmQtZTJmMTJl
N2E1MjMxL2M5NzFjYTBkMDM5NzkyMTA4OGY1YWY1MTVhZjA0NDU1ZmY5NzhmYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZTBkZWJiNi1iZGEzLTQ4MjgtOTg2ZC1lMmYx
MmU3YTUyMzEvZjgxYWEyZGU5ZDgxMjIxZmVmYTUyNGZkNjk0NDg5Y2U4YjY3Yzhk
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQV
MBMwEQQCAAIwCwMJACgBABSQAAAGMA0GCSqGSIb3DQEBCwUAA4IBAQBUBFtp1mBM
teboNs88IgbBrdGbGH9xH4lXb+aPmmY8y6tWZc5qT2BzH7afuzd5c2czNzuvqedb
vBb1jiIXZuTzUUVtH8dOB1mhOqTtyfpNl2BOWYVnTEh8Qvs8xqiZGcBe2Ul/89C+
vHyG+00p6itIBF/1rGtBkSqpgBRLssM/GMEQxhISBRPNWS+PkHMsLKuwiA0qcP+r
r5DOFiWl1Y9sQLVINEoJaE+J8MrrjEvq31Bu9EnscpHoBp8hqdamh/Dj+H/yx3zo
n6+sV7qmT/WVN2q6HEhNIcJ9nKz5AH3x4tswoK/rsEGrnddvFvJnawDnpR3rfz1s
fcMOytnFkdBw
-----END CERTIFICATE-----