Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/1227518dc8b1b2b89fb2d08c1f2b01a33910fef1.roa
File:                     1227518dc8b1b2b89fb2d08c1f2b01a33910fef1.roa (raw, json)
Hash identifier:          Z8YOFJlx/wVz1JsYdoTchNYXOem7EXw912ryHVkt1Kg=
Subject key identifier:   33:E7:84:66:54:1D:FE:E0:2A:14:39:EF:71:27:F3:95:C2:ED:6B:F8
Certificate issuer:       /CN=f7fac38e0e71569318fbf63b7f8ceb000d19d4ca
Certificate serial:       1521F9
Authority key identifier: 5F:7D:25:E2:D1:A1:B1:AC:9E:5F:13:A2:B9:AA:F4:3D:D1:B6:18:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/1227518dc8b1b2b89fb2d08c1f2b01a33910fef1.roa
Signing time:             Fri 14 Jul 2023 08:30:00 +0000
ROA not before:           Thu 13 Jul 2023 08:30:00 +0000
ROA not after:            Sat 12 Jul 2025 08:30:00 +0000
asID:                     271833
IP address blocks:        2801:1d6::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384953 (0x1521f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac38e0e71569318fbf63b7f8ceb000d19d4ca
        Validity
            Not Before: Jul 13 08:30:00 2023 GMT
            Not After : Jul 12 08:30:00 2025 GMT
        Subject: CN=1227518dc8b1b2b89fb2d08c1f2b01a33910fef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:9f:ae:02:e3:6c:2d:78:fd:a2:17:23:f7:
                    2f:14:2d:54:59:d4:4b:cb:e3:96:2a:39:0e:c7:39:
                    be:78:50:15:7a:87:20:e2:a1:68:39:8c:a7:6f:b9:
                    c5:e4:5d:b0:ac:f3:a4:60:42:f7:bd:58:01:89:91:
                    21:43:71:d6:61:f3:81:21:7c:ac:c4:73:5a:f4:17:
                    bf:fb:8a:27:f0:3a:94:e5:e9:f4:e6:a7:fa:b9:77:
                    fe:44:51:8d:12:f3:0b:80:23:e7:82:42:46:2c:a4:
                    ee:2f:5b:4b:5c:11:51:d8:3e:db:7f:70:d4:6e:58:
                    e3:5f:ea:08:f9:66:da:b9:ea:e0:2a:bf:32:87:4c:
                    d2:d0:45:34:d5:fc:68:11:a3:2d:bf:4a:4d:38:cd:
                    ee:7b:13:6f:f4:4d:f7:0a:f9:17:7e:c1:50:09:0e:
                    13:37:50:9c:f6:c1:5a:b9:5f:01:32:6b:24:ba:a8:
                    da:89:22:77:3f:91:ec:c9:89:74:13:d8:62:4c:20:
                    46:36:1a:85:2e:59:56:e3:0f:3f:e7:62:c5:98:53:
                    15:55:21:a7:05:15:69:ad:c1:a9:ca:90:b7:56:f6:
                    14:3d:c2:ba:cb:ce:52:f8:a7:c9:8f:98:bd:9a:3a:
                    a0:38:0e:56:de:86:4c:c1:9a:23:3a:3d:bf:3e:08:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:84:66:54:1D:FE:E0:2A:14:39:EF:71:27:F3:95:C2:ED:6B:F8
            X509v3 Authority Key Identifier:
                keyid:5F:7D:25:E2:D1:A1:B1:AC:9E:5F:13:A2:B9:AA:F4:3D:D1:B6:18:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/1227518dc8b1b2b89fb2d08c1f2b01a33910fef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d6::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:d8:bf:f1:e8:2d:49:5e:e4:8f:75:41:cd:13:5c:72:fc:
         bb:f3:39:df:f9:e8:97:4b:79:0a:c9:ae:8b:75:58:9c:c1:cf:
         25:0f:2c:5c:e9:c0:82:41:72:86:4f:d9:a7:69:49:0c:ee:d3:
         ae:ff:53:01:80:c7:0f:3d:44:7b:db:9f:bd:79:7c:95:2c:26:
         88:d2:e7:18:69:5c:b0:17:a4:71:10:2b:4b:4b:5b:b0:74:ce:
         b9:f6:ad:7a:50:bb:c5:63:a5:c7:c2:2c:9a:ff:1d:18:8c:87:
         29:81:a4:c5:5c:a4:6c:52:c1:01:17:9b:ef:bb:2f:84:73:58:
         12:78:79:48:c3:73:af:61:e4:d2:4f:56:8a:dc:16:6b:88:46:
         ed:0a:7e:6a:35:d1:49:9a:59:a2:d4:8a:ec:45:ea:e3:2d:41:
         6d:d6:aa:5f:1e:74:d3:bc:38:cd:23:cc:17:7e:5f:04:84:44:
         0f:6a:18:85:6a:b2:c9:8d:0b:3a:9a:09:7e:74:b6:71:47:1f:
         89:ce:21:30:f4:eb:b8:da:fd:5d:bb:a7:c4:5f:c9:40:4c:6d:
         be:42:56:ed:bf:8b:0f:22:86:60:c2:0e:93:b0:76:7e:ba:6f:
         00:b3:cf:a0:37:b3:7e:b2:ea:c6:53:df:f9:15:bb:f3:36:87:
         b9:81:7f:62
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDFSH5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY3
ZmFjMzhlMGU3MTU2OTMxOGZiZjYzYjdmOGNlYjAwMGQxOWQ0Y2EwHhcNMjMwNzEz
MDgzMDAwWhcNMjUwNzEyMDgzMDAwWjAzMTEwLwYDVQQDEygxMjI3NTE4ZGM4YjFi
MmI4OWZiMmQwOGMxZjJiMDFhMzM5MTBmZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlXifrgLjbC14/aIXI/cvFC1UWdRLy+OWKjkOxzm+eFAVeocg
4qFoOYynb7nF5F2wrPOkYEL3vVgBiZEhQ3HWYfOBIXysxHNa9Be/+4on8DqU5en0
5qf6uXf+RFGNEvMLgCPngkJGLKTuL1tLXBFR2D7bf3DUbljjX+oI+WbauergKr8y
h0zS0EU01fxoEaMtv0pNOM3uexNv9E33CvkXfsFQCQ4TN1Cc9sFauV8BMmskuqja
iSJ3P5HsyYl0E9hiTCBGNhqFLllW4w8/52LFmFMVVSGnBRVprcGpypC3VvYUPcK6
y85S+KfJj5i9mjqgOA5W3oZMwZojOj2/PgikJwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFDPnhGZUHf7gKhQ573En85XC7Wv4MB8GA1UdIwQYMBaAFF99JeLRobGsnl8T
ormq9D3RthjEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjdmYWMz
OGUwZTcxNTY5MzE4ZmJmNjNiN2Y4Y2ViMDAwZDE5ZDRjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2U1ODdlNWEtZjQwMS00MmE0LWJhMDMtZTAwOGNh
Y2U3NjY4LzEyMjc1MThkYzhiMWIyYjg5ZmIyZDA4YzFmMmIwMWEzMzkxMGZlZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZTU4N2U1YS1mNDAxLTQyYTQtYmEwMy1lMDA4
Y2FjZTc2NjgvZjdmYWMzOGUwZTcxNTY5MzE4ZmJmNjNiN2Y4Y2ViMDAwZDE5ZDRj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgBAdYAMA0GCSqGSIb3DQEBCwUAA4IBAQAhzti/8egtSV7k
j3VBzRNccvy78znf+eiXS3kKya6LdVicwc8lDyxc6cCCQXKGT9mnaUkM7tOu/1MB
gMcPPUR725+9eXyVLCaI0ucYaVywF6RxECtLS1uwdM659q16ULvFY6XHwiya/x0Y
jIcpgaTFXKRsUsEBF5vvuy+Ec1gSeHlIw3OvYeTST1aK3BZriEbtCn5qNdFJmlmi
1IrsRerjLUFt1qpfHnTTvDjNI8wXfl8EhEQPahiFarLJjQs6mgl+dLZxRx+JziEw
9Ou42v1du6fEX8lATG2+Qlbtv4sPIoZgwg6TsHZ+um8As8+gN7N+surGU9/5Fbvz
Noe5gX9i
-----END CERTIFICATE-----