Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/255a81e673eedb4a16571d349b7fe702d29bf48f.roa
File:                     255a81e673eedb4a16571d349b7fe702d29bf48f.roa (raw, json)
Hash identifier:          i+p51mR1g4wXEKyIzDBnwSc5rIlPk/E9JQILYOgtcDM=
Subject key identifier:   4B:A4:AD:AC:EE:B2:63:CB:05:62:A2:E4:12:32:F3:9B:D9:E0:BD:E9
Certificate issuer:       /CN=e486bb439ce56e99ede5cf3e73d7c94f7a24897f
Certificate serial:       0106B5
Authority key identifier: 84:5D:ED:88:E9:2A:D8:26:0B:0D:6F:F0:03:1D:23:C7:A6:CD:79:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/255a81e673eedb4a16571d349b7fe702d29bf48f.roa
Signing time:             Tue 30 May 2023 21:32:28 +0000
ROA not before:           Mon 29 May 2023 21:32:28 +0000
ROA not after:            Fri 30 May 2025 21:32:28 +0000
asID:                     14080
IP address blocks:        2801:1d:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67253 (0x106b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e486bb439ce56e99ede5cf3e73d7c94f7a24897f
        Validity
            Not Before: May 29 21:32:28 2023 GMT
            Not After : May 30 21:32:28 2025 GMT
        Subject: CN=255a81e673eedb4a16571d349b7fe702d29bf48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:0b:bf:96:49:35:4f:2a:b6:c1:d8:14:66:
                    e3:29:33:20:ae:fd:af:69:8e:8f:6b:0b:af:b8:cb:
                    cd:33:ed:91:d1:13:74:08:ca:ed:1b:c6:e9:eb:f2:
                    db:19:b3:a8:e8:e4:2b:55:c5:9a:06:15:a9:71:99:
                    f7:7c:93:9f:c4:aa:ec:7f:3d:d9:ae:0d:c1:3f:02:
                    ab:1b:b6:60:a2:c8:a3:ea:ef:ea:11:dc:05:9d:78:
                    60:2a:91:72:a5:3d:96:24:cf:31:89:ce:64:36:15:
                    d5:25:04:40:56:ce:b1:43:54:c9:2f:39:37:8c:8c:
                    70:2e:9c:5a:db:29:3b:33:6b:a5:1f:7a:78:f4:38:
                    86:c4:b3:5e:0e:b6:c8:f7:5b:c5:95:30:f4:be:c6:
                    96:29:ff:7b:a5:88:0c:28:b7:eb:bb:e3:9c:b6:de:
                    a0:ce:8c:72:6d:45:3d:9d:39:b4:81:52:2d:d6:3c:
                    93:66:3b:65:ed:8c:15:4e:48:ca:c0:7c:d8:15:32:
                    42:86:54:ff:9d:7b:b3:0c:17:3f:4c:1f:3d:03:33:
                    ba:a9:65:05:5e:71:5a:5a:e4:32:fb:01:c5:8e:5e:
                    bf:e2:b9:87:e9:93:d4:17:5e:59:10:ba:fa:3b:b5:
                    f2:5b:b9:8b:e9:45:37:e1:b6:5a:e2:25:20:7c:57:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A4:AD:AC:EE:B2:63:CB:05:62:A2:E4:12:32:F3:9B:D9:E0:BD:E9
            X509v3 Authority Key Identifier:
                keyid:84:5D:ED:88:E9:2A:D8:26:0B:0D:6F:F0:03:1D:23:C7:A6:CD:79:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/255a81e673eedb4a16571d349b7fe702d29bf48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:0e:7a:c1:d2:6d:5f:6b:c7:00:e3:4b:7a:f2:d1:c0:f7:
         01:eb:61:b9:80:9f:16:93:a3:79:ee:32:96:53:5a:fd:e4:83:
         47:43:d6:73:86:26:9c:96:b2:ca:8e:1c:a3:89:9a:26:04:4a:
         ad:bc:18:d7:17:cd:09:fc:d3:2c:fa:79:29:0b:21:aa:77:69:
         ad:ea:40:4d:11:7f:32:95:2d:6c:5a:dd:2a:a4:c6:09:09:74:
         45:e3:90:0e:0c:b7:ad:f2:48:fa:e4:eb:96:e3:b3:ad:4d:b6:
         2c:2c:83:24:8b:74:2b:e4:bf:40:38:7c:e4:fd:8b:80:69:34:
         72:e6:b5:c0:06:b8:ac:9c:31:61:ff:fe:50:6b:59:6e:86:0e:
         7d:15:44:33:0f:e5:1e:1e:a3:0e:7e:8f:31:82:7f:6c:c8:b1:
         24:e9:b3:8c:17:93:45:4e:97:3e:4f:fc:51:b7:2c:42:ab:23:
         c7:2a:1c:ec:55:de:8b:a4:da:a7:72:a3:4d:45:6b:da:45:19:
         4f:b1:24:fc:05:5d:3b:6b:34:37:0e:9d:57:01:96:91:c8:3a:
         f4:a4:b0:b6:4e:78:77:65:6e:34:ac:0e:d8:78:7f:e8:7d:cb:
         cc:92:ab:9b:0b:d2:4f:20:1e:37:89:32:87:d4:ed:0f:a6:6f:
         0e:cf:8b:4c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAQa1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0
ODZiYjQzOWNlNTZlOTllZGU1Y2YzZTczZDdjOTRmN2EyNDg5N2YwHhcNMjMwNTI5
MjEzMjI4WhcNMjUwNTMwMjEzMjI4WjAzMTEwLwYDVQQDEygyNTVhODFlNjczZWVk
YjRhMTY1NzFkMzQ5YjdmZTcwMmQyOWJmNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlQALv5ZJNU8qtsHYFGbjKTMgrv2vaY6PawuvuMvNM+2R0RN0
CMrtG8bp6/LbGbOo6OQrVcWaBhWpcZn3fJOfxKrsfz3Zrg3BPwKrG7Zgosij6u/q
EdwFnXhgKpFypT2WJM8xic5kNhXVJQRAVs6xQ1TJLzk3jIxwLpxa2yk7M2ulH3p4
9DiGxLNeDrbI91vFlTD0vsaWKf97pYgMKLfru+Octt6gzoxybUU9nTm0gVIt1jyT
Zjtl7YwVTkjKwHzYFTJChlT/nXuzDBc/TB89AzO6qWUFXnFaWuQy+wHFjl6/4rmH
6ZPUF15ZELr6O7XyW7mL6UU34bZa4iUgfFdtqQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEukrazusmPLBWKi5BIy85vZ4L3pMB8GA1UdIwQYMBaAFIRd7YjpKtgmCw1v
8AMdI8emzXkjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTQ4NmJi
NDM5Y2U1NmU5OWVkZTVjZjNlNzNkN2M5NGY3YTI0ODk3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDQ0ZDM0MmYtNTM0YS00MmMwLTg2MmItN2NiYjFk
NTllZDlmLzI1NWE4MWU2NzNlZWRiNGExNjU3MWQzNDliN2ZlNzAyZDI5YmY0OGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNDRkMzQyZi01MzRhLTQyYzAtODYyYi03Y2Ji
MWQ1OWVkOWYvZTQ4NmJiNDM5Y2U1NmU5OWVkZTVjZjNlNzNkN2M5NGY3YTI0ODk3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB3gADANBgkqhkiG9w0BAQsFAAOCAQEAU/YOesHSbV9r
xwDjS3ry0cD3AethuYCfFpOjee4yllNa/eSDR0PWc4YmnJayyo4co4maJgRKrbwY
1xfNCfzTLPp5KQshqndprepATRF/MpUtbFrdKqTGCQl0ReOQDgy3rfJI+uTrluOz
rU22LCyDJIt0K+S/QDh85P2LgGk0cua1wAa4rJwxYf/+UGtZboYOfRVEMw/lHh6j
Dn6PMYJ/bMixJOmzjBeTRU6XPk/8UbcsQqsjxyoc7FXei6Tap3KjTUVr2kUZT7Ek
/AVdO2s0Nw6dVwGWkcg69KSwtk54d2VuNKwO2Hh/6H3LzJKrmwvSTyAeN4kyh9Tt
D6ZvDs+LTA==
-----END CERTIFICATE-----