Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/2b129b2b450ab42fa35678bac3435b41b2efc36f.roa
File:                     2b129b2b450ab42fa35678bac3435b41b2efc36f.roa (raw, json)
Hash identifier:          tdeN5D7hZsglxHns5FiAzesrnC7HSs+dDnWhRmvD8fc=
Subject key identifier:   23:F1:35:7A:35:86:23:EF:7D:A2:58:35:3D:70:09:22:A7:D1:26:FB
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DE2EF
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/2b129b2b450ab42fa35678bac3435b41b2efc36f.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     21433
IP address blocks:        2801:1f0:4028::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910063 (0xde2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=2b129b2b450ab42fa35678bac3435b41b2efc36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:3b:dd:df:cd:33:6c:db:25:14:ff:00:51:
                    ff:9b:ec:a3:7b:6e:96:a9:02:0c:6a:a5:92:a3:1d:
                    5a:3a:63:b0:6e:f2:38:7c:ba:88:ee:52:aa:df:e2:
                    16:b1:98:0e:68:ba:3d:ad:53:2a:61:c2:3f:a2:b4:
                    88:95:85:a0:33:8c:6e:d5:7f:64:36:4f:43:de:34:
                    e4:c1:9a:09:d0:75:57:c8:27:57:dd:2a:94:d6:ff:
                    d2:c9:4e:e8:0b:4d:1c:1c:67:eb:c6:51:0a:df:9a:
                    bc:7e:e1:e0:d7:00:5b:66:8e:ff:92:b0:d6:01:3a:
                    4d:d6:9b:c8:d8:9c:c6:fb:3c:30:5e:f9:d6:e5:d1:
                    7d:70:b4:11:75:85:0e:64:30:ae:5d:9a:9c:8e:1f:
                    63:d3:8b:ea:37:aa:80:b5:9d:eb:35:29:09:2a:92:
                    9b:56:c5:8d:ae:5d:ea:7f:a8:5c:39:b8:3b:43:71:
                    0b:00:e2:bf:a1:af:a4:cf:9f:fc:8c:24:74:bf:6c:
                    b3:0d:39:05:31:26:ce:59:4e:e0:b9:af:23:69:4d:
                    77:6f:f3:44:72:0c:c2:90:82:2b:a8:40:34:9d:fd:
                    ee:b3:c9:c9:89:08:0d:85:3e:8e:15:d5:ce:ab:b1:
                    58:32:7e:9f:fa:d7:30:af:6a:1c:eb:77:65:88:15:
                    a7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F1:35:7A:35:86:23:EF:7D:A2:58:35:3D:70:09:22:A7:D1:26:FB
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/2b129b2b450ab42fa35678bac3435b41b2efc36f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4028::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:57:ee:23:11:a7:5e:d4:9a:d7:80:08:f6:11:ec:6d:14:c5:
         8c:ec:95:83:96:c9:e5:5c:ee:2e:9b:b7:49:08:93:8e:b4:3a:
         40:c2:f8:e0:03:6e:a0:ca:1c:44:3a:76:28:48:0c:86:7a:ed:
         d5:93:ca:69:ae:5c:db:00:35:4a:a3:98:97:24:b3:72:16:27:
         74:bb:07:9c:bf:61:49:e8:e1:e2:28:06:fe:d7:f2:1c:bb:29:
         6c:a9:8c:e2:d6:bf:9e:1b:0b:a8:31:4b:3d:af:61:17:5f:72:
         99:e0:9f:03:c3:b1:74:8b:b8:e0:ad:cf:6b:66:83:b1:41:8d:
         3d:4c:58:67:14:09:40:20:5f:8d:e0:a7:1a:54:7c:a4:90:ec:
         e5:5c:d7:35:7c:77:7c:a5:80:39:ff:45:b2:76:1b:3a:69:9e:
         03:00:c6:58:5b:24:3e:e5:6c:27:7f:02:45:de:98:8b:f2:87:
         ed:80:ae:76:0d:63:61:60:fa:39:5e:90:99:cc:d2:34:3f:e7:
         97:d2:e8:67:f3:52:97:e1:87:c3:0a:53:07:6d:13:ba:ab:6b:
         bc:49:03:a3:8c:51:cb:ca:85:0f:98:da:b1:5a:d9:f2:9c:60:
         83:8d:ce:4a:98:6f:e1:13:cb:e8:e8:f9:c4:b2:cf:80:e3:53:
         29:7c:d8:aa
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDeLvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEygyYjEyOWIyYjQ1MGFi
NDJmYTM1Njc4YmFjMzQzNWI0MWIyZWZjMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlm873d/NM2zbJRT/AFH/m+yje26WqQIMaqWSox1aOmOwbvI4
fLqI7lKq3+IWsZgOaLo9rVMqYcI/orSIlYWgM4xu1X9kNk9D3jTkwZoJ0HVXyCdX
3SqU1v/SyU7oC00cHGfrxlEK35q8fuHg1wBbZo7/krDWATpN1pvI2JzG+zwwXvnW
5dF9cLQRdYUOZDCuXZqcjh9j04vqN6qAtZ3rNSkJKpKbVsWNrl3qf6hcObg7Q3EL
AOK/oa+kz5/8jCR0v2yzDTkFMSbOWU7gua8jaU13b/NEcgzCkIIrqEA0nf3us8nJ
iQgNhT6OFdXOq7FYMn6f+tcwr2oc63dliBWn2wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCPxNXo1hiPvfaJYNT1wCSKn0Sb7MB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmLzJiMTI5YjJiNDUwYWI0MmZhMzU2NzhiYWMzNDM1YjQxYjJlZmMzNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAfBAKDANBgkqhkiG9w0BAQsFAAOCAQEANFfuIxGnXtSa
14AI9hHsbRTFjOyVg5bJ5VzuLpu3SQiTjrQ6QML44ANuoMocRDp2KEgMhnrt1ZPK
aa5c2wA1SqOYlySzchYndLsHnL9hSejh4igG/tfyHLspbKmM4ta/nhsLqDFLPa9h
F19ymeCfA8OxdIu44K3Pa2aDsUGNPUxYZxQJQCBfjeCnGlR8pJDs5VzXNXx3fKWA
Of9FsnYbOmmeAwDGWFskPuVsJ38CRd6Yi/KH7YCudg1jYWD6OV6QmczSND/nl9Lo
Z/NSl+GHwwpTB20TuqtrvEkDo4xRy8qFD5jasVrZ8pxgg43OSphv4RPL6Oj5xLLP
gONTKXzYqg==
-----END CERTIFICATE-----