Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/6226b29fc9ba92d74d56e8815220ebcab204d696.roa
File:                     6226b29fc9ba92d74d56e8815220ebcab204d696.roa (raw, json)
Hash identifier:          AvxrByPM7k9TDyAXzsT9VrhfghZ0bYQlQ9C+cXx7moU=
Subject key identifier:   EE:79:16:40:A5:23:0E:6F:DA:F4:67:AA:56:07:FC:95:35:D3:59:69
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E07B0
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/6226b29fc9ba92d74d56e8815220ebcab204d696.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:401a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919472 (0xe07b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=6226b29fc9ba92d74d56e8815220ebcab204d696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:1b:09:5b:29:9d:89:c0:f7:be:39:a1:50:
                    b4:88:c4:bc:0f:d4:f3:3f:70:5b:51:d0:31:5c:c5:
                    7c:7e:ab:e0:63:46:e6:64:12:e2:af:ec:c7:1b:52:
                    e1:d9:92:18:e5:e6:6d:ab:da:3a:77:38:69:91:64:
                    19:5c:1c:b5:99:9d:45:19:be:78:75:b8:37:53:42:
                    7a:fa:08:e9:24:8c:05:c3:35:19:61:23:a7:7b:18:
                    ad:34:b8:52:43:1e:50:c3:6b:89:ba:2b:90:44:ae:
                    3c:74:ad:01:78:ec:9b:e7:83:1f:36:42:fe:f0:26:
                    01:d8:9b:1a:70:85:50:7e:21:de:c6:c7:0e:fd:18:
                    3c:a9:9a:0d:ca:04:4f:5f:62:65:21:27:2f:7d:0a:
                    86:63:cc:42:ef:12:0d:2f:7b:8b:14:ce:ae:4a:39:
                    64:0f:f1:47:68:01:95:3d:12:10:ae:a6:1a:0c:00:
                    43:db:53:c2:11:8f:f9:22:ef:ec:aa:36:07:4d:d9:
                    7e:c3:21:34:81:47:04:e0:ee:a0:1b:14:8a:23:62:
                    4f:4d:d4:64:a8:27:4a:8e:15:69:75:70:71:5b:5d:
                    c9:96:c4:eb:a8:00:36:af:54:95:e8:a2:f6:8f:9a:
                    78:78:e4:20:36:b5:66:f3:90:08:7d:c4:5c:4a:46:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:16:40:A5:23:0E:6F:DA:F4:67:AA:56:07:FC:95:35:D3:59:69
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/6226b29fc9ba92d74d56e8815220ebcab204d696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:401a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:4b:a1:28:c3:f6:79:e8:3d:23:5f:04:19:6f:01:b3:44:
         9f:f5:e2:db:bb:50:34:3b:7e:7e:09:c6:db:a6:96:11:bc:ad:
         68:84:66:6f:00:42:9a:04:e4:3d:dc:0f:cf:fa:5c:9b:dd:cc:
         8c:38:1a:d7:27:97:cc:fe:4e:0a:f0:7d:f1:06:9b:75:0b:e6:
         65:94:a8:f3:ee:52:6a:d3:59:94:8a:88:1f:44:79:a2:bf:44:
         a3:44:c3:2a:f9:d1:93:ee:b7:1b:a6:56:b4:22:63:1c:70:c3:
         9e:2b:59:39:ac:70:c9:44:db:11:7d:8c:e3:65:e4:39:b2:61:
         36:aa:77:f2:3d:ab:4c:06:61:fe:c1:c5:2f:c5:92:e3:5e:d4:
         cb:93:4e:64:67:9f:38:72:52:ce:a9:3b:7b:bc:f8:63:96:4f:
         cd:5c:cc:c5:1b:ee:59:ea:7c:90:02:bf:fe:4a:1f:49:57:b9:
         30:cd:24:25:9a:49:72:d5:03:31:d9:25:5f:62:b5:02:69:de:
         b0:95:3d:e4:a5:64:aa:7e:41:51:6d:f0:15:55:44:49:f0:e8:
         fe:86:eb:c7:4b:b3:4e:7f:1f:b2:f9:ec:e4:3a:8e:bc:97:1d:
         04:56:53:fc:9e:7c:95:a9:5f:e3:64:2f:c3:ae:f1:40:5f:39:
         d1:1f:7d:80
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDgewMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEyg2MjI2YjI5ZmM5YmE5
MmQ3NGQ1NmU4ODE1MjIwZWJjYWIyMDRkNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg6UbCVspnYnA9745oVC0iMS8D9TzP3BbUdAxXMV8fqvgY0bm
ZBLir+zHG1Lh2ZIY5eZtq9o6dzhpkWQZXBy1mZ1FGb54dbg3U0J6+gjpJIwFwzUZ
YSOnexitNLhSQx5Qw2uJuiuQRK48dK0BeOyb54MfNkL+8CYB2JsacIVQfiHexscO
/Rg8qZoNygRPX2JlIScvfQqGY8xC7xINL3uLFM6uSjlkD/FHaAGVPRIQrqYaDABD
21PCEY/5Iu/sqjYHTdl+wyE0gUcE4O6gGxSKI2JPTdRkqCdKjhVpdXBxW13JlsTr
qAA2r1SV6KL2j5p4eOQgNrVm85AIfcRcSkb/ZQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFO55FkClIw5v2vRnqlYH/JU101lpMB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmLzYyMjZiMjlmYzliYTkyZDc0ZDU2ZTg4MTUyMjBlYmNhYjIwNGQ2OTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAfBAGjANBgkqhkiG9w0BAQsFAAOCAQEAPOJLoSjD9nno
PSNfBBlvAbNEn/Xi27tQNDt+fgnG26aWEbytaIRmbwBCmgTkPdwPz/pcm93MjDga
1yeXzP5OCvB98QabdQvmZZSo8+5SatNZlIqIH0R5or9Eo0TDKvnRk+63G6ZWtCJj
HHDDnitZOaxwyUTbEX2M42XkObJhNqp38j2rTAZh/sHFL8WS417Uy5NOZGefOHJS
zqk7e7z4Y5ZPzVzMxRvuWep8kAK//kofSVe5MM0kJZpJctUDMdklX2K1AmnesJU9
5KVkqn5BUW3wFVVESfDo/obrx0uzTn8fsvns5DqOvJcdBFZT/J58lalf42Qvw67x
QF850R99gA==
-----END CERTIFICATE-----