Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/9d2c8e4552a91ed9c9438591cf6d06c04fbf6a69.roa
File:                     9d2c8e4552a91ed9c9438591cf6d06c04fbf6a69.roa (raw, json)
Hash identifier:          6ZzVKygD5z7yl4g7n8EuPDckZunD46ia+TdOFAlrjiM=
Subject key identifier:   4F:19:77:FB:D5:06:E2:14:6F:70:70:C6:3B:14:F6:AA:7E:EF:B1:B4
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E2707
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/9d2c8e4552a91ed9c9438591cf6d06c04fbf6a69.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:401c::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927495 (0xe2707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=9d2c8e4552a91ed9c9438591cf6d06c04fbf6a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:6e:9a:16:42:87:9e:6c:c6:31:de:58:45:
                    97:7e:72:50:de:b9:14:03:d1:c7:70:56:ca:9e:ab:
                    40:c5:97:4a:0f:65:52:cc:32:64:5a:04:b2:95:08:
                    a4:da:20:6e:3a:c4:45:83:be:2c:35:87:20:b0:d8:
                    d6:f2:de:29:31:0f:f0:c4:c7:b1:63:f1:9a:f5:dd:
                    80:bc:90:3c:1d:c6:d3:3b:25:ad:40:2f:45:28:f6:
                    41:c9:93:21:3f:a5:3b:e4:7f:0a:5d:44:93:e7:cf:
                    14:5d:53:d4:b4:83:e0:a7:1e:6e:36:53:41:4b:e1:
                    49:b1:d2:d5:c1:dc:7a:bd:2f:a5:5c:03:c9:c7:03:
                    71:3c:63:c3:6f:3e:a9:c4:be:ef:b7:bb:bf:e6:85:
                    dc:01:61:65:fe:28:f5:5f:40:ca:ec:3b:29:56:8b:
                    76:7f:cf:c9:80:18:cf:02:72:b5:10:66:8c:37:5d:
                    c2:03:92:dd:00:7a:5b:c4:b7:78:1e:fc:3c:27:b1:
                    f9:ef:97:cf:8a:fd:9b:a0:ed:b9:f3:e7:2a:93:b7:
                    90:0a:c0:c8:3c:47:ad:ae:89:c0:c3:73:00:23:4b:
                    10:cd:f2:a4:89:a0:a4:5c:06:7e:ae:79:9c:51:6e:
                    70:6d:91:ed:f8:b1:25:c3:15:38:31:6a:22:d5:e8:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:19:77:FB:D5:06:E2:14:6F:70:70:C6:3B:14:F6:AA:7E:EF:B1:B4
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/9d2c8e4552a91ed9c9438591cf6d06c04fbf6a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:401c::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:ca:22:8d:20:d0:6f:53:23:73:fb:4b:18:90:fc:36:9f:59:
         ed:16:7e:e0:3e:bb:50:ac:41:cf:da:9a:19:d4:fd:04:81:4a:
         e0:52:ef:7d:ea:5c:6c:9d:8c:85:7e:4e:11:f6:e3:2d:65:0d:
         43:15:72:79:37:76:6a:44:00:9c:a1:40:c3:31:1b:be:24:c4:
         90:b7:95:7e:46:50:8b:00:e4:87:17:ef:5d:87:7c:b0:f8:e4:
         d8:4f:29:96:1a:88:0c:cd:fa:84:c0:6b:62:de:1c:e3:d7:b9:
         da:e8:31:d4:2f:f0:aa:a9:c7:5c:ea:c3:67:5f:ca:f3:5a:ef:
         ad:10:38:3a:42:43:7f:bf:a3:71:52:0b:a6:15:99:68:3a:2b:
         ca:8e:8b:50:06:89:ef:4b:7c:6e:99:62:af:84:26:41:c6:16:
         48:1b:71:81:2f:77:0e:40:7c:08:d2:fe:11:b4:86:fe:96:1d:
         6b:a5:f0:f4:5e:67:6e:32:f0:5a:60:41:70:8f:53:74:87:a5:
         fd:3b:43:42:e1:18:ff:15:b1:ef:5f:97:7a:fc:d5:89:6c:24:
         30:ea:58:01:8b:66:b7:8d:ac:c8:4f:b3:14:82:3e:bf:66:1f:
         b1:76:c2:b2:22:b0:05:68:c6:31:41:5a:f9:62:64:63:29:da:
         fc:c4:77:0e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDicHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEyg5ZDJjOGU0NTUyYTkx
ZWQ5Yzk0Mzg1OTFjZjZkMDZjMDRmYmY2YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvJlumhZCh55sxjHeWEWXfnJQ3rkUA9HHcFbKnqtAxZdKD2VS
zDJkWgSylQik2iBuOsRFg74sNYcgsNjW8t4pMQ/wxMexY/Ga9d2AvJA8HcbTOyWt
QC9FKPZByZMhP6U75H8KXUST588UXVPUtIPgpx5uNlNBS+FJsdLVwdx6vS+lXAPJ
xwNxPGPDbz6pxL7vt7u/5oXcAWFl/ij1X0DK7DspVot2f8/JgBjPAnK1EGaMN13C
A5LdAHpbxLd4Hvw8J7H575fPiv2boO258+cqk7eQCsDIPEetronAw3MAI0sQzfKk
iaCkXAZ+rnmcUW5wbZHt+LElwxU4MWoi1egvyQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFE8Zd/vVBuIUb3BwxjsU9qp+77G0MB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmLzlkMmM4ZTQ1NTJhOTFlZDljOTQzODU5MWNmNmQwNmMwNGZiZjZhNjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHASgBAfBAHDANBgkqhkiG9w0BAQsFAAOCAQEAScoijSDQb1Mj
c/tLGJD8Np9Z7RZ+4D67UKxBz9qaGdT9BIFK4FLvfepcbJ2MhX5OEfbjLWUNQxVy
eTd2akQAnKFAwzEbviTEkLeVfkZQiwDkhxfvXYd8sPjk2E8plhqIDM36hMBrYt4c
49e52ugx1C/wqqnHXOrDZ1/K81rvrRA4OkJDf7+jcVILphWZaDoryo6LUAaJ70t8
bplir4QmQcYWSBtxgS93DkB8CNL+EbSG/pYda6Xw9F5nbjLwWmBBcI9TdIel/TtD
QuEY/xWx71+XevzViWwkMOpYAYtmt42syE+zFII+v2YfsXbCsiKwBWjGMUFa+WJk
Yyna/MR3Dg==
-----END CERTIFICATE-----