Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/aed171a7d7eab2c557f7161886923a39dbda1451.roa
File:                     aed171a7d7eab2c557f7161886923a39dbda1451.roa (raw, json)
Hash identifier:          L3W3neff1fWFs9pm4en2Cm97wiRxS9eKeBK4WJWSWkY=
Subject key identifier:   8B:2B:C2:70:F0:0F:9A:C3:DD:9F:39:C9:39:E6:38:2B:F2:46:F5:CF
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E2D37
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/aed171a7d7eab2c557f7161886923a39dbda1451.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4020::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929079 (0xe2d37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=aed171a7d7eab2c557f7161886923a39dbda1451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:26:8f:c6:3f:a0:26:9d:31:87:73:98:0c:
                    62:55:76:99:92:47:55:6c:d4:f0:d8:88:12:7f:c6:
                    cb:1e:c9:32:f4:c9:8b:85:ff:e5:2c:2a:0a:4e:2e:
                    e1:bb:26:13:2e:de:22:ab:4f:05:d1:05:d6:5b:a1:
                    fa:70:98:6f:91:52:f7:cc:e7:13:78:50:19:f9:1c:
                    81:68:37:30:a2:3e:22:6f:4d:4c:4d:49:21:94:bf:
                    6e:44:05:fb:a6:ca:2e:f4:58:cb:cd:13:62:25:b1:
                    b0:d4:b6:66:3d:e4:94:b6:95:17:d5:ce:4f:9e:38:
                    6f:9f:8e:5f:81:41:d9:f9:fc:7b:29:eb:f3:61:50:
                    50:e9:68:14:ae:d1:46:f6:b3:45:89:fe:54:10:20:
                    89:c3:2f:1b:6d:5b:a6:3a:8f:b7:cc:7c:ba:3e:1b:
                    ee:db:c6:1a:ec:dd:72:cb:2b:7e:25:48:bf:84:5c:
                    67:13:b3:2b:a6:03:39:e1:40:91:2a:4d:47:79:58:
                    dc:18:1e:33:ca:3b:87:6d:f9:ee:1c:16:81:37:0d:
                    8f:2e:a6:22:e5:fc:4b:09:1c:3f:41:64:ae:82:c7:
                    c6:71:ef:a7:8c:17:2a:9a:0b:f0:d8:57:ce:24:06:
                    de:c8:02:e4:28:95:99:69:6f:7f:e9:3c:97:30:4e:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2B:C2:70:F0:0F:9A:C3:DD:9F:39:C9:39:E6:38:2B:F2:46:F5:CF
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/aed171a7d7eab2c557f7161886923a39dbda1451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4020::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:3e:d5:6b:7b:45:36:ac:dc:00:c6:68:69:62:a3:89:58:
         4d:fa:04:51:56:8b:7e:e6:f5:e4:dc:7d:1a:a8:2f:48:0c:99:
         73:30:ee:44:02:06:3b:39:d1:79:14:13:be:62:f2:c8:8b:ea:
         8b:24:a3:51:cc:95:c8:74:bc:17:bb:27:dc:14:b3:12:fc:de:
         b7:a0:52:33:e8:0c:d6:1a:1d:36:d8:ce:22:4f:ba:b2:f4:4f:
         e0:d9:0e:48:02:94:3a:ec:f2:92:7a:dc:d5:6b:44:8a:6b:bd:
         d9:9c:9f:46:19:89:f8:d0:4f:ef:cc:73:b6:97:a6:7f:07:78:
         ca:e2:e1:66:89:a3:84:56:93:77:b3:de:33:8d:44:db:85:25:
         6d:2e:d4:37:2e:ea:00:17:61:b2:00:92:5d:ab:5d:95:ce:18:
         d8:f1:96:e3:80:e1:4c:8c:4d:3b:6d:dd:29:11:9f:7f:b3:69:
         70:b3:f0:2e:65:81:d0:a5:12:dd:de:ec:da:4c:b3:7c:59:96:
         dd:25:37:21:bc:6b:1e:8d:e2:a0:96:06:e6:8d:c6:4b:19:45:
         aa:29:a0:bd:4e:4e:50:7c:83:1f:d2:0f:4f:2c:e0:12:53:ca:
         be:b2:06:96:a8:76:2b:62:8b:87:be:92:f0:84:7e:ed:54:f3:
         ca:f2:8f:35
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDi03MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEyhhZWQxNzFhN2Q3ZWFi
MmM1NTdmNzE2MTg4NjkyM2EzOWRiZGExNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAynMmj8Y/oCadMYdzmAxiVXaZkkdVbNTw2IgSf8bLHsky9MmL
hf/lLCoKTi7huyYTLt4iq08F0QXWW6H6cJhvkVL3zOcTeFAZ+RyBaDcwoj4ib01M
TUkhlL9uRAX7psou9FjLzRNiJbGw1LZmPeSUtpUX1c5Pnjhvn45fgUHZ+fx7Kevz
YVBQ6WgUrtFG9rNFif5UECCJwy8bbVumOo+3zHy6Phvu28Ya7N1yyyt+JUi/hFxn
E7MrpgM54UCRKk1HeVjcGB4zyjuHbfnuHBaBNw2PLqYi5fxLCRw/QWSugsfGce+n
jBcqmgvw2FfOJAbeyALkKJWZaW9/6TyXME7zlwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIsrwnDwD5rD3Z85yTnmOCvyRvXPMB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmL2FlZDE3MWE3ZDdlYWIyYzU1N2Y3MTYxODg2OTIzYTM5ZGJkYTE0NTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHASgBAfBAIDANBgkqhkiG9w0BAQsFAAOCAQEAFks+1Wt7RTas
3ADGaGlio4lYTfoEUVaLfub15Nx9GqgvSAyZczDuRAIGOznReRQTvmLyyIvqiySj
UcyVyHS8F7sn3BSzEvzet6BSM+gM1hodNtjOIk+6svRP4NkOSAKUOuzyknrc1WtE
imu92ZyfRhmJ+NBP78xztpemfwd4yuLhZomjhFaTd7PeM41E24UlbS7UNy7qABdh
sgCSXatdlc4Y2PGW44DhTIxNO23dKRGff7NpcLPwLmWB0KUS3d7s2kyzfFmW3SU3
IbxrHo3ioJYG5o3GSxlFqimgvU5OUHyDH9IPTyzgElPKvrIGlqh2K2KLh76S8IR+
7VTzyvKPNQ==
-----END CERTIFICATE-----