Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/e832864da944c8410a7187965185c6769950ff8e.roa
File:                     e832864da944c8410a7187965185c6769950ff8e.roa (raw, json)
Hash identifier:          oEonz3LAOHY2LxwCgQK9OYDW3x9sf8w3Yvj3oJpR5UA=
Subject key identifier:   9C:53:0B:93:AC:51:34:97:EA:10:C3:24:B0:5D:F5:AD:B4:F3:87:6A
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DF09F
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/e832864da944c8410a7187965185c6769950ff8e.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:2010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913567 (0xdf09f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=e832864da944c8410a7187965185c6769950ff8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:12:0c:95:43:6a:70:62:d3:4c:6e:0b:e7:
                    89:a8:ec:80:20:32:e6:01:1a:6b:7a:65:fc:85:61:
                    01:91:3d:4a:a4:bd:ed:c7:df:56:7d:1d:36:f0:7d:
                    2a:c3:11:6e:12:96:3a:9b:91:5f:01:19:59:e9:b6:
                    32:5d:08:30:6a:36:7c:26:94:72:df:4d:2a:09:63:
                    49:71:fe:4b:ed:91:6b:bd:2a:07:b5:5e:72:b1:3a:
                    a8:ae:dc:6f:15:85:07:f3:e5:5f:24:79:9b:8d:1c:
                    5c:5a:28:2e:cd:c0:b6:1f:dc:99:53:d6:2e:15:d6:
                    f0:ca:ec:83:f9:6a:1c:e2:bb:4c:bb:48:21:3d:62:
                    c6:43:d8:b0:04:2d:60:8d:86:a0:a5:6f:db:61:70:
                    17:b2:bf:bd:de:31:ca:4e:8c:22:75:c7:4f:87:2d:
                    b9:b6:07:c3:ba:d5:11:d0:fa:53:79:26:1c:1f:f3:
                    91:b6:7d:15:ba:b4:e2:c5:55:34:4e:e9:7d:9a:6f:
                    7a:80:68:4e:8c:74:a2:9e:3e:f7:45:00:67:fb:13:
                    7c:34:01:19:8b:ca:26:3d:b8:2b:a8:af:54:e2:ae:
                    fb:b3:0b:a3:e1:c6:86:bd:7e:fa:ec:8d:60:7b:19:
                    18:d3:fa:81:d8:09:9f:b2:17:ef:d2:95:99:c2:56:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:0B:93:AC:51:34:97:EA:10:C3:24:B0:5D:F5:AD:B4:F3:87:6A
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/e832864da944c8410a7187965185c6769950ff8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:93:a5:cf:f0:0b:ce:de:44:69:bf:cf:7b:28:4b:1f:9a:
         81:f2:0d:ef:13:60:f5:0a:01:32:be:b8:c4:c5:c3:65:02:25:
         18:40:fe:09:76:8f:96:3c:38:51:7c:21:aa:dc:aa:44:0e:c1:
         7d:d0:02:41:49:d3:e1:33:8a:cf:97:6e:8b:2a:ef:ca:2c:70:
         80:e3:6f:52:06:a0:1d:74:c5:c2:ad:04:43:ae:4a:6c:22:2f:
         43:e5:99:25:dd:7f:39:a3:6d:da:17:64:0e:86:4e:3d:b7:58:
         e8:b5:20:21:08:a5:fa:6e:e2:43:ce:11:24:2c:97:6e:a4:5e:
         11:2d:70:07:4f:9b:f3:91:42:23:c7:a0:be:40:cf:b5:7f:9e:
         41:46:b8:a1:e2:e0:ee:c3:c2:9f:7b:66:cf:fe:0b:b8:02:c4:
         b3:55:f9:06:a8:90:5d:f4:6f:f4:c5:7f:79:67:99:ae:8c:e7:
         21:f8:e5:78:65:f8:13:2f:6d:b1:9b:99:ff:a4:5c:90:49:d3:
         4d:2b:85:e1:f4:5b:9b:61:e9:0b:ff:71:b0:1e:f8:eb:3a:ef:
         15:8f:87:d6:02:5a:bc:44:2a:31:d6:97:81:1c:60:c1:f8:8c:
         17:ea:6a:b2:25:9c:11:4b:4a:0d:01:27:4a:6b:69:88:3b:b2:
         b3:87:55:2f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDfCfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEyhlODMyODY0ZGE5NDRj
ODQxMGE3MTg3OTY1MTg1YzY3Njk5NTBmZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjnQSDJVDanBi00xuC+eJqOyAIDLmARpremX8hWEBkT1KpL3t
x99WfR028H0qwxFuEpY6m5FfARlZ6bYyXQgwajZ8JpRy300qCWNJcf5L7ZFrvSoH
tV5ysTqortxvFYUH8+VfJHmbjRxcWiguzcC2H9yZU9YuFdbwyuyD+Woc4rtMu0gh
PWLGQ9iwBC1gjYagpW/bYXAXsr+93jHKTowidcdPhy25tgfDutUR0PpTeSYcH/OR
tn0VurTixVU0Tul9mm96gGhOjHSinj73RQBn+xN8NAEZi8omPbgrqK9U4q77swuj
4caGvX767I1gexkY0/qB2Amfshfv0pWZwla3uQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJxTC5OsUTSX6hDDJLBd9a2084dqMB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmL2U4MzI4NjRkYTk0NGM4NDEwYTcxODc5NjUxODVjNjc2OTk1MGZmOGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBAfAgEDANBgkqhkiG9w0BAQsFAAOCAQEATPyTpc/wC87e
RGm/z3soSx+agfIN7xNg9QoBMr64xMXDZQIlGED+CXaPljw4UXwhqtyqRA7BfdAC
QUnT4TOKz5duiyrvyixwgONvUgagHXTFwq0EQ65KbCIvQ+WZJd1/OaNt2hdkDoZO
PbdY6LUgIQil+m7iQ84RJCyXbqReES1wB0+b85FCI8egvkDPtX+eQUa4oeLg7sPC
n3tmz/4LuALEs1X5BqiQXfRv9MV/eWeZroznIfjleGX4Ey9tsZuZ/6RckEnTTSuF
4fRbm2HpC/9xsB746zrvFY+H1gJavEQqMdaXgRxgwfiMF+pqsiWcEUtKDQEnSmtp
iDuys4dVLw==
-----END CERTIFICATE-----