Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/f540877c601d4b3cb508736c0e0ea3a80ea34850.roa
File:                     f540877c601d4b3cb508736c0e0ea3a80ea34850.roa (raw, json)
Hash identifier:          BqTJT0LbYhIh16UhaHcHWmNROPcYgzCnRSA5RQB/2Vc=
Subject key identifier:   BC:3D:D6:FC:A2:5D:BC:34:C2:AC:95:2E:A4:0E:CE:4A:F4:FF:DF:29
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DAC9D
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/f540877c601d4b3cb508736c0e0ea3a80ea34850.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896157 (0xdac9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=f540877c601d4b3cb508736c0e0ea3a80ea34850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:b1:d2:40:aa:d5:67:64:32:8e:b1:30:5c:
                    a6:83:e6:f5:fc:98:11:cf:ce:08:ec:78:52:1c:58:
                    9a:c1:e6:aa:4e:b2:bd:21:79:95:7e:4b:1d:97:a8:
                    06:4b:37:91:26:c2:86:9a:26:00:e5:0a:ab:4a:ec:
                    77:e9:af:e2:a2:7d:3f:64:a9:4e:f0:97:2f:7b:b9:
                    2b:32:b5:77:c2:5c:d5:e0:21:09:ba:22:b9:62:eb:
                    55:c1:5b:cd:3c:af:f9:b4:9c:1e:d4:64:a9:24:93:
                    f4:81:7b:03:d6:d2:df:f6:20:22:5a:cf:a7:78:82:
                    bc:a7:dc:6d:f9:d2:44:52:66:24:1e:98:18:4c:a4:
                    0b:64:d7:bd:e8:a7:f4:75:94:63:1d:d1:0b:a9:d6:
                    27:09:81:1b:a0:97:a8:14:b3:b1:5e:7b:43:55:8d:
                    e2:c2:d4:11:79:1e:c2:7b:52:81:16:20:c5:c7:c3:
                    a8:f1:ab:18:30:08:17:a0:d1:0e:1c:db:27:bb:d1:
                    93:04:ad:8e:6b:3c:d1:f5:cd:36:c3:be:0d:60:75:
                    0b:d2:93:90:38:12:56:95:a2:d6:67:d4:e8:ef:a3:
                    19:9d:d1:d2:76:9c:de:ee:f1:f1:13:d2:7c:44:c7:
                    fc:46:3b:66:d1:74:b2:4e:68:da:33:a6:af:72:f9:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3D:D6:FC:A2:5D:BC:34:C2:AC:95:2E:A4:0E:CE:4A:F4:FF:DF:29
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/f540877c601d4b3cb508736c0e0ea3a80ea34850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:28:3f:af:0e:4b:03:31:fe:56:cf:7b:25:47:4c:08:16:f1:
         52:9d:df:28:5b:c7:c9:6a:73:d2:7f:53:3b:6d:69:00:c4:13:
         ec:ff:d0:d0:9f:ca:65:ce:d9:68:8d:91:95:4d:b1:ad:5d:8d:
         a4:28:20:ca:7e:ba:2c:c1:56:fa:69:d9:f6:d5:58:44:e4:05:
         31:37:f3:e6:02:08:78:53:3f:b2:69:cb:96:80:d7:b1:64:74:
         17:1e:e8:d7:f1:4f:29:42:70:f2:ec:81:ba:b4:65:81:83:b8:
         b7:c1:4a:19:bd:63:2c:97:13:f3:6e:ea:b4:0b:54:7d:bd:d0:
         b5:e5:c2:22:c5:6d:6f:5d:9b:69:40:61:be:4f:db:ec:a1:71:
         0f:63:d5:c8:2a:6d:5a:7e:47:c8:df:de:8d:77:42:78:22:af:
         c4:b2:2e:92:7c:16:0b:8a:aa:2c:0a:aa:d1:67:70:46:a7:c9:
         39:d7:32:ba:49:86:3f:12:7c:f6:3c:d5:ed:9c:b1:9a:39:9f:
         52:00:be:d0:fc:25:e2:d0:24:d8:7f:0c:73:a0:b3:85:be:3a:
         ad:aa:1b:6e:5c:a5:9d:70:8f:7f:b9:c9:28:ea:f0:f2:5e:11:
         8d:32:38:17:16:c7:59:fe:b1:da:ba:88:d7:4a:96:3b:f2:1e:
         a1:95:21:7d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDaydMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEyhmNTQwODc3YzYwMWQ0
YjNjYjUwODczNmMwZTBlYTNhODBlYTM0ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3fmx0kCq1WdkMo6xMFymg+b1/JgRz84I7HhSHFiaweaqTrK9
IXmVfksdl6gGSzeRJsKGmiYA5QqrSux36a/ion0/ZKlO8Jcve7krMrV3wlzV4CEJ
uiK5YutVwVvNPK/5tJwe1GSpJJP0gXsD1tLf9iAiWs+neIK8p9xt+dJEUmYkHpgY
TKQLZNe96Kf0dZRjHdELqdYnCYEboJeoFLOxXntDVY3iwtQReR7Ce1KBFiDFx8Oo
8asYMAgXoNEOHNsnu9GTBK2OazzR9c02w74NYHUL0pOQOBJWlaLWZ9To76MZndHS
dpze7vHxE9J8RMf8Rjtm0XSyTmjaM6avcvmSBQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFLw91vyiXbw0wqyVLqQOzkr0/98pMB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmL2Y1NDA4NzdjNjAxZDRiM2NiNTA4NzM2YzBlMGVhM2E4MGVhMzQ4NTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgBAfAwDQYJKoZIhvcNAQELBQADggEBAM0oP68OSwMx/lbP
eyVHTAgW8VKd3yhbx8lqc9J/UzttaQDEE+z/0NCfymXO2WiNkZVNsa1djaQoIMp+
uizBVvpp2fbVWETkBTE38+YCCHhTP7Jpy5aA17FkdBce6NfxTylCcPLsgbq0ZYGD
uLfBShm9YyyXE/Nu6rQLVH290LXlwiLFbW9dm2lAYb5P2+yhcQ9j1cgqbVp+R8jf
3o13Qngir8SyLpJ8FguKqiwKqtFncEanyTnXMrpJhj8SfPY81e2csZo5n1IAvtD8
JeLQJNh/DHOgs4W+Oq2qG25cpZ1wj3+5ySjq8PJeEY0yOBcWx1n+sdq6iNdKljvy
HqGVIX0=
-----END CERTIFICATE-----