Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/fc634bd8d95d08086342a105a2d82e21f6121503.roa
File:                     fc634bd8d95d08086342a105a2d82e21f6121503.roa (raw, json)
Hash identifier:          wVN8+/vKOezdV1fmWOmOalv9Zwd8U5mSMfEadyd81PA=
Subject key identifier:   B9:52:93:F8:11:01:1E:F1:23:C9:F2:7C:91:09:80:99:71:38:8B:DF
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DE586
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/fc634bd8d95d08086342a105a2d82e21f6121503.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     21433
IP address blocks:        2801:1f0:4029::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910726 (0xde586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=fc634bd8d95d08086342a105a2d82e21f6121503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:17:45:bc:b0:a6:58:33:1c:56:26:ce:5d:
                    76:3d:f7:c1:cd:9d:e9:78:b7:58:17:6c:70:ff:73:
                    7a:d5:97:62:a8:d3:8f:34:99:64:25:a4:19:79:5e:
                    44:37:83:ef:02:48:6d:f2:14:9b:98:c3:59:2a:4d:
                    4e:19:7d:4f:93:b7:59:d1:0a:8d:b6:fd:09:db:28:
                    a6:6c:bd:09:74:5d:fc:c5:e6:0b:41:8c:af:c1:56:
                    1b:9a:7e:a3:4f:f8:1d:e9:20:95:1a:15:b6:b0:0d:
                    0f:02:a5:32:87:5d:a0:db:1c:55:f6:c7:71:c9:c6:
                    39:c3:8d:37:a5:84:71:b6:0f:4e:b5:4a:bd:06:61:
                    07:34:c8:c9:7e:d7:58:d8:b9:1a:4d:96:db:ae:a3:
                    34:9b:3e:35:f7:10:db:03:1a:6f:56:86:f3:5f:8b:
                    6c:0d:a2:e1:55:3a:1e:34:39:d5:be:e1:3a:bf:af:
                    77:b3:56:0a:a7:9c:b2:a9:7e:d6:6f:04:ce:ea:98:
                    d6:93:80:b6:df:c6:90:6b:be:f0:79:31:08:40:17:
                    a7:aa:51:3e:40:81:e2:52:b0:5e:b8:ca:62:c7:dd:
                    14:60:fc:e8:b8:85:27:54:e3:8b:11:46:36:a0:06:
                    4a:a2:a4:c8:35:a0:81:3b:e2:1d:18:01:7f:f6:f7:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:52:93:F8:11:01:1E:F1:23:C9:F2:7C:91:09:80:99:71:38:8B:DF
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/fc634bd8d95d08086342a105a2d82e21f6121503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4029::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:87:36:8c:e9:6b:89:55:27:39:78:a7:f5:d8:15:dd:46:b6:
         b4:f5:45:47:42:57:b5:a3:42:62:89:9e:30:ec:8c:ac:2c:43:
         ca:d8:e1:73:23:14:36:44:db:e1:c4:d2:12:3c:96:f3:84:4d:
         46:c5:09:d3:0a:b5:6b:18:ce:b9:60:6a:3b:aa:bc:6c:e6:96:
         1f:82:3c:7e:3e:6a:bd:12:60:bb:e7:96:4b:dc:65:0e:19:9e:
         6c:8a:e7:70:e8:fc:6e:7b:f3:3e:a9:f4:e9:a6:8a:e9:60:7c:
         b0:8f:77:23:07:25:21:25:cf:84:b5:b2:91:43:d3:59:dc:6f:
         3b:f1:ee:fb:70:2d:d0:d3:de:4d:12:b3:11:1f:74:6d:db:62:
         9f:cb:1b:ee:c5:f6:a3:d2:e6:3a:44:b4:33:7b:ec:88:72:a5:
         3e:a1:45:93:cb:73:ee:05:76:40:59:83:62:f8:4c:15:28:3c:
         a7:f7:b8:7c:39:6f:40:6e:29:2c:05:f7:af:30:04:e9:6b:f6:
         8a:7b:59:89:34:00:13:37:74:9c:fd:43:1a:3f:4d:b7:ab:12:
         c2:4e:30:78:27:88:b5:d6:f4:21:34:d6:6d:79:a2:f4:f3:f0:
         99:9e:e6:9a:c3:a1:42:81:f4:70:3e:0f:df:b3:9f:08:6d:e7:
         84:8d:f4:2c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDeWGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEyhmYzYzNGJkOGQ5NWQw
ODA4NjM0MmExMDVhMmQ4MmUyMWY2MTIxNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhvAXRbywplgzHFYmzl12PffBzZ3peLdYF2xw/3N61ZdiqNOP
NJlkJaQZeV5EN4PvAkht8hSbmMNZKk1OGX1Pk7dZ0QqNtv0J2yimbL0JdF38xeYL
QYyvwVYbmn6jT/gd6SCVGhW2sA0PAqUyh12g2xxV9sdxycY5w403pYRxtg9OtUq9
BmEHNMjJftdY2LkaTZbbrqM0mz419xDbAxpvVobzX4tsDaLhVToeNDnVvuE6v693
s1YKp5yyqX7WbwTO6pjWk4C238aQa77weTEIQBenqlE+QIHiUrBeuMpix90UYPzo
uIUnVOOLEUY2oAZKoqTINaCBO+IdGAF/9veTbwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLlSk/gRAR7xI8nyfJEJgJlxOIvfMB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmL2ZjNjM0YmQ4ZDk1ZDA4MDg2MzQyYTEwNWEyZDgyZTIxZjYxMjE1MDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAfBAKTANBgkqhkiG9w0BAQsFAAOCAQEANoc2jOlriVUn
OXin9dgV3Ua2tPVFR0JXtaNCYomeMOyMrCxDytjhcyMUNkTb4cTSEjyW84RNRsUJ
0wq1axjOuWBqO6q8bOaWH4I8fj5qvRJgu+eWS9xlDhmebIrncOj8bnvzPqn06aaK
6WB8sI93IwclISXPhLWykUPTWdxvO/Hu+3At0NPeTRKzER90bdtin8sb7sX2o9Lm
OkS0M3vsiHKlPqFFk8tz7gV2QFmDYvhMFSg8p/e4fDlvQG4pLAX3rzAE6Wv2intZ
iTQAEzd0nP1DGj9Nt6sSwk4weCeItdb0ITTWbXmi9PPwmZ7mmsOhQoH0cD4P37Of
CG3nhI30LA==
-----END CERTIFICATE-----