Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/fda0facb7d5a4c3974c31ddeda6a5eac0813db02.roa
File:                     fda0facb7d5a4c3974c31ddeda6a5eac0813db02.roa (raw, json)
Hash identifier:          pKGwVIFBpd94TRXj+DXyz52b+fksnYk2NgObYk3d/sY=
Subject key identifier:   89:75:81:86:5C:4B:77:B8:E6:C9:1F:D8:E1:E7:24:27:48:93:C6:C4
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E2F4E
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/fda0facb7d5a4c3974c31ddeda6a5eac0813db02.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929614 (0xe2f4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=fda0facb7d5a4c3974c31ddeda6a5eac0813db02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:46:4c:39:ed:5f:fe:4d:fc:61:62:80:d6:
                    0a:ae:fe:99:8d:58:e8:38:7a:91:ce:05:72:44:73:
                    6f:1f:31:34:5b:70:45:c7:d8:f2:f1:98:3e:d0:f8:
                    33:76:5d:be:91:7a:33:38:ec:3a:42:88:75:cd:a6:
                    45:fc:43:92:0a:a8:27:c7:6c:b9:1c:6a:aa:39:9a:
                    75:ab:46:cb:ed:42:ef:1f:43:cb:23:8d:f6:c8:7b:
                    98:c1:0e:db:0f:ad:88:14:cd:f7:86:d5:b2:b8:d1:
                    c4:3b:70:c2:ae:05:bb:2b:c8:30:36:25:35:fd:18:
                    22:3a:df:5d:c0:c7:6f:ba:31:a0:c8:64:f1:45:4f:
                    75:a1:db:9e:69:da:eb:11:c6:f0:fb:52:a8:53:ca:
                    ee:e1:a5:9b:98:c1:46:23:f6:73:88:31:d4:0d:b8:
                    9a:4a:0d:eb:0d:25:aa:1c:64:59:4d:23:58:e3:86:
                    58:f1:dd:7c:0d:b6:5b:54:1b:b2:0e:b3:a7:84:0b:
                    b1:05:dc:c0:10:4b:e2:e0:d9:db:55:dc:1b:ee:bc:
                    e3:0a:7c:4d:ad:07:2e:b9:ab:e8:dd:d8:40:73:9b:
                    39:05:6a:b6:c8:1e:af:61:46:d5:d0:e3:ed:28:07:
                    cd:fb:6b:aa:4e:d1:b1:05:05:d5:4d:32:2d:96:d6:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:75:81:86:5C:4B:77:B8:E6:C9:1F:D8:E1:E7:24:27:48:93:C6:C4
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/fda0facb7d5a4c3974c31ddeda6a5eac0813db02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:87:1b:96:1d:88:31:b0:19:15:be:e9:d1:0a:d9:d8:d0:66:
         45:cb:5a:9c:01:67:e5:56:38:43:3a:97:a7:ff:76:ce:2c:0a:
         f2:79:53:eb:d7:14:26:d9:85:8f:dc:7f:b7:05:79:10:12:ab:
         67:6f:47:c0:19:fe:b0:a6:4b:9d:51:f3:0a:b4:e3:ce:68:3c:
         9d:a3:f7:3b:78:ad:af:64:53:3a:46:0a:4c:14:1b:54:c3:52:
         05:dc:a5:e0:3b:48:72:a8:69:8e:0f:cf:a3:42:53:af:46:bd:
         69:37:de:1b:0e:f0:8a:65:3e:ab:f3:79:d9:f3:ed:84:34:35:
         08:b6:54:89:f8:0f:1a:ab:a3:4d:b2:f2:00:49:16:c9:e7:35:
         f6:bc:a6:0a:3a:e1:83:9a:6b:c1:e8:57:67:9a:44:cc:a5:2b:
         8e:04:e8:78:bd:e6:8d:f2:ca:de:c9:d8:ce:99:c2:cb:aa:b0:
         eb:81:4d:fe:b4:40:84:c9:9a:dd:66:0b:ea:30:bb:f0:4b:53:
         e8:ba:fc:26:6a:d3:96:80:8e:42:cc:60:74:7b:24:b2:c6:3e:
         2e:9f:b0:e8:98:2f:9a:d9:db:e0:75:09:b7:b8:b0:01:d8:10:
         51:6c:eb:c5:33:20:83:1c:f6:62:cc:49:56:98:58:3b:5d:32:
         99:a2:f9:78
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDi9OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjEwMzI0
MTQyODQ0WhcNMjYwMzI0MTQyODQ0WjAzMTEwLwYDVQQDEyhmZGEwZmFjYjdkNWE0
YzM5NzRjMzFkZGVkYTZhNWVhYzA4MTNkYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqxZGTDntX/5N/GFigNYKrv6ZjVjoOHqRzgVyRHNvHzE0W3BF
x9jy8Zg+0Pgzdl2+kXozOOw6Qoh1zaZF/EOSCqgnx2y5HGqqOZp1q0bL7ULvH0PL
I432yHuYwQ7bD62IFM33htWyuNHEO3DCrgW7K8gwNiU1/RgiOt9dwMdvujGgyGTx
RU91odueadrrEcbw+1KoU8ru4aWbmMFGI/ZziDHUDbiaSg3rDSWqHGRZTSNY44ZY
8d18DbZbVBuyDrOnhAuxBdzAEEvi4NnbVdwb7rzjCnxNrQcuuavo3dhAc5s5BWq2
yB6vYUbV0OPtKAfN+2uqTtGxBQXVTTItltY+RQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIl1gYZcS3e45skf2OHnJCdIk8bEMB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmL2ZkYTBmYWNiN2Q1YTRjMzk3NGMzMWRkZWRhNmE1ZWFjMDgxM2RiMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAfBAIDANBgkqhkiG9w0BAQsFAAOCAQEAN4cblh2IMbAZ
Fb7p0QrZ2NBmRctanAFn5VY4QzqXp/92ziwK8nlT69cUJtmFj9x/twV5EBKrZ29H
wBn+sKZLnVHzCrTjzmg8naP3O3itr2RTOkYKTBQbVMNSBdyl4DtIcqhpjg/Po0JT
r0a9aTfeGw7wimU+q/N52fPthDQ1CLZUifgPGqujTbLyAEkWyec19rymCjrhg5pr
wehXZ5pEzKUrjgToeL3mjfLK3snYzpnCy6qw64FN/rRAhMma3WYL6jC78EtT6Lr8
JmrTloCOQsxgdHskssY+Lp+w6Jgvmtnb4HUJt7iwAdgQUWzrxTMggxz2YsxJVphY
O10ymaL5eA==
-----END CERTIFICATE-----