Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/09b42f5c45a84914067d26856a5857e6d90303a8.roa
File:                     09b42f5c45a84914067d26856a5857e6d90303a8.roa (raw, json)
Hash identifier:          wX8wKMflyMyiDfJDWeS5o9E/9C/v5ZBWp9FNDLEdnjU=
Subject key identifier:   BB:20:F0:B8:35:1F:F3:13:D1:1E:77:92:A5:A8:17:32:06:4B:9F:66
Certificate issuer:       /CN=266c39f3ff09d22a22b960d65309889ba5f79757
Certificate serial:       02B8FB
Authority key identifier: BC:38:DF:7A:C9:79:F1:54:6D:38:2E:99:AE:01:41:21:FC:5B:53:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/266c39f3ff09d22a22b960d65309889ba5f79757.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/09b42f5c45a84914067d26856a5857e6d90303a8.roa
Signing time:             Wed 24 Mar 2021 14:36:32 +0000
ROA not before:           Wed 24 Mar 2021 14:36:31 +0000
ROA not after:            Tue 24 Mar 2026 14:36:31 +0000
asID:                     262589
IP address blocks:        2801:126::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178427 (0x2b8fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266c39f3ff09d22a22b960d65309889ba5f79757
        Validity
            Not Before: Mar 24 14:36:31 2021 GMT
            Not After : Mar 24 14:36:31 2026 GMT
        Subject: CN=09b42f5c45a84914067d26856a5857e6d90303a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:bb:c1:96:29:87:5a:78:a9:d9:78:a3:5b:
                    5d:8a:87:be:b2:74:1e:97:a5:17:2f:6d:e1:4b:24:
                    4f:81:db:65:47:ba:f1:89:64:a6:8c:35:53:52:1d:
                    4d:22:25:dd:65:ab:e9:e1:ef:e5:82:98:34:47:41:
                    1c:5f:5c:c3:4a:b0:69:3b:dc:99:d3:3e:bc:f9:b2:
                    86:9b:1b:ec:31:5c:76:c8:8c:de:5b:5a:1d:61:67:
                    17:33:65:e4:0f:17:6f:8d:4a:10:99:57:0b:7b:35:
                    aa:54:c9:96:cd:b0:61:11:47:4e:42:20:0b:08:c6:
                    57:a4:be:ec:38:24:02:46:ee:f2:b0:de:c4:c8:2d:
                    65:09:ee:c8:25:04:3c:aa:bb:d9:9e:4b:af:9e:d1:
                    7e:51:03:bb:53:7f:a5:0c:fe:bf:61:61:de:a3:f6:
                    da:1f:ba:95:76:eb:55:a7:96:68:1c:c7:af:b0:cc:
                    ad:33:3d:36:3d:b7:91:a4:81:87:b7:0f:38:68:21:
                    d8:f5:f6:99:2d:73:5d:16:55:ac:04:a3:3d:5b:f0:
                    29:c2:b5:a6:cb:b1:86:32:6b:52:a1:4a:a3:97:c8:
                    2e:d4:70:72:ca:ce:d9:8c:24:3a:1f:bf:3e:00:f9:
                    c9:23:b8:e4:db:bf:27:e0:37:db:56:ad:b6:31:86:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:20:F0:B8:35:1F:F3:13:D1:1E:77:92:A5:A8:17:32:06:4B:9F:66
            X509v3 Authority Key Identifier:
                keyid:BC:38:DF:7A:C9:79:F1:54:6D:38:2E:99:AE:01:41:21:FC:5B:53:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/266c39f3ff09d22a22b960d65309889ba5f79757.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/09b42f5c45a84914067d26856a5857e6d90303a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/266c39f3ff09d22a22b960d65309889ba5f79757.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:126::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:6a:c3:63:c6:ee:f9:0b:f9:f9:bb:65:99:d7:a6:c6:04:
         4d:32:2f:39:bc:10:8d:e8:ec:1c:2e:86:86:8d:89:ee:20:5f:
         6c:96:d3:f0:c5:64:23:c8:d4:c2:46:6d:e6:7c:42:39:6a:79:
         38:b1:f1:b6:3f:96:63:40:2b:23:ed:0c:d4:d4:f0:5d:74:b7:
         9d:2a:d1:c0:2b:56:45:99:a2:65:09:dd:af:f8:57:18:0a:3c:
         8c:ce:0e:39:55:80:8b:47:0b:ab:f8:fe:c0:be:a6:82:63:93:
         46:09:27:9a:31:0c:0d:48:fa:eb:2e:89:ed:e7:11:d0:db:6e:
         97:3d:f0:2c:4a:90:09:6f:dc:25:d4:a5:37:45:45:74:08:81:
         75:e0:43:4d:58:81:15:95:bc:16:ea:26:b2:d1:d0:ff:b4:ff:
         88:e3:6b:70:71:42:40:32:0b:b2:ed:4b:13:dd:f3:4f:a4:ed:
         b3:49:95:b5:14:7b:eb:ee:b4:d4:03:a1:a1:56:38:ae:83:1a:
         98:36:38:f4:7f:3e:77:a5:f0:9e:76:2f:25:25:49:2d:9e:74:
         83:fd:34:42:7c:f5:66:8a:93:c4:d7:1d:bc:81:ad:33:be:82:
         f8:89:2b:55:6a:0f:ff:cb:03:08:39:f9:9d:1a:36:9a:03:c1:
         a3:ad:10:93
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDArj7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI2
NmMzOWYzZmYwOWQyMmEyMmI5NjBkNjUzMDk4ODliYTVmNzk3NTcwHhcNMjEwMzI0
MTQzNjMxWhcNMjYwMzI0MTQzNjMxWjAzMTEwLwYDVQQDEygwOWI0MmY1YzQ1YTg0
OTE0MDY3ZDI2ODU2YTU4NTdlNmQ5MDMwM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxCK7wZYph1p4qdl4o1tdioe+snQel6UXL23hSyRPgdtlR7rx
iWSmjDVTUh1NIiXdZavp4e/lgpg0R0EcX1zDSrBpO9yZ0z68+bKGmxvsMVx2yIze
W1odYWcXM2XkDxdvjUoQmVcLezWqVMmWzbBhEUdOQiALCMZXpL7sOCQCRu7ysN7E
yC1lCe7IJQQ8qrvZnkuvntF+UQO7U3+lDP6/YWHeo/baH7qVdutVp5ZoHMevsMyt
Mz02PbeRpIGHtw84aCHY9faZLXNdFlWsBKM9W/ApwrWmy7GGMmtSoUqjl8gu1HBy
ys7ZjCQ6H78+APnJI7jk278n4DfbVq22MYal3wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLsg8Lg1H/MT0R53kqWoFzIGS59mMB8GA1UdIwQYMBaAFLw433rJefFUbTgu
ma4BQSH8W1OaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjY2YzM5
ZjNmZjA5ZDIyYTIyYjk2MGQ2NTMwOTg4OWJhNWY3OTc1Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTcwYjY3OTUtMjlhOS00ZmVjLWE5ZmItN2IxMDFh
YjY4MTQ0LzA5YjQyZjVjNDVhODQ5MTQwNjdkMjY4NTZhNTg1N2U2ZDkwMzAzYTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNzBiNjc5NS0yOWE5LTRmZWMtYTlmYi03YjEw
MWFiNjgxNDQvMjY2YzM5ZjNmZjA5ZDIyYTIyYjk2MGQ2NTMwOTg4OWJhNWY3OTc1
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBASYAADANBgkqhkiG9w0BAQsFAAOCAQEAgYtqw2PG7vkL
+fm7ZZnXpsYETTIvObwQjejsHC6Gho2J7iBfbJbT8MVkI8jUwkZt5nxCOWp5OLHx
tj+WY0ArI+0M1NTwXXS3nSrRwCtWRZmiZQndr/hXGAo8jM4OOVWAi0cLq/j+wL6m
gmOTRgknmjEMDUj66y6J7ecR0Ntulz3wLEqQCW/cJdSlN0VFdAiBdeBDTViBFZW8
FuomstHQ/7T/iONrcHFCQDILsu1LE93zT6Tts0mVtRR76+601AOhoVY4roMamDY4
9H8+d6XwnnYvJSVJLZ50g/00Qnz1ZoqTxNcdvIGtM76C+IkrVWoP/8sDCDn5nRo2
mgPBo60Qkw==
-----END CERTIFICATE-----