Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/a729410eca6f5fbcfc929115bed2148b36121e09.roa
File:                     a729410eca6f5fbcfc929115bed2148b36121e09.roa (raw, json)
Hash identifier:          Eodvy0IFpeVJrixjTiaKdnBYZ8sW5RRFrc48ZNXdotU=
Subject key identifier:   48:F8:6B:E3:3B:C3:5E:3C:AC:2E:AA:4C:50:82:2C:CF:7C:17:FB:08
Certificate issuer:       /CN=dfbe300aabc348d765164558580cee51843f1a9d
Certificate serial:       37
Authority key identifier: 91:2C:51:08:41:02:17:C2:7D:D2:46:E7:93:2E:72:2E:20:B8:09:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfbe300aabc348d765164558580cee51843f1a9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/a729410eca6f5fbcfc929115bed2148b36121e09.roa
Signing time:             Tue 24 May 2022 22:18:00 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Fri 24 May 2024 03:00:00 +0000
asID:                     27951
IP address blocks:        2801:10:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbe300aabc348d765164558580cee51843f1a9d
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2024 GMT
        Subject: CN=a729410eca6f5fbcfc929115bed2148b36121e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:94:6d:10:d0:bb:bf:38:7e:13:06:32:0d:
                    fe:3d:c9:0d:33:77:14:24:0c:67:19:cd:19:15:87:
                    c3:be:d2:ce:1e:cd:9f:be:f8:f4:4d:e2:bd:ac:09:
                    da:9f:a5:b3:3d:72:3e:c5:23:87:4f:18:af:38:d6:
                    33:8c:ee:eb:44:2d:8d:d2:52:48:6b:9d:98:ab:70:
                    47:b2:fb:fa:e6:14:be:ad:ad:c1:4f:b5:31:72:ac:
                    cb:72:02:56:23:75:a9:ce:00:0f:07:91:60:7c:69:
                    e9:f2:98:88:c5:c1:bd:33:a4:ef:0e:a8:92:5d:ed:
                    61:11:73:28:c7:08:32:f0:c7:d5:34:c3:00:ba:64:
                    2a:97:37:42:17:73:a9:19:49:92:0f:b5:d6:90:60:
                    5f:47:c8:5b:da:6c:0b:2a:a0:bf:1a:a2:3a:0a:e7:
                    55:78:9a:7e:ab:5b:73:64:47:17:12:d5:49:5b:f8:
                    77:a8:01:74:1a:48:7b:4b:80:b0:5d:79:60:78:89:
                    80:ee:2d:5c:0f:9d:6e:c6:fe:ff:e4:08:4e:82:fd:
                    45:de:ec:96:71:0e:93:e5:09:c4:d6:d8:98:24:af:
                    bf:1a:42:3e:47:75:de:5d:b0:6b:f5:c1:76:48:10:
                    22:5e:59:ba:3f:f2:8c:ca:25:ae:2d:64:a9:ff:34:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:6B:E3:3B:C3:5E:3C:AC:2E:AA:4C:50:82:2C:CF:7C:17:FB:08
            X509v3 Authority Key Identifier:
                keyid:91:2C:51:08:41:02:17:C2:7D:D2:46:E7:93:2E:72:2E:20:B8:09:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfbe300aabc348d765164558580cee51843f1a9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/a729410eca6f5fbcfc929115bed2148b36121e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/dfbe300aabc348d765164558580cee51843f1a9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:cf:0f:0a:23:70:7d:38:56:01:2b:12:04:0b:df:87:ab:
         bb:16:47:13:6b:59:1c:91:59:eb:4f:7f:13:4a:a4:6b:54:27:
         98:d7:b2:81:e0:8b:63:95:79:c7:1c:d1:40:0e:50:ab:5e:da:
         c0:93:a2:6d:61:48:ad:27:82:1e:08:31:73:9a:99:93:56:ee:
         92:14:03:6e:72:1c:26:fc:3d:d1:4f:2a:7c:f6:59:5f:54:29:
         64:f6:89:81:a7:ca:a1:81:b8:dd:a9:24:ef:10:83:4f:5c:fa:
         8d:c9:22:ac:28:f3:10:fa:f7:b1:b9:31:5a:ec:10:bb:59:01:
         f2:2d:06:8e:e9:34:4c:2c:ad:44:db:f0:8a:1c:d0:27:56:4c:
         f6:bb:a7:17:8f:e4:9a:a7:de:77:84:10:32:97:85:94:b5:9e:
         de:6a:d4:ff:1c:17:73:fb:ae:10:19:64:8e:af:07:a0:fd:38:
         4b:ae:1d:fe:2d:53:d0:d9:06:3a:d0:26:14:a7:4d:e8:45:ea:
         7d:84:a7:5f:26:08:4d:68:ac:00:41:74:66:e3:27:76:6e:1e:
         a1:54:26:1b:89:03:a6:ff:eb:59:19:3d:6d:a4:3a:b6:f8:23:
         a9:4f:fc:1f:80:59:38:ab:7f:9a:d5:84:70:69:f8:69:ed:be:
         7e:47:e6:0c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhkZmJl
MzAwYWFiYzM0OGQ3NjUxNjQ1NTg1ODBjZWU1MTg0M2YxYTlkMB4XDTIyMDUyNDAz
MDAwMFoXDTI0MDUyNDAzMDAwMFowMzExMC8GA1UEAxMoYTcyOTQxMGVjYTZmNWZi
Y2ZjOTI5MTE1YmVkMjE0OGIzNjEyMWUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALX3lG0Q0Lu/OH4TBjIN/j3JDTN3FCQMZxnNGRWHw77Szh7Nn774
9E3ivawJ2p+lsz1yPsUjh08YrzjWM4zu60QtjdJSSGudmKtwR7L7+uYUvq2twU+1
MXKsy3ICViN1qc4ADweRYHxp6fKYiMXBvTOk7w6okl3tYRFzKMcIMvDH1TTDALpk
Kpc3QhdzqRlJkg+11pBgX0fIW9psCyqgvxqiOgrnVXiafqtbc2RHFxLVSVv4d6gB
dBpIe0uAsF15YHiJgO4tXA+dbsb+/+QIToL9Rd7slnEOk+UJxNbYmCSvvxpCPkd1
3l2wa/XBdkgQIl5Zuj/yjMolri1kqf80zTMCAwEAAaOCAl4wggJaMB0GA1UdDgQW
BBRI+GvjO8NePKwuqkxQgizPfBf7CDAfBgNVHSMEGDAWgBSRLFEIQQIXwn3SRueT
LnIuILgJ+TAOBgNVHQ8BAf8EBAMCB4AwgZoGCCsGAQUFBwEBBIGNMIGKMIGHBggr
BgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNu
aWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2RmYmUzMDBh
YWJjMzQ4ZDc2NTE2NDU1ODU4MGNlZTUxODQzZjFhOWQuY2VyMIGaBggrBgEFBQcB
CwSBjTCBijCBhwYIKwYBBQUHMAuGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMu
bmV0L3Jwa2kvbGFjbmljL2U4ODkxNTFlLWJlOTMtNDM4ZC04YjExLTI0MzE1YmI5
NWFhZC9hNzI5NDEwZWNhNmY1ZmJjZmM5MjkxMTViZWQyMTQ4YjM2MTIxZTA5LnJv
YTCBjwYDVR0fBIGHMIGEMIGBoH+gfYZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTg4OTE1MWUtYmU5My00MzhkLThiMTEtMjQzMTVi
Yjk1YWFkL2RmYmUzMDBhYWJjMzQ4ZDc2NTE2NDU1ODU4MGNlZTUxODQzZjFhOWQu
Y3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAoAQAQ6AAwDQYJKoZIhvcNAQELBQADggEBAAvvzw8KI3B9OFYB
KxIEC9+Hq7sWRxNrWRyRWetPfxNKpGtUJ5jXsoHgi2OVeccc0UAOUKte2sCTom1h
SK0ngh4IMXOamZNW7pIUA25yHCb8PdFPKnz2WV9UKWT2iYGnyqGBuN2pJO8Qg09c
+o3JIqwo8xD697G5MVrsELtZAfItBo7pNEwsrUTb8Ioc0CdWTPa7pxeP5Jqn3neE
EDKXhZS1nt5q1P8cF3P7rhAZZI6vB6D9OEuuHf4tU9DZBjrQJhSnTehF6n2Ep18m
CE1orABBdGbjJ3ZuHqFUJhuJA6b/61kZPW2kOrb4I6lP/B+AWTirf5rVhHBp+Gnt
vn5H5gw=
-----END CERTIFICATE-----