Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/137c14eb939307fa037551fd674691587bccccc3.roa
File:                     137c14eb939307fa037551fd674691587bccccc3.roa (raw, json)
Hash identifier:          m0wP9/6QKmoQehoTXOvf6z7E011eEZu4mROkFg+Cq3I=
Subject key identifier:   BE:88:AA:83:C3:09:90:67:D6:41:78:3F:2A:F6:1D:D9:42:F5:6D:FD
Certificate issuer:       /CN=8da5ca421c0f7de25c5d4a5aa6cc3d396d648035
Certificate serial:       0531
Authority key identifier: 99:92:CE:9C:12:A5:C1:CD:67:A6:71:68:F1:74:94:89:84:82:6B:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8da5ca421c0f7de25c5d4a5aa6cc3d396d648035.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/137c14eb939307fa037551fd674691587bccccc3.roa
Signing time:             Tue 09 Aug 2022 15:53:35 +0000
ROA not before:           Tue 09 Aug 2022 15:52:46 +0000
ROA not after:            Fri 09 Aug 2024 15:52:46 +0000
asID:                     19429
IP address blocks:        2801:149::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da5ca421c0f7de25c5d4a5aa6cc3d396d648035
        Validity
            Not Before: Aug  9 15:52:46 2022 GMT
            Not After : Aug  9 15:52:46 2024 GMT
        Subject: CN=137c14eb939307fa037551fd674691587bccccc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:8e:21:97:da:44:d1:f2:73:cc:40:ca:b8:
                    c8:65:42:3b:0e:1c:9f:dd:98:6f:bc:dc:46:6f:24:
                    af:d4:28:bb:55:fa:0c:f8:c9:91:2f:c2:94:3a:91:
                    bb:37:c6:6d:75:5c:02:d9:bd:98:3d:37:51:83:17:
                    f2:90:bc:df:33:04:c9:15:16:12:07:de:a7:96:e8:
                    2f:6e:7b:4a:37:f3:32:67:ae:9d:eb:3e:71:ea:f6:
                    bb:3f:7b:c0:5b:16:04:ed:0e:93:78:73:8b:a5:01:
                    ce:4a:89:3c:ae:56:a3:c5:78:a0:a4:83:8b:e4:02:
                    d3:3f:4b:66:b7:2a:95:40:df:f0:93:16:72:24:24:
                    19:ba:50:41:9f:19:ae:f1:fd:2c:97:ae:e2:3a:44:
                    39:17:7f:71:84:b9:d3:e6:10:1c:0b:45:3b:a9:c0:
                    88:d0:78:86:12:c2:c6:b4:65:1d:62:14:3c:b2:24:
                    a8:97:59:28:c3:d8:7b:ea:cc:c2:6b:7c:bf:11:87:
                    82:ef:98:cd:dd:7f:b3:e6:f7:94:29:b5:42:ce:b9:
                    31:2e:87:78:23:3a:d4:87:a2:9c:02:6b:fb:b3:53:
                    3d:8f:74:68:f0:18:c5:38:c2:2e:ed:6b:86:22:e6:
                    20:5a:86:d6:f8:f2:55:29:d0:e3:47:74:a7:1d:da:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:AA:83:C3:09:90:67:D6:41:78:3F:2A:F6:1D:D9:42:F5:6D:FD
            X509v3 Authority Key Identifier:
                keyid:99:92:CE:9C:12:A5:C1:CD:67:A6:71:68:F1:74:94:89:84:82:6B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8da5ca421c0f7de25c5d4a5aa6cc3d396d648035.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/137c14eb939307fa037551fd674691587bccccc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/8da5ca421c0f7de25c5d4a5aa6cc3d396d648035.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:149::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:02:70:27:5f:17:d2:fa:45:82:b2:90:81:e8:b0:e0:97:dc:
         4e:a7:12:0e:78:57:96:03:03:23:b9:eb:5f:0f:37:cf:c5:ad:
         8e:d9:84:00:8c:38:39:67:ca:15:1a:e6:71:16:ef:78:18:99:
         17:18:95:38:9d:f0:e9:f8:0c:d9:82:df:db:cc:81:10:5b:2d:
         6a:da:ac:d0:dd:e9:97:47:4c:b9:84:58:27:dd:ff:1b:21:77:
         29:98:b0:2f:6f:20:2a:2b:f4:d1:83:6c:6e:80:d5:38:2e:04:
         07:96:0f:37:8a:42:44:69:0f:58:8c:84:e9:7c:36:d7:7e:c0:
         09:8e:e0:85:f1:76:d2:5e:57:9d:40:02:7d:72:4b:fa:5d:1c:
         a7:ba:81:b8:3f:7d:45:24:85:9c:c2:a9:f4:d9:ef:2b:3f:6a:
         f1:70:ec:32:1e:fc:cf:56:17:72:3a:a6:77:eb:c0:76:f2:25:
         89:d8:38:dd:88:a4:a1:56:f0:e6:34:39:8b:a1:d0:90:69:76:
         ac:73:84:80:41:16:24:ae:70:4c:ee:e7:13:1e:d6:86:1a:c1:
         5c:76:33:cc:61:1f:78:66:1e:59:f3:a4:6a:ea:c6:e0:2f:c9:
         1b:7a:e2:2b:34:ef:e5:d7:c8:77:b9:1e:ca:e2:a0:82:0d:52:
         cd:ef:ff:89
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGRh
NWNhNDIxYzBmN2RlMjVjNWQ0YTVhYTZjYzNkMzk2ZDY0ODAzNTAeFw0yMjA4MDkx
NTUyNDZaFw0yNDA4MDkxNTUyNDZaMDMxMTAvBgNVBAMTKDEzN2MxNGViOTM5MzA3
ZmEwMzc1NTFmZDY3NDY5MTU4N2JjY2NjYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCB7I4hl9pE0fJzzEDKuMhlQjsOHJ/dmG+83EZvJK/UKLtV+gz4
yZEvwpQ6kbs3xm11XALZvZg9N1GDF/KQvN8zBMkVFhIH3qeW6C9ue0o38zJnrp3r
PnHq9rs/e8BbFgTtDpN4c4ulAc5KiTyuVqPFeKCkg4vkAtM/S2a3KpVA3/CTFnIk
JBm6UEGfGa7x/SyXruI6RDkXf3GEudPmEBwLRTupwIjQeIYSwsa0ZR1iFDyyJKiX
WSjD2HvqzMJrfL8Rh4LvmM3df7Pm95QptULOuTEuh3gjOtSHopwCa/uzUz2PdGjw
GMU4wi7ta4Yi5iBahtb48lUp0ONHdKcd2nA7AgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUvoiqg8MJkGfWQXg/KvYd2UL1bf0wHwYDVR0jBBgwFoAUmZLOnBKlwc1npnFo
8XSUiYSCa6cwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84ZGE1Y2E0
MjFjMGY3ZGUyNWM1ZDRhNWFhNmNjM2QzOTZkNjQ4MDM1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lYjRjNjYwYS0wZmVlLTQyYTMtYWVjNy04MjUxNmJl
Y2MxYWUvMTM3YzE0ZWI5MzkzMDdmYTAzNzU1MWZkNjc0NjkxNTg3YmNjY2NjMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ViNGM2NjBhLTBmZWUtNDJhMy1hZWM3LTgyNTE2
YmVjYzFhZS84ZGE1Y2E0MjFjMGY3ZGUyNWM1ZDRhNWFhNmNjM2QzOTZkNjQ4MDM1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEBSQAAMA0GCSqGSIb3DQEBCwUAA4IBAQCDAnAnXxfS+kWC
spCB6LDgl9xOpxIOeFeWAwMjuetfDzfPxa2O2YQAjDg5Z8oVGuZxFu94GJkXGJU4
nfDp+AzZgt/bzIEQWy1q2qzQ3emXR0y5hFgn3f8bIXcpmLAvbyAqK/TRg2xugNU4
LgQHlg83ikJEaQ9YjITpfDbXfsAJjuCF8XbSXledQAJ9ckv6XRynuoG4P31FJIWc
wqn02e8rP2rxcOwyHvzPVhdyOqZ368B28iWJ2DjdiKShVvDmNDmLodCQaXasc4SA
QRYkrnBM7ucTHtaGGsFcdjPMYR94Zh5Z86Rq6sbgL8kbeuIrNO/l18h3uR7K4qCC
DVLN7/+J
-----END CERTIFICATE-----