Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/79fd83c321b7e8df511bc4435a6e3a0c23e67e64.roa
File:                     79fd83c321b7e8df511bc4435a6e3a0c23e67e64.roa (raw, json)
Hash identifier:          JOLXGKynnLkGYYZ6RRcy6ctOXW23UacEkonwfomZA5E=
Subject key identifier:   4D:A4:C5:AE:63:8A:E6:C7:A3:68:72:F4:DD:BC:4A:76:FB:DB:94:1B
Certificate issuer:       /CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
Certificate serial:       7614
Authority key identifier: 69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/79fd83c321b7e8df511bc4435a6e3a0c23e67e64.roa
Signing time:             Mon 09 Oct 2023 01:50:34 +0000
ROA not before:           Sun 08 Oct 2023 01:50:34 +0000
ROA not after:            Thu 09 Oct 2025 01:50:34 +0000
asID:                     64153
IP address blocks:        2801:19:b800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30228 (0x7614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
        Validity
            Not Before: Oct  8 01:50:34 2023 GMT
            Not After : Oct  9 01:50:34 2025 GMT
        Subject: CN=79fd83c321b7e8df511bc4435a6e3a0c23e67e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:f4:c8:7d:27:ad:58:23:78:4b:15:d7:5e:
                    59:13:03:a5:19:c6:65:e1:96:49:7f:ac:78:1e:8b:
                    c1:13:40:98:b7:6e:ef:51:33:af:5e:3f:80:62:e7:
                    57:46:4f:54:87:d8:fd:37:2e:16:64:86:a8:2b:9e:
                    0a:55:96:ce:2d:a1:11:42:09:6c:91:e5:7a:b2:25:
                    b1:29:dd:e6:98:94:de:50:ec:94:5a:99:b9:55:63:
                    c3:be:4e:f5:e8:f8:f5:37:f9:63:41:8e:b5:f4:b0:
                    ff:dc:aa:7a:e6:e3:90:3d:3f:1b:81:01:b0:21:a7:
                    15:0e:9e:d9:b4:53:01:d2:98:d3:02:54:c0:a8:88:
                    de:33:70:81:8f:95:8e:67:09:cd:50:d7:9e:a3:cb:
                    18:87:e3:0c:17:2f:39:b0:ec:ee:a0:d1:b7:7d:fc:
                    e2:cb:e3:40:82:ba:25:0a:e0:8c:68:29:1d:35:04:
                    c0:40:d4:10:d7:d1:3d:b9:e8:8a:5e:b3:80:7c:f6:
                    8c:cd:c9:0c:ec:61:1b:4d:5a:d1:be:de:d6:0f:e4:
                    1e:79:fd:db:8c:65:50:75:c1:6f:a3:9e:c4:c4:c3:
                    3a:cc:55:7b:7d:10:fb:1c:8a:f8:4e:1b:59:50:de:
                    66:fa:56:70:20:24:df:3f:5a:3f:7f:0f:80:26:b1:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:C5:AE:63:8A:E6:C7:A3:68:72:F4:DD:BC:4A:76:FB:DB:94:1B
            X509v3 Authority Key Identifier:
                keyid:69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/79fd83c321b7e8df511bc4435a6e3a0c23e67e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/58f96ca109bc5993a1bf6e91b30fce649102e01e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:46:9d:65:f0:4d:db:01:26:02:b0:fa:62:c2:9c:7e:2d:
         6e:ce:b6:7c:05:a7:ed:11:94:b3:5f:c0:c7:49:e4:63:a3:8b:
         f2:d1:5e:b9:16:a8:1d:db:ac:cc:cc:cf:23:8b:c8:5e:01:2e:
         aa:20:03:cf:6f:67:2d:e0:ed:df:a1:7d:aa:fc:41:82:3f:f6:
         2e:be:f4:72:fd:8e:6b:76:49:27:87:47:28:4c:df:8c:ba:79:
         18:64:5b:ab:e5:88:f9:2a:1b:f7:2b:d3:76:60:eb:e6:35:8c:
         04:e4:df:c0:18:b4:86:88:60:42:d4:e6:2d:b0:01:54:7e:91:
         92:2d:44:3b:82:c2:ed:15:e2:36:8f:30:1d:a1:cc:bf:0d:d6:
         77:c0:90:c3:f6:55:c8:b3:7c:b3:5f:f2:dd:cb:7b:7b:0e:52:
         bf:0d:fb:a7:a7:aa:78:63:a3:d9:1e:c6:c1:47:02:73:0b:2f:
         07:46:0f:69:ee:52:ae:86:c5:8c:32:e0:be:26:c6:cc:88:87:
         52:f1:3d:6d:e1:96:f0:7b:ef:e5:ac:b6:4c:c7:28:ff:22:ae:
         9b:69:6d:f8:4f:e4:e7:46:a4:db:30:77:e3:27:ec:e1:5d:ae:
         b7:4d:ae:58:df:23:4b:6f:42:e7:ff:5c:a8:81:70:4a:5e:61:
         fb:d3:52:d1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICdhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThm
OTZjYTEwOWJjNTk5M2ExYmY2ZTkxYjMwZmNlNjQ5MTAyZTAxZTAeFw0yMzEwMDgw
MTUwMzRaFw0yNTEwMDkwMTUwMzRaMDMxMTAvBgNVBAMTKDc5ZmQ4M2MzMjFiN2U4
ZGY1MTFiYzQ0MzVhNmUzYTBjMjNlNjdlNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCI8vTIfSetWCN4SxXXXlkTA6UZxmXhlkl/rHgei8ETQJi3bu9R
M69eP4Bi51dGT1SH2P03LhZkhqgrngpVls4toRFCCWyR5XqyJbEp3eaYlN5Q7JRa
mblVY8O+TvXo+PU3+WNBjrX0sP/cqnrm45A9PxuBAbAhpxUOntm0UwHSmNMCVMCo
iN4zcIGPlY5nCc1Q156jyxiH4wwXLzmw7O6g0bd9/OLL40CCuiUK4IxoKR01BMBA
1BDX0T256Ipes4B89ozNyQzsYRtNWtG+3tYP5B55/duMZVB1wW+jnsTEwzrMVXt9
EPscivhOG1lQ3mb6VnAgJN8/Wj9/D4AmsX+jAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUTaTFrmOK5sejaHL03bxKdvvblBswHwYDVR0jBBgwFoAUaSwP2GQRkjFqdzfB
8jsUE3EydBIwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81OGY5NmNh
MTA5YmM1OTkzYTFiZjZlOTFiMzBmY2U2NDkxMDJlMDFlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mMTM2ZTk0Mi0xODQ5LTQ5YTctYTlmOC00NmY2MTA2
ZWM1NGQvNzlmZDgzYzMyMWI3ZThkZjUxMWJjNDQzNWE2ZTNhMGMyM2U2N2U2NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2YxMzZlOTQyLTE4NDktNDlhNy1hOWY4LTQ2ZjYx
MDZlYzU0ZC81OGY5NmNhMTA5YmM1OTkzYTFiZjZlOTFiMzBmY2U2NDkxMDJlMDFl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEAGbgAMA0GCSqGSIb3DQEBCwUAA4IBAQBOV0adZfBN2wEm
ArD6YsKcfi1uzrZ8BaftEZSzX8DHSeRjo4vy0V65Fqgd26zMzM8ji8heAS6qIAPP
b2ct4O3foX2q/EGCP/YuvvRy/Y5rdkknh0coTN+MunkYZFur5Yj5Khv3K9N2YOvm
NYwE5N/AGLSGiGBC1OYtsAFUfpGSLUQ7gsLtFeI2jzAdocy/DdZ3wJDD9lXIs3yz
X/Ldy3t7DlK/Dfunp6p4Y6PZHsbBRwJzCy8HRg9p7lKuhsWMMuC+JsbMiIdS8T1t
4Zbwe+/lrLZMxyj/Iq6baW34T+TnRqTbMHfjJ+zhXa63Ta5Y3yNLb0Ln/1yogXBK
XmH701LR
-----END CERTIFICATE-----