Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/0ee7614c1160b17ca6c8e90948b13de7f030e062.roa
File:                     0ee7614c1160b17ca6c8e90948b13de7f030e062.roa (raw, json)
Hash identifier:          meJSNbxS1Eun6Hs2AJnBsWh81Zq5xaxXzASEjuU9HTE=
Subject key identifier:   AA:DF:E5:76:30:66:48:83:00:0B:F5:82:9F:D1:9A:98:52:7C:A8:95
Certificate issuer:       /CN=4ec634c3b7ff325c64b35994950d9a3b1c155ee0
Certificate serial:       0B891D
Authority key identifier: 35:83:75:D6:C9:4C:48:68:57:3C:D8:D0:AA:1C:DD:2D:9C:7D:5F:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec634c3b7ff325c64b35994950d9a3b1c155ee0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/0ee7614c1160b17ca6c8e90948b13de7f030e062.roa
Signing time:             Wed 24 Mar 2021 14:34:49 +0000
ROA not before:           Wed 24 Mar 2021 14:34:49 +0000
ROA not after:            Tue 24 Mar 2026 14:34:49 +0000
asID:                     3816
IP address blocks:        2801:122::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755997 (0xb891d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec634c3b7ff325c64b35994950d9a3b1c155ee0
        Validity
            Not Before: Mar 24 14:34:49 2021 GMT
            Not After : Mar 24 14:34:49 2026 GMT
        Subject: CN=0ee7614c1160b17ca6c8e90948b13de7f030e062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:d0:36:24:eb:3e:30:cf:57:b7:9a:59:b5:
                    12:00:81:3b:27:5b:74:10:70:73:a8:3b:a1:86:fa:
                    a9:b9:8b:7b:97:f7:41:c9:6a:f7:f0:36:73:53:43:
                    9b:b0:5c:fe:c3:c0:55:30:67:ff:8b:6d:63:5b:78:
                    88:ac:3b:c6:7a:28:59:fa:07:a4:ee:3c:09:6b:fa:
                    03:c0:b7:cc:49:ce:2d:91:81:cc:34:d9:f7:a4:e8:
                    44:0a:63:48:db:70:05:48:5f:2c:bf:d2:df:97:44:
                    9d:f0:97:71:e1:01:fd:e3:74:ba:13:4f:10:a6:b0:
                    81:ff:76:d2:f7:9e:c9:b6:14:86:04:b3:32:99:4f:
                    4c:a6:46:61:aa:83:07:d1:9d:93:1d:5f:b2:82:13:
                    3f:c1:eb:92:dc:bd:c6:07:be:7e:22:42:f9:12:93:
                    c1:7d:65:92:83:90:68:2f:25:6c:59:2c:09:85:8b:
                    0d:78:26:b2:d3:ab:f5:f5:be:8f:89:49:c4:aa:f9:
                    5b:af:7b:b4:c3:d4:52:ec:c7:2d:c1:52:5d:89:57:
                    88:a5:1b:2a:03:d4:23:2a:3f:ec:98:b9:f2:85:7a:
                    d5:bb:92:e7:3d:c3:fd:59:85:aa:2f:d3:1d:ed:f1:
                    fa:a5:ac:12:00:42:b6:f1:0c:d1:92:31:cf:e4:47:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:E5:76:30:66:48:83:00:0B:F5:82:9F:D1:9A:98:52:7C:A8:95
            X509v3 Authority Key Identifier:
                keyid:35:83:75:D6:C9:4C:48:68:57:3C:D8:D0:AA:1C:DD:2D:9C:7D:5F:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec634c3b7ff325c64b35994950d9a3b1c155ee0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/0ee7614c1160b17ca6c8e90948b13de7f030e062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f2f69d0c-2f60-43a0-92bd-9dcee71b41e6/4ec634c3b7ff325c64b35994950d9a3b1c155ee0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:122::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:9d:bb:f6:a6:cf:87:06:92:2d:c1:52:fb:e1:f8:c6:db:
         a4:b0:44:80:d1:f2:90:f5:d0:1c:5a:e0:2c:5f:67:ba:93:38:
         c4:55:a0:98:76:50:67:e7:fd:ed:69:1c:66:7c:1b:b9:2f:aa:
         e4:6e:d8:d0:c8:7c:cc:30:0b:f1:30:ca:69:5f:a5:72:a9:0a:
         af:85:dd:bb:61:10:f8:c4:6a:5d:ce:52:16:a6:29:45:3a:f8:
         b8:a6:69:d9:52:55:89:93:03:d9:08:78:79:f4:82:85:f5:34:
         2c:09:72:f3:22:95:84:c3:e9:f4:92:5f:4b:0f:d2:2a:c8:f8:
         a2:9f:49:c2:ca:5c:0b:e9:3c:4c:96:b3:77:51:b9:f2:02:4c:
         43:02:3f:2d:4d:24:c0:f2:59:8d:ad:24:55:50:f7:48:01:3a:
         89:aa:1b:f9:21:25:85:88:f8:54:45:fc:1b:01:55:26:81:e8:
         02:41:04:23:64:af:ff:d9:ee:fa:1c:7d:d6:fc:c7:39:de:37:
         9b:34:00:c1:2f:4f:d2:3a:63:d1:f2:5c:69:8b:33:0c:66:e5:
         7d:84:95:f0:df:84:61:43:42:71:58:29:d6:e4:f7:40:f5:f2:
         63:42:b9:16:61:f8:88:b2:37:1a:fa:c2:ad:f7:3e:29:94:41:
         4a:ff:36:dc
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDC4kdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl
YzYzNGMzYjdmZjMyNWM2NGIzNTk5NDk1MGQ5YTNiMWMxNTVlZTAwHhcNMjEwMzI0
MTQzNDQ5WhcNMjYwMzI0MTQzNDQ5WjAzMTEwLwYDVQQDEygwZWU3NjE0YzExNjBi
MTdjYTZjOGU5MDk0OGIxM2RlN2YwMzBlMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAok7QNiTrPjDPV7eaWbUSAIE7J1t0EHBzqDuhhvqpuYt7l/dB
yWr38DZzU0ObsFz+w8BVMGf/i21jW3iIrDvGeihZ+gek7jwJa/oDwLfMSc4tkYHM
NNn3pOhECmNI23AFSF8sv9Lfl0Sd8Jdx4QH943S6E08QprCB/3bS957JthSGBLMy
mU9MpkZhqoMH0Z2THV+yghM/weuS3L3GB75+IkL5EpPBfWWSg5BoLyVsWSwJhYsN
eCay06v19b6PiUnEqvlbr3u0w9RS7MctwVJdiVeIpRsqA9QjKj/smLnyhXrVu5Ln
PcP9WYWqL9Md7fH6pawSAEK28QzRkjHP5EeJqwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFKrf5XYwZkiDAAv1gp/RmphSfKiVMB8GA1UdIwQYMBaAFDWDddbJTEhoVzzY
0Koc3S2cfV8vMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGVjNjM0
YzNiN2ZmMzI1YzY0YjM1OTk0OTUwZDlhM2IxYzE1NWVlMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjJmNjlkMGMtMmY2MC00M2EwLTkyYmQtOWRjZWU3
MWI0MWU2LzBlZTc2MTRjMTE2MGIxN2NhNmM4ZTkwOTQ4YjEzZGU3ZjAzMGUwNjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMmY2OWQwYy0yZjYwLTQzYTAtOTJiZC05ZGNl
ZTcxYjQxZTYvNGVjNjM0YzNiN2ZmMzI1YzY0YjM1OTk0OTUwZDlhM2IxYzE1NWVl
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgBASIAMA0GCSqGSIb3DQEBCwUAA4IBAQCFx5279qbPhwaS
LcFS++H4xtuksESA0fKQ9dAcWuAsX2e6kzjEVaCYdlBn5/3taRxmfBu5L6rkbtjQ
yHzMMAvxMMppX6VyqQqvhd27YRD4xGpdzlIWpilFOvi4pmnZUlWJkwPZCHh59IKF
9TQsCXLzIpWEw+n0kl9LD9IqyPiin0nCylwL6TxMlrN3UbnyAkxDAj8tTSTA8lmN
rSRVUPdIATqJqhv5ISWFiPhURfwbAVUmgegCQQQjZK//2e76HH3W/Mc53jebNADB
L0/SOmPR8lxpizMMZuV9hJXw34RhQ0JxWCnW5PdA9fJjQrkWYfiIsjca+sKt9z4p
lEFK/zbc
-----END CERTIFICATE-----