Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/67a679f13e5d4c5ac15d661bcd37d9a4c607f549.roa
File:                     67a679f13e5d4c5ac15d661bcd37d9a4c607f549.roa (raw, json)
Hash identifier:          NjYV8XFlmVy8i2h5BaDawP/GArU+aXw8eqjJ7r/dyW0=
Subject key identifier:   61:5F:A7:14:95:EA:40:87:E0:35:08:75:F0:E1:DE:AB:FA:6F:3A:14
Certificate issuer:       /CN=c51088545d67fa073263cda959bf704f45a92d2e
Certificate serial:       03C2A5
Authority key identifier: 9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/67a679f13e5d4c5ac15d661bcd37d9a4c607f549.roa
Signing time:             Fri 10 Jun 2022 15:43:40 +0000
ROA not before:           Sat 04 Jun 2022 03:00:00 +0000
ROA not after:            Tue 04 Jun 2024 03:00:00 +0000
asID:                     18747
IP address blocks:        2801:111:2::/48 maxlen: 48
                          2801:111:3::/48 maxlen: 48
                          2801:111:4::/48 maxlen: 48
                          2801:111:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246437 (0x3c2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51088545d67fa073263cda959bf704f45a92d2e
        Validity
            Not Before: Jun  4 03:00:00 2022 GMT
            Not After : Jun  4 03:00:00 2024 GMT
        Subject: CN=67a679f13e5d4c5ac15d661bcd37d9a4c607f549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:34:85:97:fc:0b:cc:38:ec:37:fa:b2:54:1a:
                    ee:54:af:c0:ae:a0:11:d5:a7:47:3c:29:0e:09:22:
                    84:4a:aa:ed:ec:df:04:b9:37:54:72:f5:03:27:dd:
                    aa:1a:7e:b4:a5:63:af:73:e9:d7:6e:dc:84:9f:6d:
                    a7:e3:76:c2:9a:bc:e5:69:48:d4:57:05:59:4b:32:
                    a7:00:51:6e:87:2f:5a:f3:f0:c9:c1:02:5a:6d:0e:
                    2a:ce:c6:b2:f8:ec:c7:9c:53:4b:3a:92:99:90:ac:
                    90:1a:72:89:2b:83:17:62:41:83:f2:1a:f3:12:f8:
                    1a:d6:08:3b:2f:5c:9d:40:ed:21:e4:59:5c:8e:08:
                    05:ab:40:41:49:6d:20:50:20:48:b2:3d:90:11:3e:
                    95:24:03:e0:2f:ff:c3:bb:e8:3f:f3:15:70:a1:cd:
                    5d:59:0b:80:94:8a:f5:47:a1:85:d3:f8:fb:bf:1f:
                    4d:35:e0:35:ba:7b:b6:7c:8f:62:b4:a2:e6:ab:ba:
                    18:d1:6a:7b:c5:b4:bb:fd:70:de:da:1b:ea:2f:9b:
                    92:d5:be:fd:be:c9:17:7c:cf:79:99:5d:2e:b1:55:
                    0d:ad:58:a7:0d:7c:67:11:e3:15:dd:d3:f4:79:78:
                    b6:40:9a:08:bb:6f:44:90:1f:16:73:0f:78:32:a8:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:A7:14:95:EA:40:87:E0:35:08:75:F0:E1:DE:AB:FA:6F:3A:14
            X509v3 Authority Key Identifier:
                keyid:9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/67a679f13e5d4c5ac15d661bcd37d9a4c607f549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c51088545d67fa073263cda959bf704f45a92d2e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:2::-2801:111:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         81:eb:61:0f:86:5f:d8:2a:65:ef:21:4c:e4:e0:bb:37:01:16:
         f1:0e:ca:4e:e2:56:68:37:cb:e9:50:9f:43:2c:1d:b2:03:1b:
         00:bd:e7:ff:13:25:19:71:50:44:e8:49:6e:b6:f7:c2:2f:9b:
         11:81:68:5c:66:fa:a7:79:74:b2:28:ed:bb:76:f5:29:4c:cd:
         9e:01:bc:e9:d3:01:a0:a1:0d:a6:19:8c:e7:1a:6d:55:e7:71:
         4b:15:a9:ea:59:cd:de:14:09:30:ff:09:e0:41:80:fa:55:c1:
         eb:a7:00:6d:e7:b7:80:14:b6:ba:e4:ea:15:dc:9e:e8:92:14:
         d9:ef:61:26:19:8d:59:8c:35:bd:0e:73:cd:3c:80:ae:c1:61:
         83:f3:ab:a4:2c:b3:b6:1d:9c:c8:ac:d7:71:37:1a:b0:95:dc:
         20:ef:2a:2d:dd:d0:15:d4:59:2e:e8:0c:37:75:a8:6d:d2:fe:
         8c:8b:d4:3b:39:37:b1:6a:8f:87:6f:b9:8b:bb:1a:1d:eb:6e:
         6a:63:65:3f:ca:dc:4c:9a:0e:0b:8a:d1:37:c8:f5:fb:87:22:
         3f:04:88:79:bf:3d:04:b8:f9:ae:6a:45:a4:3b:c1:e5:af:1e:
         47:d2:e4:9c:05:5e:6b:c4:98:a7:23:2c:c4:0f:45:0e:ba:52:
         05:f5:ed:de
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDA8KlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
MTA4ODU0NWQ2N2ZhMDczMjYzY2RhOTU5YmY3MDRmNDVhOTJkMmUwHhcNMjIwNjA0
MDMwMDAwWhcNMjQwNjA0MDMwMDAwWjAzMTEwLwYDVQQDEyg2N2E2NzlmMTNlNWQ0
YzVhYzE1ZDY2MWJjZDM3ZDlhNGM2MDdmNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhjSFl/wLzDjsN/qyVBruVK/ArqAR1adHPCkOCSKESqrt7N8E
uTdUcvUDJ92qGn60pWOvc+nXbtyEn22n43bCmrzlaUjUVwVZSzKnAFFuhy9a8/DJ
wQJabQ4qzsay+OzHnFNLOpKZkKyQGnKJK4MXYkGD8hrzEvga1gg7L1ydQO0h5Flc
jggFq0BBSW0gUCBIsj2QET6VJAPgL//Du+g/8xVwoc1dWQuAlIr1R6GF0/j7vx9N
NeA1unu2fI9itKLmq7oY0Wp7xbS7/XDe2hvqL5uS1b79vskXfM95mV0usVUNrVin
DXxnEeMV3dP0eXi2QJoIu29EkB8Wcw94Mqg6YQIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFGFfpxSV6kCH4DUIdfDh3qv6bzoUMB8GA1UdIwQYMBaAFJ341oru35nB0yJS
xJ6e1/kciE5sMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzUxMDg4
NTQ1ZDY3ZmEwNzMyNjNjZGE5NTliZjcwNGY0NWE5MmQyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjVkNmU1MTgtZTNkOC00ODNjLWJmMmUtNTE5M2Nl
M2I0ZjU2LzY3YTY3OWYxM2U1ZDRjNWFjMTVkNjYxYmNkMzdkOWE0YzYwN2Y1NDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWQ2ZTUxOC1lM2Q4LTQ4M2MtYmYyZS01MTkz
Y2UzYjRmNTYvYzUxMDg4NTQ1ZDY3ZmEwNzMyNjNjZGE5NTliZjcwNGY0NWE5MmQy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAIwFDASAwcBKAEBEQACAwcBKAEBEQAEMA0GCSqGSIb3DQEBCwUAA4IB
AQCB62EPhl/YKmXvIUzk4Ls3ARbxDspO4lZoN8vpUJ9DLB2yAxsAvef/EyUZcVBE
6ElutvfCL5sRgWhcZvqneXSyKO27dvUpTM2eAbzp0wGgoQ2mGYznGm1V53FLFanq
Wc3eFAkw/wngQYD6VcHrpwBt57eAFLa65OoV3J7okhTZ72EmGY1ZjDW9DnPNPICu
wWGD86ukLLO2HZzIrNdxNxqwldwg7yot3dAV1Fku6Aw3daht0v6Mi9Q7OTexao+H
b7mLuxod625qY2U/ytxMmg4LitE3yPX7hyI/BIh5vz0EuPmuakWkO8Hlrx5H0uSc
BV5rxJinIyzED0UOulIF9e3e
-----END CERTIFICATE-----