Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d3e38ca-0db1-42f5-889e-775a67dd86a0/365a30d6fd9ac54e791804eee927baaecf9673e7.roa
File:                     365a30d6fd9ac54e791804eee927baaecf9673e7.roa (raw, json)
Hash identifier:          SEFRu6iW5veHxaiG1RujMOhEKboWMDOFDn2p31Yv+BU=
Subject key identifier:   0F:77:E3:C1:A6:EA:A2:75:AD:9B:C5:0E:D1:5D:CA:AF:84:31:36:91
Certificate issuer:       /CN=61ab648bf5c176b53334f7fb8158a28975c5c3c1
Certificate serial:       0B8AF8
Authority key identifier: 7C:AC:2B:A0:FB:84:CD:7B:D5:2F:C1:33:E3:99:A0:61:48:64:9A:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ab648bf5c176b53334f7fb8158a28975c5c3c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d3e38ca-0db1-42f5-889e-775a67dd86a0/365a30d6fd9ac54e791804eee927baaecf9673e7.roa
Signing time:             Wed 24 Mar 2021 14:43:07 +0000
ROA not before:           Wed 24 Mar 2021 14:43:07 +0000
ROA not after:            Tue 24 Mar 2026 14:43:07 +0000
asID:                     265570
IP address blocks:        2806:324::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756472 (0xb8af8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ab648bf5c176b53334f7fb8158a28975c5c3c1
        Validity
            Not Before: Mar 24 14:43:07 2021 GMT
            Not After : Mar 24 14:43:07 2026 GMT
        Subject: CN=365a30d6fd9ac54e791804eee927baaecf9673e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:45:da:21:60:96:0f:af:6b:dd:cb:1e:88:
                    ce:50:57:5b:5e:a0:34:c5:42:3e:85:c3:6e:20:4e:
                    d8:e5:ed:77:46:59:38:14:59:31:eb:98:4e:2d:9d:
                    4f:1f:f9:94:a1:77:4c:b9:e0:90:d3:14:49:3d:b0:
                    77:33:3a:3c:59:f9:b8:e2:35:25:10:fd:f0:66:3c:
                    bb:5f:d8:c7:c3:6d:0b:13:4b:a4:46:eb:9f:b3:8e:
                    ee:3e:3b:d8:30:5e:5a:b4:88:9a:a7:8c:d2:9c:88:
                    13:ad:df:28:2d:da:e2:f6:9c:70:12:67:fc:75:27:
                    a7:fd:30:bb:82:ce:76:cc:d6:5a:14:79:04:95:31:
                    d3:c1:f6:39:e2:09:96:7a:5e:ff:4f:8c:00:ca:65:
                    38:d6:fe:d5:20:75:7d:5e:54:16:14:ef:2f:24:48:
                    5c:34:c8:60:ee:dd:84:06:70:58:bd:77:32:f1:d3:
                    e4:df:11:82:80:be:20:6e:4b:bb:37:15:e7:56:06:
                    be:55:d4:cf:bd:da:fb:b3:8f:bf:1f:65:73:cc:81:
                    9d:b9:89:b3:d9:c4:bf:32:c1:ee:1e:72:d3:39:18:
                    fd:63:df:3d:8f:9e:68:5d:e3:e4:dd:af:5f:1d:37:
                    9c:cb:93:48:c1:ba:a1:48:22:85:90:d5:86:2f:84:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:77:E3:C1:A6:EA:A2:75:AD:9B:C5:0E:D1:5D:CA:AF:84:31:36:91
            X509v3 Authority Key Identifier:
                keyid:7C:AC:2B:A0:FB:84:CD:7B:D5:2F:C1:33:E3:99:A0:61:48:64:9A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ab648bf5c176b53334f7fb8158a28975c5c3c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d3e38ca-0db1-42f5-889e-775a67dd86a0/365a30d6fd9ac54e791804eee927baaecf9673e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d3e38ca-0db1-42f5-889e-775a67dd86a0/61ab648bf5c176b53334f7fb8158a28975c5c3c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:324::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:30:60:43:c7:34:8f:56:6a:00:cd:41:e1:2c:8c:dd:34:
         78:0a:88:e5:75:8b:b4:56:60:76:31:96:96:bf:b7:21:ba:90:
         1b:04:9f:85:54:22:48:a7:4b:33:1f:07:3e:fa:21:be:85:13:
         4b:52:82:51:c3:0b:48:7b:a5:33:c0:8e:cc:60:84:85:32:95:
         56:97:ae:bf:20:12:9a:11:08:67:ea:0c:6a:e3:cb:56:d3:94:
         5c:de:28:f3:e7:97:2c:59:d0:2e:18:6b:96:f5:b1:ca:c0:48:
         e3:2a:94:24:2c:f8:51:2b:fb:0c:34:53:52:14:e8:47:fa:e6:
         7a:39:b0:4c:ce:43:08:56:21:32:c2:a0:4f:1c:01:de:34:5e:
         8c:d1:09:5c:f4:e5:9a:c6:1f:de:be:d1:57:e9:11:07:ba:19:
         c8:0a:35:0a:04:3e:bb:ba:e1:c0:36:3b:2d:9f:2e:05:e9:05:
         b5:a5:e4:28:8b:31:2a:be:b7:eb:c5:82:0f:95:d1:5b:45:54:
         d7:69:fe:b0:99:98:f2:b8:25:30:d4:2d:20:f7:00:a3:9b:70:
         c6:a9:e3:f7:07:da:4d:aa:c0:d4:e6:73:f6:88:0c:cd:b7:07:
         3f:7b:cc:07:69:6c:a2:70:06:58:5c:75:ae:0a:9f:a6:42:a7:
         d3:1c:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----