Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/888a96119363a8cc51b21d9ef0a08ad4043a954e.roa
File:                     888a96119363a8cc51b21d9ef0a08ad4043a954e.roa (raw, json)
Hash identifier:          epJjS5Xo/xva8+U34vpQNnyNOQoFHhGrKCtKeIu3IUo=
Subject key identifier:   A7:81:3C:E7:B4:0F:49:F5:9B:97:97:2B:C6:74:A9:6F:41:0F:7E:65
Certificate issuer:       /CN=e858a451a2d1892b132aefb56f410eaea05663bc
Certificate serial:       087E
Authority key identifier: C2:72:71:87:F0:11:13:07:16:F0:3A:7E:81:71:34:6F:8C:59:AB:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e858a451a2d1892b132aefb56f410eaea05663bc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/888a96119363a8cc51b21d9ef0a08ad4043a954e.roa
Signing time:             Tue 27 Apr 2021 14:03:32 +0000
ROA not before:           Tue 27 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     271809
IP address blocks:        2801:13:a800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858a451a2d1892b132aefb56f410eaea05663bc
        Validity
            Not Before: Apr 27 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=888a96119363a8cc51b21d9ef0a08ad4043a954e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:63:1d:7d:e1:c7:24:4c:cd:d1:33:b3:b0:
                    7b:a3:78:e8:73:31:c9:9f:43:89:48:cc:90:7f:15:
                    d5:22:2e:c1:46:80:13:61:a4:2b:bf:b4:08:15:1f:
                    d1:7e:9e:dc:99:7c:ed:20:81:45:d1:9e:88:fa:85:
                    53:d9:0e:c8:02:6f:0a:0a:aa:0a:c7:c5:e8:7e:b5:
                    7f:d9:11:79:a1:a6:91:4e:f0:e4:22:0b:56:c0:3b:
                    2b:88:71:9f:68:48:37:01:8b:6f:93:98:9f:2f:96:
                    d0:cd:12:9a:13:c0:f3:d1:33:55:5f:32:eb:16:a7:
                    3f:c9:a2:f7:c8:1a:aa:f5:b6:d6:30:91:43:a6:1b:
                    21:04:cf:5c:92:12:64:5d:d8:fc:35:c5:78:19:37:
                    9b:8f:1f:b1:21:99:6e:65:76:c1:c4:a1:5d:ea:fe:
                    b0:08:a9:4f:d6:ae:27:b7:9b:00:48:53:8e:ae:b0:
                    07:62:07:f0:44:9f:b4:71:8d:f7:48:df:09:a6:f9:
                    c2:16:1d:ac:8b:a6:dd:30:f7:44:ac:be:56:ad:12:
                    be:d7:15:e2:b0:d1:79:ed:22:55:68:0b:3b:e5:23:
                    81:19:36:2a:a5:db:9f:ed:00:6a:60:ea:86:0f:4f:
                    58:dc:36:3f:05:c9:2c:81:b8:61:ad:38:b6:77:7d:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:81:3C:E7:B4:0F:49:F5:9B:97:97:2B:C6:74:A9:6F:41:0F:7E:65
            X509v3 Authority Key Identifier:
                keyid:C2:72:71:87:F0:11:13:07:16:F0:3A:7E:81:71:34:6F:8C:59:AB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e858a451a2d1892b132aefb56f410eaea05663bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/888a96119363a8cc51b21d9ef0a08ad4043a954e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/e858a451a2d1892b132aefb56f410eaea05663bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:76:81:63:36:eb:45:df:fa:40:cc:e9:9c:ff:f1:ed:af:1a:
         3d:61:ab:82:6c:49:75:35:50:dc:05:4a:c4:95:91:1c:62:a8:
         cf:39:cd:f0:5d:8b:1f:90:78:f0:06:3b:0a:d5:85:38:cc:ae:
         d4:a8:12:9e:79:17:be:6b:b6:3d:d3:5b:86:0a:8a:0c:af:46:
         b5:5b:fc:14:ac:fa:c4:5b:80:58:61:30:2f:11:7b:b6:b1:de:
         a5:24:13:fa:9c:2e:cc:87:9c:f4:77:12:7c:52:32:40:23:0d:
         35:a0:61:7a:d1:c4:bf:01:98:bd:42:5b:53:66:39:c9:c2:3e:
         58:ba:f7:72:8e:a2:e4:78:11:f2:54:a8:ee:ab:f2:41:a0:a5:
         c8:9a:8a:fc:b2:7d:63:1b:37:10:08:bd:75:4b:ed:cd:03:e5:
         91:ea:7b:c2:80:a1:1b:82:ef:1c:48:fe:cc:17:dd:bd:3c:25:
         88:8d:7f:f8:8a:54:34:7b:88:7d:95:61:bc:50:ec:b5:56:5d:
         5f:dc:fa:a6:21:fe:f6:46:b8:8e:1f:40:4d:c5:bc:47:95:e1:
         66:43:5b:75:bd:e4:f2:65:86:7b:7f:8e:44:d0:30:03:f9:a6:
         31:f3:f9:55:67:dc:58:86:a7:90:2f:2f:1a:30:9a:3e:20:35:
         04:d9:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----