Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3e2a559a8a19759130844c201f407737fc94f9ec.roa
File:                     3e2a559a8a19759130844c201f407737fc94f9ec.roa (raw, json)
Hash identifier:          I+99Byw/5eytk1914a9jqoc3GR644ObvRA235GbO5/Q=
Subject key identifier:   C6:C5:B2:CB:CA:C3:1B:75:EC:AE:DF:5F:5A:58:90:66:69:2B:AA:75
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       0DD183
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3e2a559a8a19759130844c201f407737fc94f9ec.roa
Signing time:             Wed 24 Mar 2021 14:34:36 +0000
ROA not before:           Wed 24 Mar 2021 14:34:35 +0000
ROA not after:            Tue 24 Mar 2026 14:34:35 +0000
asID:                     14080
IP address blocks:        2800:485::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905603 (0xdd183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 24 14:34:35 2021 GMT
            Not After : Mar 24 14:34:35 2026 GMT
        Subject: CN=3e2a559a8a19759130844c201f407737fc94f9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:a3:a2:bb:04:d7:7d:c8:eb:99:39:b4:0b:
                    14:40:a3:0d:23:9b:2d:32:a8:1b:ac:be:ef:be:2f:
                    a2:c7:19:86:6b:8a:aa:8d:b7:c2:fd:63:e4:70:a3:
                    d5:85:88:23:09:84:9f:3e:b3:ca:0a:6e:48:76:fd:
                    55:05:5c:d8:b7:9a:59:c7:c1:98:76:d7:5e:34:32:
                    1f:d3:b6:53:7b:a9:c5:d9:de:1f:f5:a6:d7:6a:a2:
                    48:b1:8d:8c:5c:5a:0f:ae:d0:43:02:34:ed:a4:b1:
                    e9:0d:29:ee:c2:cd:9d:29:b9:01:54:a1:b0:cc:f4:
                    37:66:ee:53:ae:12:db:bd:d8:a9:8b:9a:45:11:e2:
                    3e:60:fe:e5:4f:36:cd:25:a3:63:90:37:a1:12:a1:
                    fd:c9:f6:53:62:6b:74:3b:2f:ef:16:63:89:b8:c4:
                    f6:00:8f:48:4b:06:23:df:be:77:ed:4b:0f:67:ef:
                    17:99:88:29:e4:8a:1d:67:c3:1f:f0:c5:c0:9b:e2:
                    69:69:35:e0:9c:7a:f6:32:44:56:74:1e:aa:53:62:
                    11:ab:c3:20:f6:70:95:42:06:e3:1a:c2:a0:2c:0a:
                    6a:39:6e:4d:5e:ef:50:0c:cf:9a:66:30:83:dd:26:
                    01:87:d4:b0:a6:85:02:01:00:f4:d0:21:97:b6:3f:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C5:B2:CB:CA:C3:1B:75:EC:AE:DF:5F:5A:58:90:66:69:2B:AA:75
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3e2a559a8a19759130844c201f407737fc94f9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:485::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:ca:b8:96:cf:d6:22:cf:61:ed:77:54:47:3f:20:1c:e7:41:
         9e:e4:ed:9a:44:fd:56:85:08:26:36:11:61:b0:f2:c3:29:ff:
         8c:73:3e:74:ed:4f:e8:04:e4:ee:32:57:f6:2b:cb:a7:14:a0:
         61:ed:56:22:a5:d3:c4:63:c1:a8:f9:41:34:2e:58:73:62:21:
         4d:46:96:0f:0b:8b:10:0f:a1:d4:d0:82:10:57:0d:73:35:6b:
         96:e1:87:c9:72:3f:21:5a:77:ef:cd:5e:af:f1:04:93:be:9d:
         0b:87:12:44:56:5b:32:45:c6:a7:e6:d8:be:a0:97:e4:ae:55:
         e9:ad:77:18:74:86:84:a8:6f:f6:f2:55:d2:bd:cb:d7:e7:ce:
         7c:1d:a7:29:db:0d:8f:84:ab:f2:52:3f:35:51:26:5d:aa:99:
         a7:11:b5:e9:d7:05:f9:ab:4e:51:49:8b:0f:a4:4d:58:59:74:
         9e:0c:2f:df:c3:18:dd:13:db:6f:58:2f:ca:8a:13:ce:3a:cb:
         00:39:13:ad:46:3a:ab:28:27:41:e6:06:60:d9:5f:b2:c2:e5:
         24:0c:37:39:7f:5f:d9:b6:48:e9:c2:86:98:ba:da:31:e0:9e:
         88:28:61:00:dc:b7:01:be:3f:fa:5d:e3:4b:43:a7:e6:28:28:
         a4:42:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----