Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/af3fafe120c6187c6740608f3ff6686c8d1d4842.roa
File:                     af3fafe120c6187c6740608f3ff6686c8d1d4842.roa (raw, json)
Hash identifier:          /havApq0ozAcIKkCBBch0Xr2wsF+moE6xoJmIC6ob/U=
Subject key identifier:   AE:CF:4E:93:00:0A:6A:76:A8:D3:58:BA:BD:11:21:D0:F1:40:3D:53
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       0DD479
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/af3fafe120c6187c6740608f3ff6686c8d1d4842.roa
Signing time:             Wed 24 Mar 2021 14:34:36 +0000
ROA not before:           Wed 24 Mar 2021 14:34:35 +0000
ROA not after:            Tue 24 Mar 2026 14:34:35 +0000
asID:                     10620
IP address blocks:        2800:485:fe00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906361 (0xdd479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 24 14:34:35 2021 GMT
            Not After : Mar 24 14:34:35 2026 GMT
        Subject: CN=af3fafe120c6187c6740608f3ff6686c8d1d4842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:b3:2e:fa:24:a4:15:75:b4:a6:8e:ac:d9:
                    7c:f7:de:05:38:f7:6b:55:bc:f7:8d:4d:06:02:ab:
                    f7:7e:ab:c8:7e:8d:3b:21:33:cb:c1:7d:bd:80:b4:
                    b6:07:73:ae:9a:f4:ac:47:f5:0b:4e:e8:5c:b2:c1:
                    6a:83:fd:f4:eb:82:29:a8:5d:8b:2e:e2:5a:75:89:
                    09:01:49:6b:8e:fc:f6:dd:90:64:29:6d:cb:a8:6f:
                    10:bf:06:b9:65:fb:90:db:f0:44:c4:b5:bf:52:24:
                    6c:d7:0a:76:3b:2e:57:11:3a:22:f3:18:66:06:a1:
                    aa:17:a5:50:02:ae:af:a4:85:d4:dd:9d:65:32:7b:
                    eb:a0:c3:5c:e5:ee:c4:8e:1f:89:fc:86:24:da:79:
                    c4:9d:b5:40:94:d8:04:e8:eb:33:f4:a3:5d:7d:17:
                    07:2a:fc:a1:8a:a8:0c:05:d5:f8:f7:b0:fe:2f:74:
                    32:d1:02:d7:47:1e:c2:48:1e:ba:b7:ce:1b:e1:ff:
                    4a:3e:c5:ce:4b:bd:b6:48:7f:29:c6:e7:4a:5a:87:
                    b1:47:7c:82:91:d5:32:93:65:0a:ed:b4:1b:c4:0b:
                    9c:43:07:b0:80:43:19:0e:49:af:7e:84:80:ee:cf:
                    9b:5b:39:9a:31:2a:75:de:ec:6f:55:47:89:a5:ef:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CF:4E:93:00:0A:6A:76:A8:D3:58:BA:BD:11:21:D0:F1:40:3D:53
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/af3fafe120c6187c6740608f3ff6686c8d1d4842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:485:fe00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:15:73:a7:ed:c1:25:c8:93:d3:71:10:3a:be:6f:5e:48:
         aa:40:24:8e:ed:16:dd:9e:44:3f:8c:47:40:db:5d:f1:d5:eb:
         2d:c4:aa:22:65:a8:b8:55:93:82:52:3d:16:ab:25:87:ae:6e:
         68:19:31:0d:4d:4b:53:e6:ab:30:f4:15:b2:c5:b7:ba:2d:08:
         de:d5:cd:6b:72:f4:1b:16:6a:a7:99:f9:c1:6a:b3:4a:c9:cf:
         72:3d:d0:01:ee:c2:0a:58:b1:0b:2c:36:fb:c3:2b:96:d2:1a:
         87:35:93:b9:68:a4:20:56:7a:3a:79:fd:83:66:9e:75:f8:23:
         b6:1e:ba:07:69:75:7d:8b:1f:2b:98:1d:4a:de:d3:40:fd:6a:
         df:d5:2e:49:99:3a:ca:ba:5e:49:7c:84:56:e9:61:32:fa:ff:
         a7:ef:20:17:45:db:72:c3:19:b2:87:f3:0b:f5:23:99:6b:f9:
         02:b2:68:69:15:75:2b:a9:fa:41:76:58:5f:ef:c2:51:bc:0f:
         ad:72:4c:30:10:d6:e8:87:d8:67:d0:9f:d2:61:5d:15:e5:83:
         3b:8a:0a:ea:a9:cf:5a:1d:b3:86:36:d4:cb:d3:1b:5b:c3:62:
         70:35:2f:33:d0:c4:37:59:a0:77:da:ec:44:17:0c:72:6c:9b:
         07:bb:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----