Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/965f4399749eb42b2e175ec544ef43113050f75f.roa
File:                     965f4399749eb42b2e175ec544ef43113050f75f.roa (raw, json)
Hash identifier:          jyIH+DiDoPF3VFdcOT75HG7D21rZGEQobWj5IenpgDo=
Subject key identifier:   05:BB:6D:04:14:B2:EB:87:D2:89:67:55:8D:80:6F:73:2D:52:BD:53
Certificate issuer:       /CN=336ec456fe9047127b4fbdbfb696853ce83a56bb
Certificate serial:       0567
Authority key identifier: 67:EB:1D:BC:BD:E8:FC:95:C9:4C:1C:F1:97:2A:07:B3:31:2A:2E:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/336ec456fe9047127b4fbdbfb696853ce83a56bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/965f4399749eb42b2e175ec544ef43113050f75f.roa
Signing time:             Tue 08 Jun 2021 01:58:44 +0000
ROA not before:           Mon 07 Jun 2021 03:00:00 +0000
ROA not after:            Wed 07 Jun 2023 03:00:00 +0000
asID:                     18747
IP address blocks:        2801:1f:8800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383 (0x567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336ec456fe9047127b4fbdbfb696853ce83a56bb
        Validity
            Not Before: Jun  7 03:00:00 2021 GMT
            Not After : Jun  7 03:00:00 2023 GMT
        Subject: CN=965f4399749eb42b2e175ec544ef43113050f75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:25:4f:7d:cc:57:9c:d2:a5:9a:23:f6:ad:
                    5f:98:e7:db:ee:c8:96:a7:fd:c2:21:29:36:23:32:
                    c4:06:76:c3:1f:62:1e:1d:7a:84:13:ce:ac:3d:98:
                    bf:c4:15:5b:3c:fc:01:b8:ab:c1:5c:01:5b:2b:df:
                    37:06:9b:64:2d:fe:f6:71:ef:3a:2d:a2:21:18:87:
                    18:44:9b:7d:6a:b4:ce:1c:43:a4:00:d5:7c:23:7e:
                    8e:ae:82:fa:65:f8:9c:c5:17:46:81:0a:e0:82:94:
                    2e:be:ec:76:59:2f:61:ca:01:9f:8f:ee:bc:be:60:
                    2b:f2:64:3a:93:63:c7:79:e7:28:a3:50:93:de:06:
                    95:a7:25:55:4e:31:bb:c8:9a:c8:89:2b:45:21:f1:
                    02:be:80:38:7f:94:c0:b5:ca:91:64:31:77:b9:2b:
                    a0:32:34:c9:54:d7:70:d8:dd:f3:a9:57:3c:a2:0a:
                    ce:c4:60:d6:47:5a:8b:08:da:aa:99:8e:3a:0b:80:
                    4d:31:96:e5:ef:d0:ef:2a:74:b1:31:a4:5a:b8:76:
                    cb:71:70:97:74:68:2d:cf:b4:d9:ac:54:fe:25:0b:
                    13:ec:43:c3:00:ba:c2:85:59:f8:3d:03:11:40:47:
                    59:68:68:83:d3:8f:0c:00:88:31:0f:23:42:70:ac:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BB:6D:04:14:B2:EB:87:D2:89:67:55:8D:80:6F:73:2D:52:BD:53
            X509v3 Authority Key Identifier:
                keyid:67:EB:1D:BC:BD:E8:FC:95:C9:4C:1C:F1:97:2A:07:B3:31:2A:2E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/336ec456fe9047127b4fbdbfb696853ce83a56bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/965f4399749eb42b2e175ec544ef43113050f75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/336ec456fe9047127b4fbdbfb696853ce83a56bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:07:34:fb:ec:b2:04:fc:21:4a:9f:82:e1:7c:ea:58:41:7d:
         a9:c6:64:fb:f4:2e:68:93:16:7b:00:b6:e6:a9:16:e5:07:b3:
         0a:52:a0:2b:74:9c:18:fb:27:0e:17:1f:92:88:ee:16:69:9a:
         b6:25:53:13:83:c7:be:0d:bb:11:3a:d2:d7:22:ff:5a:f3:8b:
         be:f4:43:99:83:91:ea:ac:46:c1:2d:98:ca:bf:46:64:c6:82:
         b6:1a:60:32:58:98:be:c0:a6:d1:66:90:ce:02:dc:75:76:3e:
         f7:3b:43:9b:eb:77:61:63:fb:59:d1:ad:c4:ed:f5:e0:5c:f1:
         97:06:d3:09:04:cd:44:c3:a4:cd:47:19:8c:8a:37:9f:87:76:
         71:21:87:46:87:aa:66:0a:4c:fb:f4:e3:f1:6d:cc:5b:c7:9f:
         72:69:c5:ae:f4:6b:90:c9:07:5e:db:3a:2e:9e:52:36:f9:a5:
         29:3e:72:24:4a:53:b8:cc:b5:ad:8f:ac:5c:d3:6c:8e:6e:a0:
         a2:17:d2:39:30:80:9e:a6:f0:5e:10:23:44:97:0d:3a:87:a9:
         a4:68:e4:20:20:5e:e0:ad:80:28:73:a9:fa:d7:e6:2c:c8:77:
         37:80:8d:bb:d4:1d:1f:5a:78:48:9a:7a:0c:ce:92:c7:9f:6e:
         28:0d:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----