Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/2afb40254f2031b90b86f5f105f50de81c391fa6.roa
File:                     2afb40254f2031b90b86f5f105f50de81c391fa6.roa (raw, json)
Hash identifier:          0a1PqlF1oM+oDgnYeGKlIObktNzR0y3cCUWJU4aqRbI=
Subject key identifier:   4B:1D:F6:09:02:85:2D:6D:AC:69:B9:54:5C:3D:B6:D3:EB:9E:D4:E2
Certificate issuer:       /CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
Certificate serial:       09AED8
Authority key identifier: 64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/2afb40254f2031b90b86f5f105f50de81c391fa6.roa
Signing time:             Wed 24 Mar 2021 14:34:46 +0000
ROA not before:           Wed 24 Mar 2021 14:34:46 +0000
ROA not after:            Tue 24 Mar 2026 14:34:46 +0000
asID:                     19429
IP address blocks:        2801:10a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634584 (0x9aed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
        Validity
            Not Before: Mar 24 14:34:46 2021 GMT
            Not After : Mar 24 14:34:46 2026 GMT
        Subject: CN=2afb40254f2031b90b86f5f105f50de81c391fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:58:54:92:7f:7a:da:c4:78:63:2a:72:f7:
                    45:8e:96:53:5b:5f:d9:b8:9d:4c:4b:c5:cc:13:e0:
                    4a:ec:69:c5:10:48:fe:a4:60:69:8c:eb:38:c5:0c:
                    07:41:58:fb:38:00:22:dc:e0:e4:a4:48:98:b8:b2:
                    06:be:e6:b6:71:c6:af:fe:27:cc:ee:6c:cb:e1:a9:
                    f4:06:4a:65:bc:75:32:c9:1c:9e:90:f0:79:75:ff:
                    42:3c:59:55:1b:9b:fd:dd:a2:e4:9c:ec:1a:70:f6:
                    8c:86:89:d7:3a:76:17:f3:e9:ab:50:13:87:02:e9:
                    1b:95:9b:4e:ce:56:77:c8:36:5c:93:1e:bc:cb:50:
                    e8:d1:bd:33:e5:7d:51:98:4a:33:21:03:6e:76:9c:
                    0d:f0:ec:ab:4a:1f:ac:4f:fb:ef:93:3e:62:25:55:
                    eb:1f:b0:7c:46:c1:01:18:15:a5:61:29:e0:99:7b:
                    26:84:0c:03:60:a9:5b:35:e9:1d:f4:40:e5:66:7b:
                    01:ec:7e:20:67:bc:df:a5:50:6a:7c:1b:5f:77:79:
                    91:ee:ef:98:44:dd:60:14:77:99:16:b4:a6:5a:11:
                    f5:de:32:c7:76:18:1e:bd:17:d7:1d:b1:8c:24:f9:
                    6a:59:2a:2b:cb:56:4d:ab:83:9d:e9:f3:52:04:ee:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:F6:09:02:85:2D:6D:AC:69:B9:54:5C:3D:B6:D3:EB:9E:D4:E2
            X509v3 Authority Key Identifier:
                keyid:64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/2afb40254f2031b90b86f5f105f50de81c391fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/9f4add842c04cc0e056fa508d773c646d1b9f40c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:e5:0c:ec:d4:19:bc:9d:48:40:a9:37:e2:6e:15:e8:a0:
         4f:a1:2c:69:30:2a:16:62:bb:a6:20:42:d0:40:ae:79:fa:6c:
         ea:ee:2b:34:a7:3e:16:64:dd:1d:14:08:6c:84:76:18:45:29:
         45:34:5d:df:39:a0:ac:8c:44:1a:c1:66:9a:41:67:cd:c8:8d:
         31:3b:4d:61:5a:9a:83:a0:85:c1:68:f3:00:af:05:76:38:06:
         69:73:1e:2c:0d:17:b7:b4:81:8d:07:a5:f7:f5:0b:d6:3f:60:
         2d:0f:bd:2d:99:4b:c2:63:a0:3c:e6:6d:f7:39:25:fa:c7:aa:
         80:e7:1e:56:3b:56:a4:3f:6f:2b:c7:85:45:12:e9:30:86:cd:
         63:61:fa:8b:a8:98:24:94:38:4d:d1:45:5d:31:56:e7:aa:5c:
         6f:22:9a:40:01:34:45:1f:57:29:38:f6:25:af:7f:b6:5e:1e:
         84:dd:d7:04:e6:84:6a:ba:d1:8c:26:ba:4a:38:ce:8c:a1:ac:
         b6:e9:b7:b1:e2:87:52:16:9d:e1:07:e5:21:2e:aa:0c:66:a7:
         b5:f2:8d:f1:15:d6:06:6d:83:1b:bb:52:86:cd:a8:2a:66:e3:
         3a:32:9d:d2:6a:f2:bc:98:d8:d3:bf:31:c4:fd:ae:6f:0e:5d:
         c4:72:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----