Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/45014cf5342e9b3d8f3637b2ff2866b689eee40d.roa
File:                     45014cf5342e9b3d8f3637b2ff2866b689eee40d.roa (raw, json)
Hash identifier:          SPHzmXxCqHEBrXGr4jbYLyVa1NOC0fYsDUcFmCpTBX8=
Subject key identifier:   8B:01:38:FC:B2:D3:B5:3E:4E:18:DA:4D:6D:EE:D2:10:FE:11:2F:74
Certificate issuer:       /CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
Certificate serial:       09B141
Authority key identifier: 64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/45014cf5342e9b3d8f3637b2ff2866b689eee40d.roa
Signing time:             Wed 24 Mar 2021 14:34:46 +0000
ROA not before:           Wed 24 Mar 2021 14:34:46 +0000
ROA not after:            Tue 24 Mar 2026 14:34:46 +0000
asID:                     19429
IP address blocks:        2801:10a:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635201 (0x9b141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
        Validity
            Not Before: Mar 24 14:34:46 2021 GMT
            Not After : Mar 24 14:34:46 2026 GMT
        Subject: CN=45014cf5342e9b3d8f3637b2ff2866b689eee40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:6a:9a:7a:f5:0d:d0:8c:f7:00:9f:5a:a5:
                    a5:11:72:fb:3e:15:66:ba:56:f4:07:24:43:c6:06:
                    29:4a:c4:88:71:db:e1:a9:54:07:d6:77:99:80:71:
                    a6:25:5f:f1:63:d9:f9:33:2f:a2:db:64:e6:45:15:
                    66:1b:3f:13:45:88:f9:a2:51:38:fa:50:c0:d8:ab:
                    de:16:c9:c9:3e:31:c0:37:bc:3b:57:94:fe:0d:e2:
                    22:58:65:ee:e5:43:37:6f:02:26:51:43:cc:a1:81:
                    fa:2b:13:e8:06:7e:85:a4:9e:09:13:37:04:ac:5f:
                    44:c7:75:9d:e4:76:6c:32:65:1d:6b:d4:eb:a4:f7:
                    39:ec:bf:d0:af:e6:96:d9:ca:b4:c4:49:18:08:db:
                    7e:f3:9b:2c:97:77:1a:64:8a:fd:e1:0d:8d:1c:dd:
                    e2:ae:56:55:5b:bc:58:6e:c4:5a:d4:fd:40:7e:ff:
                    37:eb:49:ed:71:f2:62:90:41:f9:94:09:47:78:ee:
                    75:0b:c2:85:d6:64:50:36:68:89:7e:7d:5e:9d:56:
                    eb:de:c5:0a:f1:f7:ac:aa:ac:46:47:1e:57:be:41:
                    0e:b7:3e:cd:bb:8f:4d:8b:4f:09:74:fe:25:e0:c1:
                    0e:db:c0:3a:e4:ff:3a:ac:1a:39:59:90:aa:95:0d:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:38:FC:B2:D3:B5:3E:4E:18:DA:4D:6D:EE:D2:10:FE:11:2F:74
            X509v3 Authority Key Identifier:
                keyid:64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/45014cf5342e9b3d8f3637b2ff2866b689eee40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/9f4add842c04cc0e056fa508d773c646d1b9f40c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10a:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:b8:42:c2:43:92:a2:27:4a:d5:0a:5c:7a:af:e1:16:c9:
         e4:e2:ce:79:93:00:40:a8:44:c7:84:9b:66:12:1b:6b:0f:c0:
         44:f1:a1:1a:51:68:ea:dd:4b:18:82:0d:01:f3:83:8a:0f:02:
         ca:a7:ad:5b:1d:40:56:80:98:c7:b8:63:ec:b8:c9:ac:17:fe:
         6e:bd:84:0c:97:90:8f:b3:7c:dd:42:23:34:7f:85:fd:3d:60:
         cf:ad:79:2b:81:f4:ea:a6:f7:d3:ae:7c:00:3e:20:73:fc:70:
         fa:8e:51:c4:c7:33:03:e0:8c:57:d0:b4:98:33:61:e4:d4:01:
         89:76:6a:77:78:84:c1:60:12:9c:7e:bc:5f:45:2e:1a:f1:7d:
         3e:c7:c1:4b:41:e3:8e:c8:c7:4d:42:3a:f7:3e:81:3b:b5:91:
         37:cf:07:d5:25:fc:53:4f:85:8e:b1:32:06:2a:70:d1:3b:6c:
         0a:3a:11:34:a6:68:62:37:e9:47:e6:a2:4a:48:d5:37:b6:c6:
         54:41:b8:ee:45:0e:fb:16:5b:2f:7b:b9:02:e1:e6:4d:0e:ee:
         8d:32:46:39:82:75:c2:95:fd:90:ef:91:88:41:0c:9f:1e:e8:
         de:f3:c8:82:fa:43:55:9f:f9:2c:59:cb:ef:f0:11:b6:7a:58:
         8d:5a:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----