Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0615f2da-a95f-4dbd-88ee-76d65dc9b8c9/d26e61225fd83998f3f879fbbdfe833f1e96a2a8.roa
File:                     d26e61225fd83998f3f879fbbdfe833f1e96a2a8.roa (raw, json)
Hash identifier:          iyWukt3m7SynbuPYstxJ6h4vpkIgJu3H7GbbvqhYQCg=
Subject key identifier:   C7:B6:ED:18:26:40:50:35:36:E9:F9:65:94:B6:CE:2D:16:E1:E0:C1
Certificate issuer:       /CN=66004bd933781ffdeae2147c898696598f470997
Certificate serial:       09CB39
Authority key identifier: 3B:BF:8E:23:7E:21:86:B1:7D:E4:99:81:87:19:15:3F:92:78:E6:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/66004bd933781ffdeae2147c898696598f470997.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0615f2da-a95f-4dbd-88ee-76d65dc9b8c9/d26e61225fd83998f3f879fbbdfe833f1e96a2a8.roa
Signing time:             Wed 24 Mar 2021 14:34:34 +0000
ROA not before:           Wed 24 Mar 2021 14:34:34 +0000
ROA not after:            Tue 24 Mar 2026 14:34:34 +0000
asID:                     18747
IP address blocks:        2801:132:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641849 (0x9cb39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66004bd933781ffdeae2147c898696598f470997
        Validity
            Not Before: Mar 24 14:34:34 2021 GMT
            Not After : Mar 24 14:34:34 2026 GMT
        Subject: CN=d26e61225fd83998f3f879fbbdfe833f1e96a2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:5e:f5:57:89:73:02:df:75:75:3b:53:00:
                    50:9f:0a:30:40:9a:e7:e3:d4:bf:e2:11:27:97:06:
                    60:4d:cb:ab:09:67:d4:e2:ef:7a:40:ed:e7:9e:23:
                    98:a3:28:be:3d:14:55:5e:48:70:b0:17:43:d8:84:
                    04:1f:5c:f7:d3:12:c3:a6:ae:e0:d7:33:c1:db:9e:
                    da:d7:c8:40:9a:4e:5a:33:45:86:36:9c:c8:62:09:
                    ce:69:07:72:8d:5d:66:03:90:24:26:48:14:17:8b:
                    1f:db:36:8e:b2:b7:76:83:91:77:09:a9:cf:38:7e:
                    01:60:d7:af:ee:d8:be:59:ac:12:d0:e7:56:8b:3f:
                    2a:24:a6:b0:09:04:47:6e:54:48:16:d6:03:64:f7:
                    68:8a:e3:b5:89:e7:cc:8f:49:0e:6d:bf:41:07:53:
                    7d:ae:92:4f:9e:e5:85:73:67:a4:b1:65:29:e7:fb:
                    7e:8a:ba:95:a1:2d:21:ae:ff:4b:a7:9f:44:d5:f2:
                    90:93:76:0b:69:98:f8:06:4b:a7:2e:c6:24:fd:e2:
                    b5:31:e2:2f:e7:b6:b3:97:0b:fb:ac:76:a1:2d:94:
                    26:e0:b0:74:c4:08:76:e1:f0:b7:e0:f0:de:d7:a4:
                    80:68:ab:45:9f:4e:24:56:f0:5d:df:39:b5:d7:05:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B6:ED:18:26:40:50:35:36:E9:F9:65:94:B6:CE:2D:16:E1:E0:C1
            X509v3 Authority Key Identifier:
                keyid:3B:BF:8E:23:7E:21:86:B1:7D:E4:99:81:87:19:15:3F:92:78:E6:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/66004bd933781ffdeae2147c898696598f470997.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0615f2da-a95f-4dbd-88ee-76d65dc9b8c9/d26e61225fd83998f3f879fbbdfe833f1e96a2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0615f2da-a95f-4dbd-88ee-76d65dc9b8c9/66004bd933781ffdeae2147c898696598f470997.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:132:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:43:e6:ad:4b:d9:29:c8:4d:e9:8f:f1:89:a4:2b:d2:47:0b:
         76:ba:3d:da:a6:ab:3d:53:60:e0:ed:c2:d8:12:30:c3:c2:94:
         fd:6a:22:49:fc:ad:e6:73:0e:51:b9:b7:dc:8a:95:a3:6a:68:
         2f:7a:41:5b:2e:78:2c:dd:40:d2:51:da:12:da:b6:d0:6e:d2:
         a2:ee:d6:a3:d0:b1:9b:12:56:fe:6b:60:6e:67:68:44:e6:c8:
         ed:e4:09:cd:1d:5a:77:59:f8:ac:f5:42:8e:fb:fe:35:b8:db:
         2c:84:aa:40:97:f4:11:2a:1f:15:d0:fb:76:2b:ed:ed:26:09:
         10:aa:c8:88:2a:e7:c9:8e:14:07:37:2e:19:8f:cc:af:f5:93:
         e7:2a:1d:f7:3c:5b:35:71:64:82:64:5e:2c:e1:21:2b:c7:eb:
         1d:73:51:2e:ad:37:8b:f5:3d:45:09:40:d0:16:de:8d:a2:10:
         aa:73:cc:eb:3d:39:a8:11:2b:2c:75:c2:d8:ad:2c:43:d6:75:
         89:2c:a1:af:f2:b0:e4:68:b0:c3:6d:dc:88:c7:07:07:d8:7f:
         90:ac:99:07:e1:f7:b5:08:df:80:3e:3a:27:0a:cc:fe:b4:4d:
         8b:b5:7a:b2:58:6b:ca:e3:38:03:72:7a:8e:27:fa:a8:cd:c6:
         4b:24:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----