Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/c716defec425e2be8618c6821c333f168de85587.roa
File:                     c716defec425e2be8618c6821c333f168de85587.roa (raw, json)
Hash identifier:          2/iiYzEDQ+nZW+aiQLGgmNN7g1NhqV4pMSrM6C+Z7iM=
Subject key identifier:   69:61:07:96:A1:A4:9E:FF:20:3E:9D:F4:16:D9:7B:CD:49:0F:CB:05
Certificate issuer:       /CN=711fc8dc4691872f5e628253f3f086f010538c17
Certificate serial:       02886E
Authority key identifier: 35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/711fc8dc4691872f5e628253f3f086f010538c17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/c716defec425e2be8618c6821c333f168de85587.roa
Signing time:             Wed 24 Mar 2021 14:36:00 +0000
ROA not before:           Wed 24 Mar 2021 14:36:00 +0000
ROA not after:            Tue 24 Mar 2026 14:36:00 +0000
asID:                     27951
IP address blocks:        2801:12a::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165998 (0x2886e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711fc8dc4691872f5e628253f3f086f010538c17
        Validity
            Not Before: Mar 24 14:36:00 2021 GMT
            Not After : Mar 24 14:36:00 2026 GMT
        Subject: CN=c716defec425e2be8618c6821c333f168de85587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:b2:73:bb:8d:22:61:8d:f8:97:67:85:f0:
                    ad:6e:eb:81:f5:07:3f:0e:73:ff:11:12:85:d3:55:
                    33:d7:41:40:58:34:1a:f3:62:49:a9:1a:43:88:0e:
                    10:22:df:bb:fa:90:7a:5e:18:af:32:d4:19:b8:c2:
                    2a:2b:6e:ab:77:0b:21:e9:92:86:c1:cf:f5:ba:a2:
                    9c:4e:7a:2f:23:d3:38:d1:3f:8b:bb:3d:76:b1:ac:
                    f1:1f:2e:2e:ea:94:11:c8:55:ce:8b:77:25:29:06:
                    43:fb:3b:d7:52:1c:69:0b:86:94:3a:ff:10:72:23:
                    37:64:5b:99:29:a0:c7:ad:a7:9b:fc:ac:c2:65:5f:
                    87:67:0d:fe:71:c2:60:e8:1d:7e:48:08:0b:15:72:
                    d3:60:ab:47:82:5b:5a:86:8e:39:f8:fe:07:55:12:
                    2f:82:ae:9f:f7:c7:bf:c8:ea:08:a9:02:73:71:8d:
                    14:85:43:cf:42:a4:4c:4e:6a:10:ba:9c:1e:85:d5:
                    34:b9:82:45:85:76:05:9d:06:e2:a2:bd:a5:19:f4:
                    77:85:1f:34:93:9d:cd:f7:65:71:7a:ab:47:08:ab:
                    4c:e2:48:13:08:f0:7d:f2:61:1f:59:41:fc:a2:ba:
                    8f:2a:8d:ad:7f:71:38:b2:a8:54:8c:96:74:b8:b7:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:61:07:96:A1:A4:9E:FF:20:3E:9D:F4:16:D9:7B:CD:49:0F:CB:05
            X509v3 Authority Key Identifier:
                keyid:35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/711fc8dc4691872f5e628253f3f086f010538c17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/c716defec425e2be8618c6821c333f168de85587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/711fc8dc4691872f5e628253f3f086f010538c17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12a::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:89:11:c6:be:cc:57:a5:fa:45:ae:dd:80:e6:e3:36:07:
         88:d4:f5:10:b2:20:fa:31:a6:16:3a:c6:3a:54:41:19:9d:be:
         79:ea:c5:56:cb:ae:96:ee:ac:ff:a7:4b:61:8d:9c:a1:6e:29:
         a8:6c:33:f7:22:68:9d:63:6d:f4:27:5c:b6:6a:b4:46:c8:13:
         80:d7:61:87:6b:c9:f9:72:f5:20:b8:68:0f:b1:e0:d6:6e:6f:
         6e:13:48:95:22:9e:77:87:0c:0b:f3:93:15:ba:a9:e4:98:5d:
         f0:6c:fa:1c:2f:95:a3:63:67:8d:a4:07:71:fb:15:ad:54:7e:
         2f:6d:cd:76:af:8b:a3:61:9f:dc:2f:e1:57:f6:4f:b6:ea:c0:
         c3:ee:90:77:57:10:01:24:15:7e:34:6f:29:38:75:b3:bc:fb:
         f0:0e:55:9e:98:c0:04:83:d2:ce:7e:f6:af:ff:44:33:58:6f:
         ef:cb:53:48:e8:32:9c:22:ee:19:65:e4:c9:06:d7:d4:a6:e5:
         5d:07:f4:60:be:22:a9:be:79:84:8c:e2:49:30:e4:66:96:2a:
         23:ff:2a:51:a8:3d:8f:59:1c:65:00:a3:ae:00:62:2f:b6:61:
         61:75:12:c9:eb:21:51:2f:dd:28:dd:c5:ad:d9:51:b3:8c:94:
         02:aa:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----