Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/2a20baff71c20f090c57ad122a4d15f3802e326b.roa
File:                     2a20baff71c20f090c57ad122a4d15f3802e326b.roa (raw, json)
Hash identifier:          UByueS2Cy505Xxnniu/OIjNy6MFXNlLLNXkje8aCtzA=
Subject key identifier:   21:8D:73:D8:8E:E5:06:C1:A2:C2:17:FB:CC:1D:20:95:34:EE:F3:64
Certificate issuer:       /CN=e10299c1af81d7fbd554ad8da2099da215779551
Certificate serial:       0DD723
Authority key identifier: F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/2a20baff71c20f090c57ad122a4d15f3802e326b.roa
Signing time:             Wed 24 Mar 2021 22:50:14 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     27884
IP address blocks:        2800:b10:100::/44 maxlen: 48
                          2800:b10:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907043 (0xdd723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10299c1af81d7fbd554ad8da2099da215779551
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=2a20baff71c20f090c57ad122a4d15f3802e326b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:2d:79:00:be:33:f5:77:cd:b8:4a:f1:4c:
                    3c:64:8f:c5:b8:e8:5d:ec:b8:15:e1:df:32:b8:d3:
                    76:c5:10:57:2e:4b:d8:58:0a:ab:8c:68:2c:8b:c2:
                    52:b9:08:c9:41:5c:dc:27:41:76:f3:0e:e6:59:3d:
                    1a:87:b8:a4:c9:f2:6c:00:66:75:87:08:c1:3a:dc:
                    25:8a:05:95:92:94:19:8b:d9:9d:79:02:93:e6:9d:
                    18:b2:4b:1e:de:62:81:47:a2:6e:e8:4d:16:9b:35:
                    65:fa:7a:91:b7:e3:eb:f2:dd:8e:2d:8b:91:ca:dc:
                    02:90:cb:0d:f5:84:09:5b:f4:41:ff:50:e7:04:39:
                    1a:ff:0f:7a:a5:ae:d0:a3:32:c9:f5:f9:7b:c6:7e:
                    83:89:bf:13:cf:91:93:07:eb:03:d6:bc:41:0b:8e:
                    17:e8:e8:af:7e:b0:ab:75:44:9c:b1:af:e9:d2:f7:
                    d9:b9:84:43:f5:59:d0:51:91:06:80:e6:3e:73:12:
                    53:97:08:56:c6:b5:e9:39:94:4f:2a:1f:5e:a3:5a:
                    10:3c:b7:18:75:4e:13:a7:e4:c5:86:12:71:d3:18:
                    ff:2b:8e:70:93:30:60:89:f1:06:55:5d:e2:a7:23:
                    40:78:ef:c4:14:9c:2e:72:1b:65:d0:dd:e7:0d:95:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8D:73:D8:8E:E5:06:C1:A2:C2:17:FB:CC:1D:20:95:34:EE:F3:64
            X509v3 Authority Key Identifier:
                keyid:F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/2a20baff71c20f090c57ad122a4d15f3802e326b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10:10::/48
                  2800:b10:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:14:3f:73:75:0a:c9:78:49:4a:f1:ab:4a:b7:66:a8:91:da:
         89:45:e1:42:39:6d:cf:cc:1b:7a:a3:d5:57:fb:56:1b:58:3e:
         46:90:70:85:5b:3c:9d:08:14:8a:ad:93:9b:98:62:bc:6b:39:
         87:5b:9b:41:53:44:0f:28:1c:e3:49:65:24:53:ea:3d:a5:cb:
         89:c6:79:75:40:69:71:40:79:09:1c:b9:35:fd:83:5b:62:d5:
         be:b3:94:c3:09:e7:ef:61:ac:f5:24:92:ba:aa:19:92:bc:7e:
         80:cf:f7:03:d7:7e:9a:82:6c:44:46:e1:84:5f:1d:85:12:77:
         63:22:75:fa:74:86:a1:a0:07:af:6d:43:91:de:dc:12:ef:76:
         f8:73:73:cc:06:66:08:91:c6:22:4a:fb:5a:d6:b5:63:4d:61:
         9a:41:04:69:ff:7e:ea:e1:f9:ad:bb:cb:00:23:db:dd:40:a3:
         f4:0f:80:5b:74:5a:b6:0b:1a:09:b3:2a:98:5e:b6:63:79:c3:
         e8:1a:41:57:25:ba:1b:2d:3f:cd:cb:5c:55:c3:81:bc:19:66:
         66:27:c2:9a:4b:43:fb:c1:1f:c1:16:b6:37:dc:55:3c:24:18:
         56:c1:44:4d:89:69:54:bd:18:d6:e6:0e:d4:b2:6d:5a:5f:aa:
         b5:6d:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----