Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/7521c3abf8a7b7ed2fd9537b11fb4d15b058c7dc.roa
File:                     7521c3abf8a7b7ed2fd9537b11fb4d15b058c7dc.roa (raw, json)
Hash identifier:          +zIONaEom1z6yc0CTvzFtCwTrzYlOA3VCTXU8sewzl0=
Subject key identifier:   F4:25:34:F4:F4:D5:9C:0C:40:E8:91:4C:D6:22:F8:D2:D5:B1:FB:FA
Certificate issuer:       /CN=e10299c1af81d7fbd554ad8da2099da215779551
Certificate serial:       0DD236
Authority key identifier: F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/7521c3abf8a7b7ed2fd9537b11fb4d15b058c7dc.roa
Signing time:             Wed 24 Mar 2021 14:42:16 +0000
ROA not before:           Wed 24 Mar 2021 14:42:16 +0000
ROA not after:            Tue 24 Mar 2026 14:42:16 +0000
asID:                     27884
IP address blocks:        2800:b10::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905782 (0xdd236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10299c1af81d7fbd554ad8da2099da215779551
        Validity
            Not Before: Mar 24 14:42:16 2021 GMT
            Not After : Mar 24 14:42:16 2026 GMT
        Subject: CN=7521c3abf8a7b7ed2fd9537b11fb4d15b058c7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:ae:f6:26:a4:a8:1d:c3:03:4a:6a:17:8c:
                    cf:28:d7:4e:2e:54:cd:17:1d:40:0c:b6:24:bc:36:
                    e3:87:55:e1:3c:f5:d6:85:d3:dd:0c:5a:74:23:b9:
                    43:13:15:e5:70:2b:f6:43:77:f7:ff:e3:4e:2e:d9:
                    b1:ae:6c:9d:31:77:a7:84:cb:b5:07:3d:8c:e4:be:
                    de:27:f4:c8:33:21:0a:fa:65:e4:a3:d1:69:80:a0:
                    44:13:6a:7e:9f:6e:47:0f:29:67:4a:30:17:f8:a2:
                    b6:44:51:07:9a:1a:df:9d:df:60:38:06:42:ff:c4:
                    c0:5d:35:d6:03:72:05:36:11:86:87:47:14:f1:b1:
                    7a:c2:d9:d9:cb:6c:77:82:3f:0b:b0:03:f5:95:3e:
                    75:86:c9:54:3b:2b:48:c5:f9:22:5d:7c:7c:a7:ca:
                    e2:66:60:57:b4:b9:67:e1:81:7a:87:54:a4:ed:87:
                    75:4f:a0:0d:d6:d5:2d:68:a6:56:fd:20:02:64:99:
                    33:57:4f:78:67:d0:ff:b4:21:14:fd:f4:8b:21:b0:
                    6a:bf:3f:bb:33:c7:26:04:0f:5c:e6:03:78:8f:d6:
                    05:73:43:24:0b:2a:aa:9b:27:a4:67:4a:ec:a3:b1:
                    4a:3b:68:8a:3b:db:5c:3a:61:17:e0:d1:4a:1e:ab:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:25:34:F4:F4:D5:9C:0C:40:E8:91:4C:D6:22:F8:D2:D5:B1:FB:FA
            X509v3 Authority Key Identifier:
                keyid:F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/7521c3abf8a7b7ed2fd9537b11fb4d15b058c7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:a1:e3:d8:a1:18:af:1f:87:5e:84:d6:52:ae:30:1c:83:
         34:28:1a:11:8c:4a:b6:e0:a9:62:15:3f:b8:da:df:20:ab:5b:
         13:5b:6b:53:8d:f8:3b:a6:7a:68:fd:dd:0a:be:6c:c9:3b:e8:
         4c:b5:21:e6:89:a3:f9:4a:65:86:c4:1e:58:99:b6:5b:fd:f4:
         de:c6:fc:4f:6a:53:a1:00:43:c8:87:37:83:23:e9:06:6d:c0:
         96:15:f4:7c:8e:0a:4f:4a:53:6e:a2:14:8c:1e:3c:32:a8:b5:
         0d:89:48:68:84:7b:b1:76:43:d1:a6:f4:7b:a5:e7:ce:7d:5c:
         9b:49:6d:21:6f:44:9e:81:04:b9:a1:dd:84:f7:52:5e:9d:0c:
         f0:1f:25:8d:5b:0e:cf:82:d2:68:7f:4b:26:20:91:45:2a:6f:
         00:9e:f2:ea:22:2c:6b:71:75:c8:c0:bf:38:b6:fa:4e:76:13:
         ad:94:a7:de:bf:6f:8a:7f:1b:7a:20:2b:d5:1b:ad:3e:8b:64:
         b2:3b:64:23:2c:a7:99:a6:a1:d1:6c:98:4b:a3:84:84:98:27:
         56:8e:0c:c5:54:d5:2a:18:de:0f:a6:da:d2:22:4d:c8:c9:df:
         61:23:7a:4f:4f:14:18:75:f2:32:aa:e3:24:ab:9f:a7:d1:7a:
         f7:54:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----