Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/21d4dd83fe7568856de629d9f02ffb6641aeb160.roa
File:                     21d4dd83fe7568856de629d9f02ffb6641aeb160.roa (raw, json)
Hash identifier:          uXT3Y/+/e6XAfR7wdYp0TzgwuKuI0jWAPn5hzktNNjo=
Subject key identifier:   20:92:A2:6F:85:DB:40:61:1D:95:9A:74:EB:18:54:82:F2:70:F0:61
Certificate issuer:       /CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Certificate serial:       0495C1
Authority key identifier: 07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/21d4dd83fe7568856de629d9f02ffb6641aeb160.roa
Signing time:             Wed 24 Mar 2021 14:32:32 +0000
ROA not before:           Wed 24 Mar 2021 14:32:32 +0000
ROA not after:            Tue 24 Mar 2026 14:32:32 +0000
asID:                     27875
IP address blocks:        2801:1e0::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300481 (0x495c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
        Validity
            Not Before: Mar 24 14:32:32 2021 GMT
            Not After : Mar 24 14:32:32 2026 GMT
        Subject: CN=21d4dd83fe7568856de629d9f02ffb6641aeb160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:0a:c4:ee:81:82:2a:2c:3e:31:4c:b4:0a:
                    63:ef:97:e6:51:67:5d:02:d4:02:af:3d:47:bc:cf:
                    ac:f4:86:a0:1a:ca:5b:bb:03:e4:54:f8:11:e5:2e:
                    dd:3c:23:80:45:4c:e2:49:9f:98:b1:f4:74:a1:58:
                    f8:32:a5:84:46:e0:81:04:cd:ca:80:2d:bd:32:e9:
                    f2:09:05:21:72:f6:5f:43:59:93:b4:b3:dd:60:a3:
                    2c:0b:7d:23:a5:6d:f2:9d:2d:c1:a9:8c:30:ae:13:
                    7c:7d:0e:bf:19:df:ff:c0:88:5b:e6:5d:4e:a2:8c:
                    0e:c1:02:9b:71:69:8f:5b:43:5e:b0:c8:e0:6b:7f:
                    9e:48:99:f0:da:80:ca:82:57:ad:5b:3f:01:a1:75:
                    db:a3:83:5b:df:19:ad:c2:46:b7:d6:98:85:77:ea:
                    1c:c6:cc:dd:09:8e:b2:8b:2b:3d:62:bd:a9:3c:d8:
                    0d:93:d1:f8:c5:bc:2d:b4:41:4c:2f:44:33:14:4c:
                    67:6c:33:12:76:21:d1:b9:a6:7e:fd:3f:1e:b6:ac:
                    e0:37:5b:2f:94:26:58:26:71:89:9e:e5:b8:d3:92:
                    c6:cf:1e:c6:f7:15:cd:0f:d4:e6:4b:1c:4a:9a:8f:
                    cc:60:db:fa:2a:4b:54:b7:9f:d0:7e:4a:ed:cc:de:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:A2:6F:85:DB:40:61:1D:95:9A:74:EB:18:54:82:F2:70:F0:61
            X509v3 Authority Key Identifier:
                keyid:07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/21d4dd83fe7568856de629d9f02ffb6641aeb160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/46

    Signature Algorithm: sha256WithRSAEncryption
         22:11:2d:47:a4:44:01:9a:8c:1d:ee:5a:c6:95:e5:57:86:fe:
         2e:87:97:9e:17:fb:0b:6f:4b:6a:88:14:e8:dd:0a:92:c0:2e:
         ec:56:1e:59:a7:88:b6:7a:38:c3:82:ab:dd:fe:3f:6f:4d:60:
         1a:85:cd:31:79:ec:ec:ab:99:c4:51:77:4a:ee:5f:04:4b:1a:
         d1:12:fa:ef:e0:e6:d3:6a:db:a2:2b:cb:53:8f:89:ba:df:62:
         bd:67:eb:76:47:1a:3d:1e:0b:be:1d:3b:58:58:6b:65:c4:d0:
         f2:54:71:8e:c0:5b:4d:75:2a:ec:30:b6:97:ce:ee:3d:3a:77:
         af:c7:75:64:f3:a8:24:55:d3:b0:d8:48:48:df:b4:29:a9:51:
         ee:13:8f:59:b2:d7:e9:46:36:a8:85:ab:79:2b:8e:df:9f:15:
         d3:2d:f7:14:e3:01:e2:1f:a6:02:de:a2:7d:e1:de:22:91:40:
         db:b3:f7:44:76:0f:e9:a5:5b:20:e9:2e:cb:2e:06:f8:50:fe:
         b4:53:7e:7e:c6:12:a1:e6:16:54:7d:7a:dc:91:d8:18:e4:7a:
         03:82:1c:d0:2e:87:f5:9a:62:b3:78:14:a6:7d:32:84:fa:7b:
         e0:7c:31:63:55:67:28:f7:53:ed:f4:28:58:b0:a9:a5:05:d1:
         bb:0f:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----