Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/4586a39864009d8da25672f90a2a3b815af93f83.roa
File:                     4586a39864009d8da25672f90a2a3b815af93f83.roa (raw, json)
Hash identifier:          Nv9nnNt2dyGLDWGlLSawPO9KK+vG0YyKVRA9lnATgQQ=
Subject key identifier:   CB:C2:A4:DF:5D:5C:65:0A:E2:16:BA:23:EB:56:4E:81:F9:FD:93:97
Certificate issuer:       /CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Certificate serial:       049C94
Authority key identifier: 07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/4586a39864009d8da25672f90a2a3b815af93f83.roa
Signing time:             Wed 24 Mar 2021 14:32:32 +0000
ROA not before:           Wed 24 Mar 2021 14:32:32 +0000
ROA not after:            Tue 24 Mar 2026 14:32:32 +0000
asID:                     27875
IP address blocks:        2801:1e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302228 (0x49c94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
        Validity
            Not Before: Mar 24 14:32:32 2021 GMT
            Not After : Mar 24 14:32:32 2026 GMT
        Subject: CN=4586a39864009d8da25672f90a2a3b815af93f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:b9:71:ef:bb:0e:00:89:cf:2f:18:ed:9c:
                    1f:1f:72:2e:68:72:fb:6e:93:de:39:9b:4f:bc:f3:
                    e0:75:cd:f1:c0:ee:62:1d:87:55:eb:c6:4d:9f:80:
                    ee:2c:f1:83:a3:79:4f:8f:86:d5:72:cb:0a:ac:d7:
                    f4:4e:33:4c:0d:8c:71:46:64:3d:a7:c3:ef:dd:b1:
                    c2:ba:3e:81:c7:0d:1d:0f:cc:a9:68:bb:37:71:81:
                    9a:44:3b:7f:a3:70:ba:f8:b2:38:f5:d6:67:f4:f5:
                    9e:00:04:77:05:ce:7b:e0:11:49:1d:64:1d:05:fe:
                    fe:05:7c:7c:47:48:ba:be:4e:09:a9:ec:d0:46:16:
                    ba:27:25:c9:46:bb:f0:4f:a4:a8:72:37:19:2d:ca:
                    7c:fa:41:a3:5a:79:d0:07:82:65:6a:6b:e7:87:c6:
                    ff:6d:67:0c:d3:c4:99:d2:82:85:bb:c3:4c:53:d7:
                    72:43:b4:7a:1a:05:2a:fd:56:72:86:65:d0:fc:44:
                    85:a5:a2:4e:13:cc:ed:79:79:60:4e:0b:ae:1c:ef:
                    bb:c1:6e:96:9f:ad:0c:ed:6e:7a:8a:aa:2d:ed:4b:
                    8b:34:b4:b8:81:1f:44:7d:c6:a9:c2:74:54:db:d2:
                    1f:41:38:d7:c6:0f:fa:ee:f2:48:e0:ab:8a:1b:7b:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:A4:DF:5D:5C:65:0A:E2:16:BA:23:EB:56:4E:81:F9:FD:93:97
            X509v3 Authority Key Identifier:
                keyid:07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/4586a39864009d8da25672f90a2a3b815af93f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:61:9d:59:51:1f:55:0f:ce:69:17:e0:df:6f:0c:5b:34:1d:
         76:8e:66:1b:b5:db:ff:b6:7f:3b:57:88:5c:c6:c8:8a:17:b7:
         7e:c5:f5:8c:a0:08:66:8f:eb:a7:ec:c5:06:79:50:73:d3:57:
         10:06:92:47:f7:ec:d0:5e:10:2d:dd:ec:8c:f9:54:17:a9:6d:
         c2:b9:b6:4f:d8:c2:3a:f8:7a:4c:16:0f:41:d3:2c:f5:4a:ce:
         f2:54:fd:f9:48:39:fd:38:b6:2c:8c:28:b1:f2:5e:3a:35:67:
         2b:49:4e:22:c5:dc:5e:e2:72:52:d2:2c:d4:48:74:70:a3:78:
         b7:31:50:ba:bd:30:73:53:4d:d6:5e:93:9a:75:85:85:82:1a:
         2c:d9:3f:05:a8:8e:01:09:d4:cc:00:bd:fa:f8:54:12:57:af:
         6b:c5:e9:99:58:44:4e:d0:7c:d3:8d:e1:36:fe:69:f8:11:54:
         68:ed:b8:9f:9c:ad:03:2e:97:3c:29:f7:58:49:97:f4:a0:a0:
         4a:04:55:19:8a:e1:a0:05:a6:ea:9e:08:b8:1f:65:ca:e7:45:
         ab:91:f6:f2:d6:fd:00:98:3f:b1:aa:02:b7:5b:b8:ab:98:e5:
         3f:e2:70:50:e0:c8:de:24:12:9a:93:29:58:14:1d:94:a1:48:
         67:d1:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----