Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/4ec75933cae4f5c17afd8f8525c78b1b059f7a1d.roa
File:                     4ec75933cae4f5c17afd8f8525c78b1b059f7a1d.roa (raw, json)
Hash identifier:          240mTZPVOsB8zhMAnGcuSrAQIMQsGgx4cH7wO4F6jNQ=
Subject key identifier:   6D:7C:EB:F2:59:B1:FC:01:3A:89:96:62:3A:2B:33:3A:EC:F5:C2:71
Certificate issuer:       /CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Certificate serial:       049A2A
Authority key identifier: 07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/4ec75933cae4f5c17afd8f8525c78b1b059f7a1d.roa
Signing time:             Wed 24 Mar 2021 14:32:32 +0000
ROA not before:           Wed 24 Mar 2021 14:32:32 +0000
ROA not after:            Tue 24 Mar 2026 14:32:32 +0000
asID:                     27875
IP address blocks:        2801:1e0::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301610 (0x49a2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
        Validity
            Not Before: Mar 24 14:32:32 2021 GMT
            Not After : Mar 24 14:32:32 2026 GMT
        Subject: CN=4ec75933cae4f5c17afd8f8525c78b1b059f7a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:3e:b1:25:b5:48:5e:9e:41:8d:ab:99:aa:
                    2e:8d:c9:d0:c7:e6:07:7e:f5:78:c2:0f:33:7e:11:
                    9f:18:8e:98:7b:d3:2b:0b:ad:d9:4f:65:06:a2:29:
                    f3:6a:b9:77:98:ba:c0:a7:2b:94:bd:a4:de:2d:12:
                    96:10:75:ee:42:15:6a:ef:5e:99:c3:2d:f2:73:11:
                    9b:02:51:92:1a:96:e9:69:8a:1e:e4:c5:8f:08:3f:
                    53:60:2d:e3:46:21:40:91:3a:88:e4:a9:7b:55:89:
                    2c:95:da:20:66:4d:79:ec:e4:9a:85:02:cb:6e:ea:
                    93:67:7a:a0:23:ce:98:20:61:8c:56:e9:0a:29:e5:
                    e4:96:16:d8:50:4c:d1:1d:b2:a7:01:76:5e:a1:9b:
                    2b:5c:97:f2:22:91:5d:4d:1d:01:51:f9:9d:46:9d:
                    30:8d:fa:0b:2e:f0:1b:b0:ef:19:a2:52:11:ba:7d:
                    66:d5:63:09:52:2f:9e:a2:dc:cd:d3:c9:fd:01:ec:
                    8f:ac:47:69:44:a7:73:16:e2:03:d6:08:1d:fe:3b:
                    ba:0e:ab:4f:d4:45:a3:59:c0:8f:58:96:e2:8c:77:
                    71:39:43:13:eb:bc:3e:07:d2:95:b8:cf:e2:7a:15:
                    32:dc:69:8b:97:17:dd:d2:58:45:98:de:d4:59:87:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:EB:F2:59:B1:FC:01:3A:89:96:62:3A:2B:33:3A:EC:F5:C2:71
            X509v3 Authority Key Identifier:
                keyid:07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/4ec75933cae4f5c17afd8f8525c78b1b059f7a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:b8:56:db:72:c7:18:ca:17:e8:d9:c2:79:18:68:7d:f2:
         98:4c:83:28:f3:ae:0c:c6:96:6b:0b:7c:14:72:43:62:3f:63:
         bc:17:04:c2:27:33:55:77:06:c4:4e:03:84:c5:c5:6b:c0:ce:
         d1:20:e4:e7:e0:39:a6:ec:aa:a8:e1:86:c4:be:04:f2:b6:9d:
         3c:46:36:fd:9a:77:f1:83:bf:6f:7d:07:56:f5:0a:95:21:77:
         45:53:49:9e:dc:20:2e:06:4c:83:8f:c2:60:7e:ed:9d:ba:98:
         d7:24:d7:d6:fc:67:c0:32:3e:76:8c:df:73:d0:9d:cf:8c:80:
         9b:0e:39:28:35:f2:7b:e8:fb:b1:c5:6f:fe:d9:c2:bc:a0:db:
         cb:33:94:bf:54:8c:bf:f0:ec:e3:01:5f:ee:34:ff:a8:96:7c:
         5b:8e:ff:31:d5:39:51:70:78:83:0b:8b:23:9a:55:e2:91:7a:
         81:2b:e8:20:90:ff:3c:e0:92:12:72:04:f8:5b:74:ca:95:54:
         f7:88:88:73:28:1f:e8:79:dc:ce:98:cc:39:75:58:d7:21:97:
         40:f6:26:49:0a:f0:1a:f8:fe:d1:57:0d:e8:ef:98:77:60:a0:
         76:c0:25:5a:c4:c9:81:b3:8e:cc:3a:8c:38:d0:bd:79:e1:98:
         6f:a8:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----