Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/5e7ae34a76814ce553b3a1a0b3a7372ed73dabfe.roa
File:                     5e7ae34a76814ce553b3a1a0b3a7372ed73dabfe.roa (raw, json)
Hash identifier:          8zTj+kggmvy4JH7zRV4D/awlWNnqP4ZzDWDaqesPI7s=
Subject key identifier:   97:D5:65:BC:33:72:21:90:FD:14:BF:01:AF:BD:F9:3D:2F:BD:33:55
Certificate issuer:       /CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Certificate serial:       0490AD
Authority key identifier: 07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/5e7ae34a76814ce553b3a1a0b3a7372ed73dabfe.roa
Signing time:             Wed 24 Mar 2021 14:32:32 +0000
ROA not before:           Wed 24 Mar 2021 14:32:32 +0000
ROA not after:            Tue 24 Mar 2026 14:32:32 +0000
asID:                     27875
IP address blocks:        2801:1e0::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299181 (0x490ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
        Validity
            Not Before: Mar 24 14:32:32 2021 GMT
            Not After : Mar 24 14:32:32 2026 GMT
        Subject: CN=5e7ae34a76814ce553b3a1a0b3a7372ed73dabfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:d2:ca:46:b6:88:6c:26:44:84:82:f4:c7:
                    2c:0a:37:fc:1c:f1:28:a1:b0:6f:47:27:b9:7c:8c:
                    18:48:13:38:c7:73:2d:9a:22:00:84:95:ab:3a:49:
                    77:e5:af:7a:d4:34:28:ce:6d:7c:be:9b:19:26:c1:
                    1a:3b:0b:4d:85:d1:be:49:50:96:9d:d1:5e:b8:9c:
                    44:c3:46:1c:b4:59:be:c7:69:1e:a0:4b:a6:fa:39:
                    7c:a4:c4:c8:6b:51:86:21:d4:3a:58:08:47:02:f6:
                    9d:50:1e:07:7b:49:78:a0:5c:c4:e5:8e:93:73:ce:
                    2b:d7:bb:5a:61:7f:c7:4e:1a:ac:c5:56:62:13:3b:
                    25:35:47:d1:f7:48:a8:69:ad:cb:f8:2c:70:52:11:
                    d9:72:a9:9b:75:e2:6e:9d:5b:42:e2:9c:a6:f4:58:
                    bb:10:6a:a4:a9:44:b5:88:e6:6e:f1:a3:34:32:0f:
                    60:7f:e6:0d:ab:f4:b9:15:46:5c:fd:ee:a4:97:89:
                    bb:62:49:ee:03:3f:f7:3c:6e:09:65:94:02:99:af:
                    6a:17:d3:66:ee:b1:06:27:0f:1e:3f:76:5d:f4:fd:
                    de:22:3f:f9:a2:a2:48:a3:f7:05:be:40:a0:bb:d8:
                    93:d4:7f:a4:2a:1c:2a:51:21:1e:bb:4c:8d:51:52:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D5:65:BC:33:72:21:90:FD:14:BF:01:AF:BD:F9:3D:2F:BD:33:55
            X509v3 Authority Key Identifier:
                keyid:07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/5e7ae34a76814ce553b3a1a0b3a7372ed73dabfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/42

    Signature Algorithm: sha256WithRSAEncryption
         5e:c9:f6:ec:c7:8d:20:c3:eb:59:93:75:02:b7:1a:0e:7d:88:
         7e:0f:f1:36:bd:9c:e8:90:23:93:f7:d6:3e:44:74:f2:a1:88:
         b6:6d:02:32:01:3a:aa:c7:c3:a0:c3:35:6b:e1:c5:d8:90:de:
         82:cb:53:d4:61:90:0c:3d:b1:0c:94:ab:8e:6a:11:b3:4d:ae:
         21:da:cd:3e:82:50:d5:a5:f7:2b:ec:71:b0:63:d4:e7:87:ef:
         6e:a9:d8:28:90:5a:30:a3:40:41:d4:8d:60:54:b7:9a:5b:b3:
         b7:84:f0:b0:01:bc:08:85:8c:99:2f:32:d6:28:73:93:87:69:
         4f:ec:c4:53:19:01:79:64:ce:5c:f6:f5:69:57:6f:a0:66:bd:
         62:58:92:72:07:aa:37:ff:35:f6:f3:f7:dd:c4:9c:cd:b9:96:
         38:41:83:c2:5a:0a:29:67:60:66:9c:9f:79:88:72:6c:d4:ef:
         0f:1c:79:b0:3e:25:80:e6:2c:44:73:29:c7:36:66:84:7b:fe:
         85:ef:06:32:43:8f:17:ce:5d:3d:81:e9:ed:09:04:e5:bb:ea:
         4f:20:05:95:c9:ca:8c:30:c3:04:ac:42:0a:bd:0f:97:5c:ad:
         b8:5b:af:05:79:ae:0b:bd:91:45:40:5d:35:37:2b:49:3b:fb:
         16:17:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----