Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/df4351fb6368df141f36d5869af10f5e7c3825c0.roa
File:                     df4351fb6368df141f36d5869af10f5e7c3825c0.roa (raw, json)
Hash identifier:          IUB6nZFYHRoz7kNuJcwn1QDPwHIY2HribPbpBxbucjQ=
Subject key identifier:   97:4A:66:F0:16:C4:CD:62:88:83:3F:F3:EA:C7:DC:2D:56:0C:47:B8
Certificate issuer:       /CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
Certificate serial:       04924D
Authority key identifier: 07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/df4351fb6368df141f36d5869af10f5e7c3825c0.roa
Signing time:             Wed 24 Mar 2021 14:32:32 +0000
ROA not before:           Wed 24 Mar 2021 14:32:32 +0000
ROA not after:            Tue 24 Mar 2026 14:32:32 +0000
asID:                     27875
IP address blocks:        2801:1e0::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299597 (0x4924d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf
        Validity
            Not Before: Mar 24 14:32:32 2021 GMT
            Not After : Mar 24 14:32:32 2026 GMT
        Subject: CN=df4351fb6368df141f36d5869af10f5e7c3825c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:55:3f:fc:97:1e:a9:33:02:66:6c:2f:9a:
                    d4:a3:e6:00:56:fa:e7:a5:cc:2e:d1:dd:83:d1:dd:
                    f3:51:7e:fa:06:d4:41:22:82:9e:a1:08:ec:77:00:
                    ff:5a:0b:b6:15:75:95:5a:0f:82:5c:98:7f:3e:d3:
                    b0:27:2f:7b:f7:c0:1a:27:bc:d0:44:f3:03:e1:79:
                    df:16:48:60:39:d4:dd:33:f0:20:f4:8b:e2:57:f9:
                    7d:bd:b0:8c:37:c9:64:5c:e8:19:8b:67:93:ea:ed:
                    0b:78:22:f6:44:01:9e:24:ca:5d:d5:5d:88:61:e2:
                    2e:8a:8c:51:90:74:61:2e:b1:3c:30:69:33:7b:01:
                    b3:c7:41:d9:7f:ea:38:e0:dd:cb:48:fc:59:26:db:
                    f0:97:9e:7c:b1:3b:ee:6a:bf:e1:5f:41:07:6f:56:
                    bf:fb:32:de:77:13:60:18:9e:e5:af:24:7b:67:05:
                    8e:32:22:dc:4e:fb:35:e0:73:d2:8a:09:fd:05:80:
                    04:de:49:87:9b:2c:32:89:53:e0:2a:df:cf:eb:b5:
                    b5:66:8c:36:b0:20:3b:ab:5d:df:c6:2c:eb:c2:84:
                    1c:67:55:73:b3:fc:6b:8c:28:3f:aa:ed:52:c9:27:
                    98:f8:13:56:db:df:0d:41:4d:e2:0a:b6:66:16:8a:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4A:66:F0:16:C4:CD:62:88:83:3F:F3:EA:C7:DC:2D:56:0C:47:B8
            X509v3 Authority Key Identifier:
                keyid:07:01:A3:5F:4D:47:A2:71:7D:13:6B:23:59:FF:A5:CB:3A:82:81:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/df4351fb6368df141f36d5869af10f5e7c3825c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2019c242-2c28-4e6b-8943-13dc84d45782/8e7d66e58317b75213056afe5d3b6e4a4f8dbfbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/45

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:03:13:86:a3:4a:97:0f:b6:48:47:2c:05:aa:93:5e:97:
         0e:71:bc:a2:0e:fd:25:ce:52:09:20:44:2b:d2:8f:1b:74:21:
         0c:f9:e3:0b:a9:d9:88:09:19:20:31:2c:b9:34:0f:1c:32:29:
         ee:5e:95:2a:aa:78:e1:43:01:c4:10:34:3b:f5:5f:37:44:ec:
         c7:5c:22:ed:67:a7:ad:82:fc:8d:1c:8b:ed:74:e9:1f:e9:ae:
         cf:34:d8:80:f6:4c:08:85:0d:df:e8:65:e5:bf:95:1e:91:9e:
         61:4a:96:7a:d7:3e:c3:73:1d:eb:7c:71:f4:c1:c5:ef:1a:c0:
         99:f7:a5:81:ae:fc:72:53:7c:59:54:73:b4:fb:b7:a0:c1:28:
         98:25:51:5e:0e:49:bb:91:27:9e:95:e5:c3:42:c0:43:80:0f:
         ec:7e:92:0b:8b:70:db:9a:63:c4:9f:4f:87:e9:d0:6e:36:94:
         81:51:da:41:9f:b3:ba:3d:7b:29:24:ad:73:58:79:1a:9d:2d:
         aa:56:44:4d:8c:53:09:25:1a:a4:ac:90:53:a9:00:0c:48:9b:
         46:df:76:9e:10:fd:bd:e6:f1:ca:c8:4d:3e:9d:96:eb:dd:e1:
         97:65:da:b0:6b:fe:2a:fb:54:fb:45:6b:82:f3:b5:0e:71:6d:
         56:53:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----