Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/6ee9fefb277c05097cf441f85f134e4512a3f82d.roa
File:                     6ee9fefb277c05097cf441f85f134e4512a3f82d.roa (raw, json)
Hash identifier:          xsUgXIyDDa7Otdpex78fcP9LDzx8OF9alQXXWDvKHcU=
Subject key identifier:   D1:52:13:B6:D0:92:9F:FB:64:11:C1:03:4D:B1:AD:1F:9D:7A:3C:7B
Certificate issuer:       /CN=1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd
Certificate serial:       0C1A40
Authority key identifier: 12:21:AF:42:6F:04:C8:EC:87:30:BE:5C:A6:78:F0:AE:16:8A:1C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/6ee9fefb277c05097cf441f85f134e4512a3f82d.roa
Signing time:             Wed 24 Mar 2021 14:41:16 +0000
ROA not before:           Wed 24 Mar 2021 14:41:15 +0000
ROA not after:            Tue 24 Mar 2026 14:41:15 +0000
asID:                     269790
IP address blocks:        2801:1a:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793152 (0xc1a40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd
        Validity
            Not Before: Mar 24 14:41:15 2021 GMT
            Not After : Mar 24 14:41:15 2026 GMT
        Subject: CN=6ee9fefb277c05097cf441f85f134e4512a3f82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:62:d7:fc:4a:e0:3b:56:d9:d0:dc:45:f6:
                    fd:31:1f:97:8a:f9:f4:dd:64:e5:4b:6a:61:11:39:
                    43:99:66:21:ce:31:75:2e:5b:12:4d:79:44:42:c1:
                    ba:ea:1f:ca:31:78:48:2a:bd:a7:20:d2:53:e0:68:
                    eb:97:e5:95:22:88:55:81:63:30:d7:bb:9a:40:87:
                    1a:9e:53:3c:9b:a1:82:8f:e5:f2:03:db:39:39:0f:
                    fd:65:9b:e8:d0:6c:8b:f6:63:0c:ea:26:db:b8:27:
                    e4:3c:6d:d2:fa:b8:c6:81:de:05:e3:b8:37:81:11:
                    06:3f:c2:4b:e8:33:b1:5d:d4:75:58:d0:03:4f:c6:
                    0c:89:93:0a:ea:3a:6e:7b:75:ae:e8:e5:34:a6:87:
                    67:7e:9b:e1:9b:bd:ec:64:3b:ea:46:b2:8a:66:85:
                    00:9d:4a:e4:ff:bd:d3:53:56:64:67:d0:15:e0:93:
                    83:60:a1:1b:32:82:0f:6b:6d:9e:30:2d:f9:8c:7b:
                    b4:b5:6a:64:da:e4:76:81:7d:b8:38:d6:3c:c6:4c:
                    ce:b7:98:41:a0:16:4b:56:f9:a1:25:2e:e8:31:0f:
                    de:2b:98:7c:c8:e5:76:d1:33:26:f9:84:4e:ba:aa:
                    1e:31:47:0b:34:a2:94:b6:00:2a:bb:1a:7d:f6:c7:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:13:B6:D0:92:9F:FB:64:11:C1:03:4D:B1:AD:1F:9D:7A:3C:7B
            X509v3 Authority Key Identifier:
                keyid:12:21:AF:42:6F:04:C8:EC:87:30:BE:5C:A6:78:F0:AE:16:8A:1C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/6ee9fefb277c05097cf441f85f134e4512a3f82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24456909-c889-416c-9782-bc86c4abb1e4/1fe0cbef0e3b4c7f1d0a0bf1fb8103e58080d6cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:78:a9:7b:5a:2d:ac:52:91:63:68:0c:dd:ea:e4:48:fe:ba:
         ea:f7:65:27:26:eb:fe:c4:83:9b:e8:9b:4d:1f:08:7d:ae:f3:
         74:11:e0:41:3a:89:72:93:00:70:16:4f:5a:b4:80:b2:94:45:
         ad:0f:03:fb:8e:ab:b3:81:60:d1:9a:51:9c:63:38:f8:59:b3:
         3f:5c:4d:ee:db:42:d7:0a:ce:01:8b:7c:af:20:8e:81:bf:c5:
         f8:d6:77:c1:f3:fb:cb:65:16:31:c5:c3:2e:bd:a1:2b:cb:6e:
         ad:b5:49:30:c9:88:18:a8:f7:92:59:43:35:89:fc:c4:9c:76:
         6c:ed:7f:36:53:a3:be:c8:e4:65:bd:58:b3:f9:08:d4:33:3e:
         6b:f2:4d:5e:97:f2:bf:54:7f:ae:fa:c1:d9:de:2b:fb:70:04:
         db:0a:ca:3e:1e:52:a9:13:6d:2b:0b:b6:c5:0c:a1:d1:8d:01:
         36:d5:e3:85:db:6d:10:d7:17:a8:30:c9:db:3f:4e:5e:65:cf:
         79:f0:34:2d:02:72:9e:c0:6e:0f:ca:b4:d5:2d:a2:63:66:8f:
         05:29:c5:c1:e9:dd:3b:4f:f6:8c:80:55:3d:c6:b6:1f:06:99:
         c9:3e:a2:d5:76:88:93:cf:f4:c6:a1:fa:a7:39:d4:33:9b:85:
         d7:e6:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----