Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/76b7e28138e3d992025b5a48db502ef9330d0747.roa
File:                     76b7e28138e3d992025b5a48db502ef9330d0747.roa (raw, json)
Hash identifier:          gIh7Z8o7jd8vtG7yA6exYSG5WCNOcTFsKApGd9DSMPY=
Subject key identifier:   65:39:5F:C8:B4:73:FD:88:06:08:16:1C:6A:46:C6:CC:53:EF:56:00
Certificate issuer:       /CN=c377b15b5c36ee1de24ca21880a56c0880146624
Certificate serial:       025DBC
Authority key identifier: 6A:9A:76:12:C1:25:F9:29:22:85:D2:AE:51:3D:48:69:2D:D8:D9:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c377b15b5c36ee1de24ca21880a56c0880146624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/76b7e28138e3d992025b5a48db502ef9330d0747.roa
Signing time:             Wed 24 Mar 2021 14:35:14 +0000
ROA not before:           Wed 24 Mar 2021 14:35:14 +0000
ROA not after:            Tue 24 Mar 2026 14:35:14 +0000
asID:                     3549
IP address blocks:        2801:15c:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155068 (0x25dbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c377b15b5c36ee1de24ca21880a56c0880146624
        Validity
            Not Before: Mar 24 14:35:14 2021 GMT
            Not After : Mar 24 14:35:14 2026 GMT
        Subject: CN=76b7e28138e3d992025b5a48db502ef9330d0747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:8e:b3:80:7a:a2:e0:b9:83:4a:f7:3f:15:
                    4c:aa:00:39:25:01:3c:7d:36:5f:95:c6:1c:98:b0:
                    cd:a1:0c:23:f2:b0:54:24:f2:c7:8d:08:85:2e:3a:
                    ac:6d:c2:58:c5:71:51:ce:1e:1c:3a:8c:8d:3a:4c:
                    31:15:f1:9e:9e:b7:ae:b0:72:91:5a:39:3b:8e:fb:
                    e1:fe:c6:57:66:ce:b1:5b:0e:13:44:63:dd:4f:6d:
                    d8:6f:04:31:b3:0b:21:f7:85:5c:8d:8d:81:6b:4b:
                    1e:6e:44:74:1f:cd:6a:ea:bf:26:61:2e:ef:ea:86:
                    4c:5a:31:64:c7:0a:d3:95:15:e8:50:2d:fc:d1:e3:
                    86:18:4b:71:e7:7c:8d:c2:6e:04:87:98:7e:a3:55:
                    26:c4:97:64:23:8d:f3:ac:75:0f:2c:2a:d1:44:13:
                    3f:c0:50:19:ac:4b:66:0e:aa:0a:ef:ac:19:c0:45:
                    34:be:fa:e9:5d:e7:87:7e:fd:78:b2:ae:99:66:f0:
                    ed:5d:5f:37:13:e3:9a:82:89:59:c4:e8:2f:ad:50:
                    1f:8b:0d:8f:47:27:ec:5d:0c:80:6e:4d:8c:b0:8a:
                    62:fa:8d:d4:5d:78:89:19:25:40:50:a8:44:d0:d2:
                    f4:28:fa:00:fa:32:29:24:67:48:2f:3b:72:d6:6f:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:5F:C8:B4:73:FD:88:06:08:16:1C:6A:46:C6:CC:53:EF:56:00
            X509v3 Authority Key Identifier:
                keyid:6A:9A:76:12:C1:25:F9:29:22:85:D2:AE:51:3D:48:69:2D:D8:D9:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c377b15b5c36ee1de24ca21880a56c0880146624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/76b7e28138e3d992025b5a48db502ef9330d0747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27563bb6-2bea-4fda-a2eb-6215884fcfac/c377b15b5c36ee1de24ca21880a56c0880146624.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15c:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:84:80:45:e4:91:45:af:e3:b5:72:40:00:ee:c0:f0:15:5e:
         a4:6e:2d:03:c7:9b:af:ff:24:24:d3:51:89:6e:c6:35:e8:8b:
         c9:bc:c7:39:b8:6d:1f:a9:0f:a4:54:cb:df:0d:06:3b:1f:3a:
         79:0c:f5:ab:f4:10:f7:1b:cc:bb:ec:8c:de:87:5e:b2:ee:84:
         03:be:03:55:bd:68:df:c1:8b:ee:67:b6:e2:11:74:ce:81:2e:
         a4:ee:fa:ac:4b:aa:36:80:a1:cb:af:bf:1a:ee:24:19:7b:2a:
         cd:df:a8:2d:e8:a0:db:04:f2:13:7a:00:51:ae:c6:26:31:8f:
         33:94:bf:6f:95:00:3c:26:bb:83:88:fb:35:06:be:85:02:21:
         e2:ba:ec:f1:ce:2d:54:ea:a3:ba:69:87:a2:90:f1:14:a6:5e:
         2e:15:75:a9:9c:e9:ca:ec:7f:b4:0f:25:d5:f8:e8:e6:64:06:
         ce:c0:da:76:ec:cd:20:21:0d:5f:8f:93:14:0d:de:30:8a:ce:
         0e:a2:d8:e6:ec:d0:d0:6e:7f:c6:7c:36:5c:cc:5c:29:6b:c2:
         b2:2f:ae:a7:3f:80:a3:56:c6:26:2d:73:f2:9f:41:08:2e:63:
         ca:29:f6:78:08:b3:d8:ad:21:9d:79:b3:08:f4:fc:73:cc:d7:
         ab:c2:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----