Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2f33aded-886c-409e-87e4-e69631d6d60b/79f8fc499df561a4844d8a4dea119d4bbdf35fe2.roa
File:                     79f8fc499df561a4844d8a4dea119d4bbdf35fe2.roa (raw, json)
Hash identifier:          kjQ8Vxm//LHiDDPClB77gy46A+AdStP4bLtW0OZiJ44=
Subject key identifier:   4B:09:29:DB:62:98:DA:98:3E:49:93:42:DC:9A:74:A7:31:3C:73:7B
Certificate issuer:       /CN=0d2b9a9520757cb3efcb2fcfe92843f0eea8bc2b
Certificate serial:       034BE7
Authority key identifier: C6:04:59:AD:07:05:5A:88:FF:58:97:1A:BE:0F:1D:8D:CB:8D:5B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d2b9a9520757cb3efcb2fcfe92843f0eea8bc2b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2f33aded-886c-409e-87e4-e69631d6d60b/79f8fc499df561a4844d8a4dea119d4bbdf35fe2.roa
Signing time:             Mon 04 Oct 2021 20:32:09 +0000
ROA not before:           Thu 10 Jun 2021 03:00:00 +0000
ROA not after:            Sat 10 Jun 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        2801:17e::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216039 (0x34be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2b9a9520757cb3efcb2fcfe92843f0eea8bc2b
        Validity
            Not Before: Jun 10 03:00:00 2021 GMT
            Not After : Jun 10 03:00:00 2023 GMT
        Subject: CN=79f8fc499df561a4844d8a4dea119d4bbdf35fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:97:54:fc:d8:b9:e9:3d:5b:6b:70:95:52:
                    4e:cd:b5:50:0a:f0:f1:2b:46:e8:d8:ca:fb:77:bb:
                    fe:34:6c:fe:cb:48:4b:01:9f:f6:87:fe:62:02:df:
                    06:fc:9b:0c:13:87:b7:7f:ad:ff:18:3e:18:ee:b3:
                    c5:d8:64:72:ca:af:74:dd:ed:37:fe:67:4e:86:bf:
                    1d:00:36:3a:3d:9a:b9:cd:19:4b:d2:77:2c:e6:49:
                    15:f9:4d:1b:dd:54:32:66:37:1b:ab:20:8a:cd:9d:
                    30:c1:cb:b7:62:5c:54:d8:d7:26:7b:01:e7:45:d2:
                    38:fe:c0:8d:ea:d8:1b:27:ed:b3:b7:5e:a9:a0:a2:
                    60:ae:93:72:6c:96:fc:af:1b:6c:5f:bb:1f:51:7f:
                    52:2f:e6:27:d1:70:e1:18:fc:06:e2:ac:c3:11:3a:
                    6e:bb:08:fe:1d:13:06:36:79:b0:a9:92:fb:95:ce:
                    c7:63:34:14:3f:35:98:d9:4e:f6:77:42:25:47:71:
                    5c:71:7d:a4:0a:a0:35:76:b0:2c:30:24:27:81:ee:
                    ce:cf:08:13:16:06:00:d3:c7:e8:dd:90:14:07:12:
                    28:86:07:c3:6a:ae:e8:d6:a3:58:84:41:4e:14:78:
                    d0:89:1d:5a:ed:74:fa:40:4f:80:d0:28:39:2f:17:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:29:DB:62:98:DA:98:3E:49:93:42:DC:9A:74:A7:31:3C:73:7B
            X509v3 Authority Key Identifier:
                keyid:C6:04:59:AD:07:05:5A:88:FF:58:97:1A:BE:0F:1D:8D:CB:8D:5B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d2b9a9520757cb3efcb2fcfe92843f0eea8bc2b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2f33aded-886c-409e-87e4-e69631d6d60b/79f8fc499df561a4844d8a4dea119d4bbdf35fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2f33aded-886c-409e-87e4-e69631d6d60b/0d2b9a9520757cb3efcb2fcfe92843f0eea8bc2b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17e::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:68:e8:80:6d:5f:cf:5e:cc:85:04:86:28:4e:a8:76:d2:e6:
         42:43:a1:9a:c5:a8:ba:38:34:45:64:8b:c7:17:9e:e5:a3:c2:
         3a:72:a9:d0:9e:04:9f:4c:3c:a1:3d:1e:64:a4:41:f9:6f:31:
         41:5d:f5:04:11:9a:65:17:26:80:db:fb:0c:cc:ab:0b:66:78:
         08:78:b7:6a:8a:06:2f:c6:31:14:d4:d5:25:c9:f3:a8:79:ef:
         04:f3:95:a3:6d:17:f7:23:03:39:1a:59:e6:d5:d4:65:0c:1f:
         d0:6a:e3:27:7c:a2:6a:f6:62:5f:33:8e:76:8d:11:23:2f:85:
         29:9c:91:18:5d:a4:fd:fb:8a:36:e6:a5:25:79:bd:e1:08:89:
         0e:c0:6d:d4:d2:a7:70:e1:39:5f:d2:e1:db:74:62:96:55:03:
         23:3e:36:e8:fc:ff:d5:b4:98:82:55:24:ea:cb:f5:90:16:84:
         31:d6:46:9f:7e:ec:18:0d:b4:60:a1:30:44:a1:df:bc:5f:43:
         95:d4:5b:1e:57:e4:6e:6f:5b:aa:cd:51:a8:1c:f6:5f:51:e3:
         8b:96:c5:66:46:06:cd:8c:c2:ea:2c:83:3a:8f:c1:71:1e:ae:
         22:9b:f7:05:74:95:f5:aa:77:7f:fd:18:a9:c3:96:99:cc:08:
         69:cf:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----