Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/8654937a4e38dd63963c924928ab5dbf37ac274e.roa
File:                     8654937a4e38dd63963c924928ab5dbf37ac274e.roa (raw, json)
Hash identifier:          Pl5NvoifnV7+lpzVNcNOVgJJhXNYkiV0Cd0oPFPHVpQ=
Subject key identifier:   CF:92:41:55:06:03:C2:77:DD:6A:1F:8A:F7:DD:9E:C6:2B:59:B7:67
Certificate issuer:       /CN=39792f984408f7aab509e7ed43fd25066ac001d7
Certificate serial:       5FE5
Authority key identifier: 09:FB:1D:CD:C0:57:41:FE:0B:37:72:FE:A3:3A:BF:C5:F4:3E:C9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39792f984408f7aab509e7ed43fd25066ac001d7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/8654937a4e38dd63963c924928ab5dbf37ac274e.roa
Signing time:             Wed 17 Nov 2021 21:39:46 +0000
ROA not before:           Wed 17 Nov 2021 03:00:00 +0000
ROA not after:            Fri 17 Nov 2023 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:1a:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24549 (0x5fe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39792f984408f7aab509e7ed43fd25066ac001d7
        Validity
            Not Before: Nov 17 03:00:00 2021 GMT
            Not After : Nov 17 03:00:00 2023 GMT
        Subject: CN=8654937a4e38dd63963c924928ab5dbf37ac274e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:24:15:5b:e2:91:a6:d8:89:bf:af:8a:05:
                    1d:f6:34:7d:9c:d9:e2:e9:c3:d7:cb:87:59:cc:06:
                    83:17:f9:3f:2b:9f:ab:de:43:85:43:4e:a4:51:1f:
                    a7:47:41:3b:2b:0d:a3:08:ea:3e:b3:a8:28:0b:d8:
                    60:03:c9:cc:be:1c:c1:1e:8b:e1:20:8f:67:cb:d7:
                    61:2c:56:62:2b:bd:85:1b:8a:c7:4e:96:83:f0:0d:
                    7f:61:b5:31:77:4c:fd:0b:61:11:df:43:d5:d5:fc:
                    40:7e:dd:a6:d7:d2:29:b0:8c:98:03:8d:45:39:b8:
                    a4:15:da:ae:40:07:6d:67:0e:06:cc:ea:3d:01:26:
                    0c:a6:c5:14:29:76:6e:34:54:15:85:2c:f1:09:27:
                    9d:55:e9:24:69:63:f7:c5:f2:ff:eb:3e:d3:bd:7f:
                    3b:10:3e:ef:e9:3f:a1:09:c2:41:f3:93:15:e7:e3:
                    04:a0:58:5a:8e:7f:05:3c:cd:19:ce:7e:ce:35:56:
                    f4:d0:da:4d:6a:8a:e0:3d:41:aa:6e:28:9b:7b:b8:
                    38:2b:43:a7:cb:78:15:72:2e:37:52:4e:10:5e:4b:
                    88:3b:37:ee:7b:b2:5e:7c:34:86:fc:ac:8f:19:85:
                    a3:77:46:58:65:d8:94:5c:db:e3:13:4a:06:3a:d6:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:92:41:55:06:03:C2:77:DD:6A:1F:8A:F7:DD:9E:C6:2B:59:B7:67
            X509v3 Authority Key Identifier:
                keyid:09:FB:1D:CD:C0:57:41:FE:0B:37:72:FE:A3:3A:BF:C5:F4:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39792f984408f7aab509e7ed43fd25066ac001d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/8654937a4e38dd63963c924928ab5dbf37ac274e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/39792f984408f7aab509e7ed43fd25066ac001d7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:b6:58:36:49:e2:cf:22:59:9f:e4:cc:36:5e:0f:ef:59:28:
         14:1e:4e:28:8c:e9:4a:20:c3:99:01:e4:c4:14:8a:63:bd:4d:
         cf:71:84:1e:34:74:0a:1e:43:b4:b1:ad:da:3b:d6:16:de:42:
         91:5b:f1:fb:2d:cc:f5:73:32:a4:6f:d3:41:a3:ba:19:a9:41:
         94:93:8f:d9:de:a8:73:ca:12:39:33:4f:18:85:e1:83:d0:ca:
         32:fe:c9:e6:79:37:50:c3:37:7e:65:ca:8f:b4:ad:0d:56:0e:
         ca:9f:45:05:60:75:1b:1f:6a:eb:50:86:5d:9d:6c:a5:14:29:
         94:39:c8:d7:46:91:c2:a9:87:59:9b:1f:7c:37:bf:77:ed:df:
         15:2a:8a:fb:ab:2e:38:4f:4d:9b:3c:a1:cd:05:ac:c4:df:60:
         81:e4:e7:3c:39:72:24:28:29:03:74:c3:94:93:3a:2f:de:fa:
         65:c8:fc:ed:f5:6b:82:26:19:17:33:c9:89:30:c8:1b:10:7e:
         6d:9b:ab:ea:14:bd:25:17:5d:46:bb:cd:41:ce:5d:38:4b:db:
         28:d8:e6:02:f4:37:a7:11:68:64:cf:66:48:9b:3c:61:94:77:
         b4:45:6e:85:d8:75:6c:02:ab:8f:a0:eb:45:68:6e:9d:52:df:
         af:34:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----