Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/332807a1ae2fa913ffea0092a30e124956d2afd7.roa
File:                     332807a1ae2fa913ffea0092a30e124956d2afd7.roa (raw, json)
Hash identifier:          iDzA9TQvisuQXgLNpoe3I6zFUIbrH5iFsB/EoZeJ4vc=
Subject key identifier:   49:DE:A7:F7:6A:48:CC:83:32:43:06:F9:71:86:A8:4F:AF:55:9E:08
Certificate issuer:       /CN=add8af711eb7401694e992ec4abe38f4bdf4a72d
Certificate serial:       03AE
Authority key identifier: D3:39:04:6B:51:AB:21:3A:AF:8A:A2:A9:3C:9E:4D:FC:E4:BC:AE:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add8af711eb7401694e992ec4abe38f4bdf4a72d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/332807a1ae2fa913ffea0092a30e124956d2afd7.roa
Signing time:             Mon 29 Mar 2021 16:12:24 +0000
ROA not before:           Mon 29 Mar 2021 03:00:00 +0000
ROA not after:            Wed 29 Mar 2023 03:00:00 +0000
asID:                     19429
IP address blocks:        2801:1ee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add8af711eb7401694e992ec4abe38f4bdf4a72d
        Validity
            Not Before: Mar 29 03:00:00 2021 GMT
            Not After : Mar 29 03:00:00 2023 GMT
        Subject: CN=332807a1ae2fa913ffea0092a30e124956d2afd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:b2:2d:dd:4f:69:e0:3b:ee:d8:ef:da:f2:
                    a7:ec:41:81:f4:ab:08:96:48:fa:f9:db:38:cb:6c:
                    d9:45:5e:cf:dd:62:0d:fb:69:0e:67:29:b6:d3:34:
                    f8:0f:84:2d:68:d2:d6:9e:e1:05:f3:3f:47:84:b9:
                    c7:ed:6e:43:16:2d:f9:cf:7c:83:04:2b:eb:d2:08:
                    c6:e0:e4:79:31:a3:c3:d5:49:fd:a7:bf:18:ee:9d:
                    60:fb:df:36:bd:58:60:ee:67:93:87:8b:f6:1e:e4:
                    de:e6:f7:01:15:c3:04:e6:a7:88:5e:0c:58:da:c1:
                    7c:27:1f:0d:4d:7d:0f:5d:ef:a9:9c:2d:0d:89:a3:
                    1d:4a:79:77:74:71:69:c7:b3:8d:df:84:31:87:e8:
                    ba:58:f4:5a:b1:ff:14:d7:31:b0:f2:01:17:ff:35:
                    63:2a:c5:f9:8f:47:76:51:d3:48:1b:91:8b:bb:2a:
                    02:95:9f:62:0f:f6:05:4e:2c:6d:f4:d0:40:2b:4e:
                    77:ac:35:a8:5f:2d:73:6f:4e:d1:a9:e7:50:f7:a4:
                    ad:10:e3:11:df:fd:99:06:9f:d7:78:f1:f8:12:f4:
                    da:83:82:fa:af:4f:f8:9b:57:4a:0d:13:71:cb:7e:
                    06:5e:95:1f:0e:64:cd:2b:52:f1:28:e9:c8:10:ad:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:A7:F7:6A:48:CC:83:32:43:06:F9:71:86:A8:4F:AF:55:9E:08
            X509v3 Authority Key Identifier:
                keyid:D3:39:04:6B:51:AB:21:3A:AF:8A:A2:A9:3C:9E:4D:FC:E4:BC:AE:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add8af711eb7401694e992ec4abe38f4bdf4a72d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/332807a1ae2fa913ffea0092a30e124956d2afd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/add8af711eb7401694e992ec4abe38f4bdf4a72d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:88:69:4e:d2:d3:14:97:23:48:d7:58:1e:75:71:7b:f2:0b:
         7c:ad:ef:6b:e7:e9:e9:e6:75:5c:f3:68:dc:c5:99:a1:98:c0:
         02:c7:66:a8:48:45:ec:2b:c4:6e:62:b5:8f:b9:3a:0c:df:df:
         5b:6e:cf:a3:72:29:16:0a:a0:26:f6:c1:16:d4:ad:7a:1d:73:
         5b:03:ef:e4:a7:ad:b9:58:5c:69:15:e1:bb:c6:60:d4:89:9b:
         cf:c7:35:70:00:4a:02:e6:23:59:75:da:ac:32:36:3d:a0:60:
         d7:9f:19:81:b8:fa:31:89:eb:85:48:ae:2c:e3:e4:3a:e8:10:
         92:d4:8f:a5:fe:45:60:15:9c:0d:c4:25:bf:84:99:d3:f7:87:
         14:2e:ec:b2:b5:c8:0b:f0:f5:07:2c:15:22:d0:b2:fd:8e:48:
         20:62:d1:41:bc:ab:ec:e1:e7:c0:18:8f:97:86:4b:a5:b4:49:
         b2:85:d1:32:e1:26:9f:a5:e0:d7:fe:13:fc:96:91:d9:c7:5b:
         d4:ff:39:2f:73:9a:c6:eb:18:d5:ff:7b:aa:62:6a:e1:cd:5e:
         c6:0b:09:01:02:8d:46:3c:e9:fd:a9:78:cb:c7:7f:49:3e:37:
         fb:09:56:43:81:49:6c:79:12:2a:8f:ac:d7:cd:07:33:10:12:
         50:1e:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----