Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/915d9a09f5042c0acf7a70aba5803d3c3e8a34ed.roa
File:                     915d9a09f5042c0acf7a70aba5803d3c3e8a34ed.roa (raw, json)
Hash identifier:          Z0dYALcVoFvtnpHsfD3NUDrdJorDFzrW76xSmBgA4Wg=
Subject key identifier:   12:21:6C:7E:61:10:AF:C8:03:85:9B:52:F0:D9:37:E0:36:1D:87:78
Certificate issuer:       /CN=5d6e30ee09a02818a4de760cee7553be86a880f3
Certificate serial:       0B2C00
Authority key identifier: 59:F8:A3:E4:EE:D0:16:6B:AC:67:AE:7E:B0:85:18:FF:56:40:0C:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6e30ee09a02818a4de760cee7553be86a880f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/915d9a09f5042c0acf7a70aba5803d3c3e8a34ed.roa
Signing time:             Wed 24 Mar 2021 14:36:12 +0000
ROA not before:           Wed 24 Mar 2021 14:36:12 +0000
ROA not after:            Tue 24 Mar 2026 14:36:12 +0000
asID:                     18678
IP address blocks:        2801:1b:8801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732160 (0xb2c00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6e30ee09a02818a4de760cee7553be86a880f3
        Validity
            Not Before: Mar 24 14:36:12 2021 GMT
            Not After : Mar 24 14:36:12 2026 GMT
        Subject: CN=915d9a09f5042c0acf7a70aba5803d3c3e8a34ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:c9:13:4e:d6:25:29:fe:36:47:3a:b8:16:
                    27:13:f1:c5:83:7e:77:f2:6a:92:2e:a3:ab:fe:7b:
                    d1:97:e8:ee:73:42:5e:a5:fb:ce:34:23:79:92:70:
                    c1:09:75:d0:d9:21:d5:44:74:eb:99:9e:af:ca:81:
                    81:b3:5f:c9:8e:b1:78:8b:f3:90:fd:5a:da:d6:a2:
                    9a:74:d2:58:39:8c:a7:39:09:5e:37:f1:0f:ad:dd:
                    b8:17:f4:d4:52:23:61:dd:3c:5f:13:47:ef:e9:11:
                    7f:5a:de:ba:4d:1d:ac:16:0d:42:bb:ca:79:b4:fb:
                    4d:b3:88:4c:63:e9:fc:6e:88:a3:9c:2d:e0:f1:c0:
                    8b:96:1f:bc:e1:73:e7:f1:7b:9d:12:4f:eb:b4:6d:
                    f2:41:19:8c:aa:4f:46:73:33:15:93:37:5a:f0:e5:
                    7b:96:ec:b7:c5:23:2a:97:43:67:ec:ea:88:95:c8:
                    b3:fa:84:8e:02:b3:95:04:4c:0f:3d:d1:d0:51:a5:
                    b0:1c:a9:b2:79:88:f8:14:28:86:37:06:62:4c:2d:
                    2f:fe:92:20:ab:25:12:ce:ce:54:b5:83:25:e2:06:
                    50:b0:7e:18:f4:58:ed:04:99:b4:24:35:15:87:d9:
                    5a:6d:33:e3:87:45:b1:7e:7c:b4:11:e3:61:c7:c1:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:6C:7E:61:10:AF:C8:03:85:9B:52:F0:D9:37:E0:36:1D:87:78
            X509v3 Authority Key Identifier:
                keyid:59:F8:A3:E4:EE:D0:16:6B:AC:67:AE:7E:B0:85:18:FF:56:40:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6e30ee09a02818a4de760cee7553be86a880f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/915d9a09f5042c0acf7a70aba5803d3c3e8a34ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/5d6e30ee09a02818a4de760cee7553be86a880f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:8801::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:c7:2e:6f:99:8b:37:11:93:d1:b3:ed:5c:20:c1:cf:dd:
         c2:2f:1d:79:58:56:3d:dc:43:4f:3e:ea:82:be:3a:df:a3:79:
         62:31:e9:8e:6a:85:92:8a:9d:8c:8e:40:00:c8:db:84:5d:93:
         5c:d1:7b:bd:40:44:45:47:bf:11:0f:f3:7b:1b:0b:c4:07:32:
         d1:d4:72:9a:6b:ec:a1:04:c5:a6:6a:99:63:de:3a:cf:4f:bc:
         e0:71:fb:f0:d1:13:33:38:cc:da:bb:bb:b6:fb:5b:ac:8e:b9:
         d8:b9:e8:d8:6d:c4:86:93:72:cb:95:a8:1b:77:05:c7:2a:0f:
         be:96:92:d5:51:cf:ea:12:e8:91:63:7b:a9:cb:68:05:7b:c9:
         ac:5c:1b:b0:f1:1a:f0:a9:9c:0a:05:76:dd:2c:8d:ee:63:11:
         4e:c6:cf:e5:e0:bb:ac:4b:11:29:22:ea:a3:be:a8:b6:74:04:
         50:b3:32:ae:77:da:7d:98:e0:04:ec:c7:59:70:51:cb:1b:5d:
         62:24:1e:ef:b2:c3:17:c4:ab:0a:0a:e0:8e:04:f6:9f:95:ca:
         31:7d:e1:13:0c:96:22:10:14:f6:93:9c:21:f5:81:4d:f6:e4:
         c4:7f:94:e8:a8:dd:81:93:97:b5:27:f6:ef:8e:98:b6:86:c7:
         7c:07:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----