Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/98ebf041ac5c9c7a264bfb8f1d2c1d332f1b40da.roa
File:                     98ebf041ac5c9c7a264bfb8f1d2c1d332f1b40da.roa (raw, json)
Hash identifier:          ibgy0qBlEXMF1W8OT1pJUQFXx2b/gdVSSTO1ByImYio=
Subject key identifier:   A1:C4:33:AB:39:04:1A:5C:3A:D1:C3:2D:43:01:EA:11:DC:12:D1:18
Certificate issuer:       /CN=1a218671f562f7bf310bd8da78423d60e1395e66
Certificate serial:       01A17D
Authority key identifier: 5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/98ebf041ac5c9c7a264bfb8f1d2c1d332f1b40da.roa
Signing time:             Wed 10 Aug 2022 17:27:23 +0000
ROA not before:           Wed 10 Aug 2022 17:26:31 +0000
ROA not after:            Sat 10 Aug 2024 17:26:31 +0000
asID:                     272153
IP address blocks:        2801:189:4::/48 maxlen: 48
                          2801:189:5::/48 maxlen: 48
                          2801:189:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106877 (0x1a17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a218671f562f7bf310bd8da78423d60e1395e66
        Validity
            Not Before: Aug 10 17:26:31 2022 GMT
            Not After : Aug 10 17:26:31 2024 GMT
        Subject: CN=98ebf041ac5c9c7a264bfb8f1d2c1d332f1b40da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:73:9d:8b:fb:9e:f5:70:c3:91:79:77:4d:
                    33:9b:72:5f:83:72:bd:56:96:db:5c:f3:79:08:be:
                    82:38:c0:52:de:3c:cd:3d:5b:aa:c8:ea:e6:21:ee:
                    79:eb:e1:ec:aa:43:35:8f:95:45:15:40:9b:43:d6:
                    3c:95:73:57:a0:ea:b4:46:8c:81:1e:b0:cf:12:ff:
                    e4:e8:5e:cc:65:8b:c9:ab:bb:25:ba:cc:90:e2:59:
                    4e:f7:ba:e0:6d:56:be:11:cc:b7:4b:19:70:b0:53:
                    50:6c:02:98:7e:ef:6d:ad:41:54:d4:ab:85:11:80:
                    8d:fb:28:cd:8e:77:9f:f9:05:6c:98:2a:dc:8b:a1:
                    5c:9d:df:71:34:10:c0:08:6d:19:5a:89:74:53:35:
                    3f:31:b9:3a:ee:7e:6d:b4:7f:f5:a4:f4:9c:c5:d8:
                    76:ad:e2:95:36:18:99:7a:05:00:fc:4e:6e:4f:b5:
                    50:b8:bb:4a:d9:da:75:9a:20:92:8a:dd:87:58:c2:
                    22:00:ba:c3:0e:3a:6f:7a:3b:d7:74:e6:bd:57:fd:
                    8a:f2:13:7b:49:1a:9b:7e:5d:da:a3:65:0a:ba:3b:
                    56:e0:e1:c8:63:9d:d0:2a:e7:f9:48:31:3f:87:58:
                    38:93:2d:2b:bd:1b:09:03:bd:21:3c:3c:15:65:1f:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C4:33:AB:39:04:1A:5C:3A:D1:C3:2D:43:01:EA:11:DC:12:D1:18
            X509v3 Authority Key Identifier:
                keyid:5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/98ebf041ac5c9c7a264bfb8f1d2c1d332f1b40da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189:4::-2801:189:6:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:b9:2b:96:78:09:05:32:1e:4f:a3:08:36:93:80:da:f3:41:
         69:3e:3e:0d:a3:6e:b7:0a:c2:02:58:c3:e2:ac:fb:ae:2a:5d:
         b2:99:5e:84:d9:50:59:f2:40:0e:1f:33:de:dd:fd:8a:9b:56:
         ee:9b:a1:b5:25:02:18:c9:cc:6f:ea:9e:f6:4d:01:b7:fd:9d:
         7d:9b:a8:bc:76:85:6e:ee:21:3c:8f:9a:8e:02:70:fd:59:37:
         40:98:76:5d:76:24:60:d3:27:9c:08:dd:f7:37:ab:c2:0e:bb:
         93:ae:48:6d:ec:92:65:30:38:06:d4:c5:f5:5c:7d:0f:3c:f7:
         90:bc:36:8f:a3:01:fe:c3:d1:ce:83:05:f9:1c:b6:41:87:cb:
         f7:61:20:e5:62:47:5e:8f:e5:ed:e0:73:cd:77:a5:be:9a:69:
         e8:e9:b2:cb:d0:57:4b:1b:f4:37:6a:a8:6a:77:cf:f1:ac:52:
         51:d2:d8:ed:b4:5f:85:d2:db:f5:a7:83:d4:f5:a5:f3:b5:8f:
         59:41:5f:bd:8e:fb:d0:a3:ed:2e:b7:82:53:37:86:ce:be:16:
         89:8e:0a:7e:32:c3:58:a5:1e:8d:05:72:b5:81:c4:19:3d:51:
         d6:74:a1:3a:00:75:18:64:3c:ea:5f:19:37:05:1d:88:e5:67:
         37:4e:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----