Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/e93d86810036a93d8fe8200b03a38740e1410860.roa
File:                     e93d86810036a93d8fe8200b03a38740e1410860.roa (raw, json)
Hash identifier:          8lMEKXMiSGU4/nzwgc4jmYD1okhW6lqJaYtGHnkd5j8=
Subject key identifier:   58:27:3E:97:66:E6:BB:AF:86:FC:5F:DA:BF:F8:80:C3:F4:48:1F:03
Certificate issuer:       /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial:       0D58F3
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/e93d86810036a93d8fe8200b03a38740e1410860.roa
Signing time:             Wed 24 Mar 2021 14:41:27 +0000
ROA not before:           Wed 24 Mar 2021 14:41:26 +0000
ROA not after:            Tue 24 Mar 2026 14:41:26 +0000
asID:                     27820
IP address blocks:        2800:130::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874739 (0xd58f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138405134343f63286b605fe9165839fd04a4252
        Validity
            Not Before: Mar 24 14:41:26 2021 GMT
            Not After : Mar 24 14:41:26 2026 GMT
        Subject: CN=e93d86810036a93d8fe8200b03a38740e1410860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:7e:31:81:2e:c0:95:a4:3b:23:bc:78:f1:
                    f2:1e:a8:0e:e6:e8:45:c7:69:5e:eb:d4:c5:ee:9e:
                    63:e3:8f:47:8e:fb:52:3c:92:d7:37:5f:49:2c:79:
                    9b:0e:f2:16:f8:17:32:d1:4c:59:b9:50:8b:67:64:
                    ca:19:e6:95:9a:50:7e:6e:43:bb:72:73:16:15:bc:
                    e3:c8:82:78:db:4f:88:e5:24:f3:70:20:97:34:d9:
                    75:65:a9:9a:7b:5f:49:4d:b1:a3:2e:b9:0b:8d:b5:
                    05:14:94:bb:34:83:1b:56:c1:4c:b6:c1:e7:98:90:
                    a9:6f:5e:8d:c9:a1:69:54:25:60:32:5a:9a:c2:c3:
                    c3:f7:e4:96:a0:ee:b9:8f:c0:7e:89:2f:6a:1d:cf:
                    7a:82:09:ac:18:03:98:b4:c6:5d:90:38:e0:d8:49:
                    30:53:54:11:ef:f6:c6:8f:61:7a:bd:9b:2d:65:92:
                    64:ed:6d:83:55:d1:c7:bd:cf:f0:e5:d2:7c:a9:ed:
                    ba:1a:37:69:77:92:ee:46:48:fc:d4:68:ec:ae:d2:
                    b7:4f:fd:cd:38:7d:91:11:db:df:02:b2:18:d9:d0:
                    ce:7f:9a:09:2e:9d:ff:e2:2a:57:2d:18:b5:4b:1f:
                    ac:af:55:8a:5b:e0:f0:1b:3c:52:3d:31:3f:39:dd:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:3E:97:66:E6:BB:AF:86:FC:5F:DA:BF:F8:80:C3:F4:48:1F:03
            X509v3 Authority Key Identifier:
                keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/e93d86810036a93d8fe8200b03a38740e1410860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:130::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:be:28:8a:a7:69:c9:be:55:2e:4f:70:b0:41:50:b3:b5:
         98:2d:37:1e:b4:61:68:7a:dd:d3:f8:90:ed:50:02:b4:c1:a6:
         99:20:f2:f7:f0:c8:83:c2:49:a1:98:e8:69:cf:ab:ab:0a:7e:
         ef:99:0e:85:7d:ae:ba:44:0e:02:5f:2c:40:cf:dd:45:8b:7e:
         a8:73:43:30:08:08:ab:c2:63:32:d0:e9:85:e5:b0:60:36:aa:
         fa:12:b7:bd:13:80:09:bf:92:26:c5:8b:93:e9:75:f8:ca:8c:
         ae:7b:fe:6f:b9:c7:c8:dc:9b:18:6d:72:7c:3b:1a:57:0c:7c:
         a5:bc:c6:95:06:6e:42:37:c7:3e:68:1d:fc:1d:e6:46:d1:72:
         f3:cc:06:12:ad:14:9b:46:ca:5a:a1:65:2a:fc:53:08:a3:ce:
         85:29:fd:32:39:b0:68:3e:23:f9:3f:08:f3:4e:7a:a1:8c:bb:
         01:40:37:24:76:1d:91:fc:54:19:66:3e:ad:39:72:ee:c2:67:
         43:24:ed:93:91:d0:2b:9a:d1:9c:0d:24:5a:94:d2:54:b5:89:
         ad:11:bc:35:23:b0:96:5a:5b:aa:87:aa:ed:62:e5:2a:ae:66:
         80:b0:33:50:83:1e:64:ef:9a:74:7c:77:57:09:90:b7:5a:16:
         c6:77:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----