Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/93c14c170617deee089da55c2ad8756ffec0d8b9.roa
File:                     93c14c170617deee089da55c2ad8756ffec0d8b9.roa (raw, json)
Hash identifier:          PT+f6hf77znZXy5kDIKxh9yZjTZXzT21exhXBfR/w+I=
Subject key identifier:   6E:6A:22:2C:B5:D0:32:BD:8A:6F:03:4D:0C:71:F8:B8:7B:9A:87:FB
Certificate issuer:       /CN=1493cbe50e45cae3fefc4b38bac904681585a59d
Certificate serial:       0D7B98
Authority key identifier: 21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1493cbe50e45cae3fefc4b38bac904681585a59d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/93c14c170617deee089da55c2ad8756ffec0d8b9.roa
Signing time:             Wed 24 Mar 2021 14:28:37 +0000
ROA not before:           Wed 24 Mar 2021 14:28:37 +0000
ROA not after:            Tue 24 Mar 2026 14:28:37 +0000
asID:                     264607
IP address blocks:        2801:1e8::/40 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883608 (0xd7b98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1493cbe50e45cae3fefc4b38bac904681585a59d
        Validity
            Not Before: Mar 24 14:28:37 2021 GMT
            Not After : Mar 24 14:28:37 2026 GMT
        Subject: CN=93c14c170617deee089da55c2ad8756ffec0d8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:cd:9f:60:4f:46:24:08:4e:5d:2f:bb:a2:
                    93:ae:f0:d4:9a:2c:b0:81:91:cf:50:57:27:35:26:
                    fc:92:da:ed:fa:d5:54:ee:5c:e3:59:a8:28:5c:63:
                    60:fe:49:32:2b:e4:1a:a0:2d:6d:9e:ad:ca:63:73:
                    c0:6f:94:b0:e9:d7:fc:e9:9b:b4:1b:f3:0f:87:aa:
                    d5:cc:9f:8a:0b:cd:ad:d0:7f:17:31:02:fb:f9:8d:
                    49:4d:e3:38:14:45:ae:56:bd:94:79:86:c0:0a:6e:
                    b0:7b:cb:16:1c:38:ca:bc:9b:5d:b2:24:06:51:70:
                    d9:b7:0d:9c:50:38:1a:cb:16:08:76:fd:5f:b1:3c:
                    5a:ef:1b:1f:31:97:d3:51:6e:c4:a1:4a:29:5c:30:
                    90:e5:b6:2d:95:88:33:16:1a:30:2c:1f:03:06:b2:
                    9e:e8:ca:3b:36:dc:2b:e3:42:90:59:d9:1d:fc:d8:
                    de:b9:26:ae:40:6e:9a:b0:c3:7a:46:0d:31:91:40:
                    31:6e:b9:c2:ad:c6:57:6d:4f:0a:a4:28:05:03:01:
                    c4:22:a4:19:1b:c4:8e:51:67:6a:f9:5b:7c:44:b1:
                    a3:ca:60:7c:80:cc:f6:c0:ca:ca:42:38:cc:cf:14:
                    56:54:23:c9:69:23:3b:75:ca:b4:7f:89:9c:3f:45:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:22:2C:B5:D0:32:BD:8A:6F:03:4D:0C:71:F8:B8:7B:9A:87:FB
            X509v3 Authority Key Identifier:
                keyid:21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1493cbe50e45cae3fefc4b38bac904681585a59d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/93c14c170617deee089da55c2ad8756ffec0d8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/1493cbe50e45cae3fefc4b38bac904681585a59d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e8::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:45:4d:88:a8:3d:55:07:77:e4:38:06:1c:40:54:a3:5e:a9:
         ca:a2:49:5f:aa:0a:8c:4d:78:5c:7d:81:db:a1:56:8e:52:ef:
         65:05:dc:d8:a2:7b:93:62:b2:d7:e4:fd:69:ce:29:d5:01:b4:
         8d:29:60:3f:96:25:2f:2e:69:95:48:d5:40:41:07:b3:6d:ab:
         c9:f5:e6:91:72:67:70:e9:3a:ec:87:6d:d4:0d:46:0a:b2:f3:
         19:55:2d:79:78:43:37:df:0a:d5:92:26:6f:14:ba:2c:03:25:
         bc:2e:fb:33:42:66:9a:b2:df:11:95:0b:8d:43:7d:fc:dc:c8:
         94:32:46:74:a9:87:91:0a:0b:f9:49:74:22:74:5a:4c:b0:ff:
         4f:a8:e0:40:32:bd:a1:e6:63:2c:13:98:77:51:86:f6:3f:1b:
         b0:79:46:57:d2:10:52:56:be:cd:ed:9f:21:96:13:e1:f2:34:
         99:be:1b:f7:af:06:5c:b4:da:35:6d:88:c0:4d:d1:a4:8b:a3:
         69:2e:20:69:4c:07:ab:a8:28:af:e0:bd:54:e8:77:8f:4d:05:
         85:76:44:a1:95:8e:63:73:f9:e7:a5:82:3d:1c:e3:7b:3e:d8:
         3d:5f:0a:cd:17:57:61:92:4a:56:19:fb:53:a9:12:94:98:9d:
         01:6e:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----