Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/0bcdecac30b525254c5073a6fb2fc7e1599955dc.roa
File:                     0bcdecac30b525254c5073a6fb2fc7e1599955dc.roa (raw, json)
Hash identifier:          ZPtn0BfqQixWFXQMT9MPmZ1R4pO9LgtqsnDcZre10Kk=
Subject key identifier:   97:E1:F1:2D:8A:58:F1:73:34:33:AF:2E:10:08:F3:0F:6F:BB:92:23
Certificate issuer:       /CN=d46ebd602e50b2947122f994202d0ade1474b0a2
Certificate serial:       10BAD1
Authority key identifier: 20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/0bcdecac30b525254c5073a6fb2fc7e1599955dc.roa
Signing time:             Tue 12 Apr 2022 15:32:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270018
IP address blocks:        2801:1da:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096401 (0x10bad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46ebd602e50b2947122f994202d0ade1474b0a2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0bcdecac30b525254c5073a6fb2fc7e1599955dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c5:a4:a6:e8:5c:da:12:32:3f:ec:6d:0d:0c:
                    ee:6d:1c:24:63:af:4f:e8:bf:5e:7c:87:f5:9e:72:
                    74:21:79:35:ea:a0:63:73:00:cf:0f:f6:ed:cc:8a:
                    fc:25:bd:1c:50:0e:a1:48:63:08:82:71:c0:bd:4c:
                    f7:14:49:35:53:dd:e9:7d:32:2c:a0:05:fd:1e:cc:
                    a7:84:18:51:7e:96:a6:40:8a:ba:bd:01:66:de:cc:
                    6e:54:e2:42:0f:7f:d3:d3:51:5e:e2:8e:f5:9e:4e:
                    7f:85:e4:44:cd:81:76:2d:55:3c:76:86:da:45:ef:
                    87:95:e8:cf:b4:70:a7:d8:9b:07:11:cd:d3:66:b6:
                    fc:eb:ed:72:7a:54:0e:bf:8b:92:77:62:a1:6e:f3:
                    31:50:d9:f8:24:69:22:cf:f1:e2:95:9a:e3:68:c7:
                    07:6a:8b:ca:e3:b8:e0:e1:3b:d4:e4:84:f7:cf:44:
                    82:d0:c5:da:99:17:bc:41:9f:01:cc:0e:56:d7:0f:
                    b8:29:d1:64:20:f9:39:e6:dd:02:d0:26:b5:b4:e1:
                    00:9c:0f:f2:e0:26:60:2d:33:a5:63:e7:f1:68:ea:
                    69:f9:e9:d6:f0:eb:8e:3e:b2:71:c9:ee:1f:24:74:
                    c1:12:fc:20:a2:9b:c3:78:02:d9:cb:3f:91:27:8e:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E1:F1:2D:8A:58:F1:73:34:33:AF:2E:10:08:F3:0F:6F:BB:92:23
            X509v3 Authority Key Identifier:
                keyid:20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/0bcdecac30b525254c5073a6fb2fc7e1599955dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1da:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:af:02:f0:3a:65:3a:6d:a0:aa:62:81:76:e8:a0:bc:d4:72:
         b0:18:bc:f3:13:2f:2d:1e:a9:3a:2d:73:02:5a:b5:43:71:b4:
         b4:51:f6:de:4a:38:41:7a:2d:a4:ce:80:09:9d:69:37:7c:de:
         1e:f8:a3:39:2d:e9:20:5e:af:15:87:30:76:22:82:78:ff:27:
         c2:97:d0:7a:b1:b9:52:cb:b5:48:84:46:19:b7:de:12:bf:76:
         71:42:7d:2d:98:de:9c:74:50:61:19:b0:56:da:3c:58:a0:a0:
         c0:9e:97:af:46:f3:04:5f:cd:93:9c:a3:1d:03:9d:37:25:3c:
         da:8f:bd:2f:88:17:d9:cc:33:72:4e:3a:c1:cd:ae:a3:88:9d:
         59:fc:b5:b2:c7:2a:5e:9e:4c:38:a3:8e:ba:fe:0f:43:1a:d7:
         ff:04:39:5f:c9:16:3f:f7:9f:83:9a:3b:ab:6e:ee:93:f7:ae:
         3b:0d:ea:56:14:6c:4e:87:12:ce:1a:55:48:a6:21:4e:d3:8a:
         9e:f7:49:37:86:bb:75:05:3a:3b:a5:14:71:a9:52:6d:eb:b8:
         ae:01:4c:81:27:86:c5:d3:03:77:30:fb:3d:78:18:3d:66:ce:
         bd:75:9e:5a:e4:5c:13:ff:e4:df:cd:2b:a2:18:39:da:3d:af:
         bb:66:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----