Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/ab568f1579c6d687fa1b0ce0db1e0fddd2a9d59a.roa
File:                     ab568f1579c6d687fa1b0ce0db1e0fddd2a9d59a.roa (raw, json)
Hash identifier:          W6HjryDO2uBJ/l06gpw0jK6M2Ch4TNJNJkeJqpSjbMY=
Subject key identifier:   F2:D5:68:E6:D0:2F:CC:97:28:56:4A:60:CF:23:4C:DE:0C:98:15:CD
Certificate issuer:       /CN=d46ebd602e50b2947122f994202d0ade1474b0a2
Certificate serial:       108A6F
Authority key identifier: 20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/ab568f1579c6d687fa1b0ce0db1e0fddd2a9d59a.roa
Signing time:             Wed 06 Apr 2022 15:14:20 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     14080
IP address blocks:        2801:1da:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084015 (0x108a6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46ebd602e50b2947122f994202d0ade1474b0a2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ab568f1579c6d687fa1b0ce0db1e0fddd2a9d59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:69:a5:12:1e:a3:86:b3:af:40:63:c8:41:
                    e6:a1:f8:5c:75:24:97:b9:5b:99:0c:ec:e8:0e:ce:
                    44:67:41:4f:96:cd:a0:f2:4a:9b:b3:52:38:0a:20:
                    b9:16:eb:de:2b:3f:44:81:3b:cd:2b:d3:b8:de:62:
                    30:35:40:b6:88:87:72:2f:10:5e:97:54:71:b3:e0:
                    a4:ab:67:81:95:10:b4:ef:04:a6:66:54:ae:40:92:
                    2e:65:3e:00:af:6f:19:f5:cc:19:0f:3d:5d:ae:93:
                    e0:47:04:b9:8d:84:da:8b:7e:76:2f:b4:55:39:d5:
                    90:91:5a:5c:9b:89:50:f6:79:0d:71:90:64:01:fc:
                    4c:b3:26:03:d2:9b:ea:fc:84:8b:57:4e:c2:34:66:
                    06:8d:dd:d6:5e:7c:39:ee:28:a2:03:53:e7:87:fd:
                    66:83:7f:05:6e:2a:d2:33:2e:08:71:e8:74:71:50:
                    61:93:2d:60:a1:91:74:16:49:14:58:a7:79:0c:25:
                    d3:85:19:a6:c9:08:9b:3a:c2:20:a8:27:47:2e:5e:
                    ac:6f:a9:c9:5f:70:5c:b6:c0:5a:fd:31:4e:95:a6:
                    d3:e3:16:91:ad:cb:9f:b6:29:8f:75:b7:8d:72:e4:
                    6f:61:0d:8e:4d:c8:69:f8:48:63:87:a6:12:32:ef:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D5:68:E6:D0:2F:CC:97:28:56:4A:60:CF:23:4C:DE:0C:98:15:CD
            X509v3 Authority Key Identifier:
                keyid:20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/ab568f1579c6d687fa1b0ce0db1e0fddd2a9d59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1da:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:cf:84:4c:74:22:73:d5:22:6e:f3:fa:4d:91:e5:17:6f:d1:
         c5:95:6f:9e:10:a9:75:4f:e2:2f:c8:4b:47:ff:42:d5:f9:88:
         9d:63:f0:80:1a:35:bd:c0:74:2a:dc:f2:34:e7:9c:2c:74:64:
         15:aa:0c:28:97:2d:76:c7:a3:88:30:6f:b3:f5:59:63:10:b8:
         73:58:85:f9:34:22:81:2a:9c:df:c3:9f:a5:99:ca:21:95:e0:
         f4:26:ef:38:7f:49:87:c5:72:f9:c3:8f:fa:17:88:20:cb:21:
         58:7f:4f:95:8d:d1:22:97:00:44:e5:59:99:f9:0d:7f:ac:3d:
         1b:84:68:4d:86:42:b3:65:66:00:5b:f3:8d:87:41:de:12:9b:
         b2:04:77:ed:14:02:36:3b:f9:66:b0:9f:ac:ed:99:c1:91:75:
         58:c0:0f:7a:3a:30:32:76:36:2d:c9:80:c1:9e:84:56:7f:56:
         04:1c:03:cf:10:9a:49:9d:16:ae:92:50:99:73:f7:87:48:16:
         90:d4:f8:6f:45:ce:69:83:6d:ac:2f:93:f9:fc:00:9b:ce:63:
         fb:e2:ed:2b:a0:8f:01:86:2c:77:79:19:4f:6a:f9:97:08:c0:
         94:21:ca:3b:58:a5:71:19:12:f0:a7:da:fb:a5:07:d2:0c:a2:
         23:07:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----