Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2728a9dc14a422ab5392385edd06378a1dfec161.roa
File:                     2728a9dc14a422ab5392385edd06378a1dfec161.roa (raw, json)
Hash identifier:          n9eiUpQYMbYFTE223+5+OVwjnJjuomNDShg85CG5We0=
Subject key identifier:   DC:B2:C7:4A:91:DB:C9:7B:B0:A0:38:02:C0:9A:51:43:F9:B2:55:57
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E52ED
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2728a9dc14a422ab5392385edd06378a1dfec161.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:1aa5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938733 (0xe52ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=2728a9dc14a422ab5392385edd06378a1dfec161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:85:8c:ab:e7:76:bc:d1:86:35:46:97:a6:
                    32:b8:f8:b2:d9:ed:0b:6f:1c:74:8c:3e:5f:f8:2f:
                    ac:47:96:92:f8:83:ee:9b:08:9b:6c:0e:df:8f:1f:
                    c6:f5:c3:44:6c:71:90:18:64:58:b1:22:1f:bd:81:
                    2b:0c:9b:2c:bb:f7:d4:ea:6b:f0:b9:25:97:4e:c0:
                    05:7a:50:59:40:16:67:61:a0:83:12:a3:86:23:35:
                    48:7e:ff:77:75:f1:2a:e4:ee:5e:99:87:2e:03:14:
                    3f:e5:0c:75:c6:59:7e:d3:0e:46:9d:1e:ba:e4:0c:
                    70:20:bc:ee:0f:fc:5d:1f:52:aa:9a:e4:40:91:e4:
                    38:f5:ee:66:ce:5c:f7:49:f5:b6:4a:18:8a:07:64:
                    37:40:0d:8c:3c:f5:1d:a2:79:29:24:74:d5:15:f0:
                    64:1e:ca:ee:f0:e8:35:da:25:f0:fd:51:3e:c7:07:
                    f6:1e:3b:7d:78:2f:89:6b:4a:79:ba:4e:9d:a7:8d:
                    d2:6f:cd:cf:99:0c:00:ac:3c:b9:94:d0:82:39:95:
                    dd:6d:e4:80:55:9d:77:cd:b5:cf:80:99:09:3d:92:
                    d8:25:1c:a2:34:e4:05:28:00:12:48:c7:fc:14:f4:
                    ef:bf:3f:99:f2:2f:fc:2f:19:9e:59:44:5e:d4:f7:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B2:C7:4A:91:DB:C9:7B:B0:A0:38:02:C0:9A:51:43:F9:B2:55:57
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2728a9dc14a422ab5392385edd06378a1dfec161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:1aa5::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:11:97:fe:54:04:b0:11:4a:6c:f9:f9:a8:aa:e6:5d:77:
         74:9b:f8:67:cf:38:92:c5:5f:46:49:e3:0c:7c:02:22:36:26:
         d5:d8:41:75:96:c4:e8:9a:cb:4c:0d:09:4e:a4:36:a8:92:d1:
         0b:20:38:a9:82:51:9b:f8:1c:44:e8:41:5c:a2:d5:3f:f6:49:
         3f:6e:6f:2e:92:9c:fa:08:d4:d3:42:24:d9:65:88:64:eb:e3:
         a9:bb:b3:07:eb:5c:3b:10:22:ab:84:3e:64:25:27:9a:f2:23:
         00:04:76:23:08:e8:e9:e3:14:84:60:31:31:06:81:c4:80:16:
         f4:61:7b:53:9e:9c:9c:3f:c1:ab:9c:93:b6:e0:ba:3d:84:a4:
         95:e7:3e:df:c2:b4:93:ce:08:49:7d:f3:91:bd:d1:27:51:34:
         d0:bd:9d:1a:cd:3b:21:b4:ad:a0:06:6b:cf:ac:a0:29:de:d5:
         64:b6:97:a1:20:43:d6:c8:74:33:62:5e:f8:95:53:d8:6c:7c:
         d3:91:de:7e:8d:3b:51:78:dc:d2:53:10:72:8f:48:c6:4c:d6:
         48:13:e1:43:3d:b1:57:17:07:a1:ff:3d:d6:df:41:1a:26:ca:
         40:be:35:79:04:31:a2:3e:ca:ef:68:7d:c8:00:3b:85:eb:ea:
         e0:8e:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----