Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/6d5a7c2310ffb16aa5ebb0c6cb5cbf27875199e9.roa
File:                     6d5a7c2310ffb16aa5ebb0c6cb5cbf27875199e9.roa (raw, json)
Hash identifier:          uzpBggNTn7Qu1y4XK6c4ERHn+9fl2UjC0szLq2SRgZU=
Subject key identifier:   21:DD:1A:D7:48:78:72:C9:30:03:E5:B5:D0:D0:5D:D4:F1:9B:74:AF
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E48B2
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/6d5a7c2310ffb16aa5ebb0c6cb5cbf27875199e9.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:24::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936114 (0xe48b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=6d5a7c2310ffb16aa5ebb0c6cb5cbf27875199e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:7a:cc:18:81:9e:62:23:ca:05:1e:10:90:
                    5b:57:5e:ac:06:30:79:3f:ef:59:0d:c3:f5:77:fc:
                    7e:69:0a:60:3c:37:2c:ac:3a:89:21:04:33:8f:a8:
                    08:ec:31:49:a0:d1:26:17:ec:36:63:61:2c:96:35:
                    06:cd:64:43:80:2c:0f:2e:e7:f2:4e:ed:03:01:6e:
                    51:d9:d9:eb:c3:57:f9:7e:da:db:38:bc:34:1c:df:
                    f0:59:b0:1c:c4:4e:b9:25:b8:f0:a7:5b:b3:74:fa:
                    fe:0b:01:22:e2:02:ac:15:fa:1c:be:54:02:fb:d7:
                    c0:70:a0:88:c1:ad:ba:90:9e:fa:a7:94:e1:f2:5b:
                    62:d0:5d:ff:f7:76:4d:6a:d9:88:b0:bc:7e:a4:8f:
                    5d:5f:ea:53:6f:a3:fd:8d:a6:ec:47:b9:b1:2a:e8:
                    a7:28:d2:35:d6:0b:95:5e:13:62:7d:c5:86:24:17:
                    13:92:4b:62:f5:f2:6f:4f:1c:d8:da:92:ac:93:33:
                    a0:d9:f2:25:5f:f2:23:eb:57:7a:9a:ce:53:ca:51:
                    63:ae:53:8d:ec:52:5e:30:62:7d:ab:4f:0d:d8:60:
                    2b:57:cf:fe:dd:d8:fe:af:d6:30:f6:da:2c:0e:6a:
                    a8:e6:77:67:13:e0:93:33:f9:35:02:c8:e9:49:28:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:1A:D7:48:78:72:C9:30:03:E5:B5:D0:D0:5D:D4:F1:9B:74:AF
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/6d5a7c2310ffb16aa5ebb0c6cb5cbf27875199e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:ea:5a:e5:71:48:9d:b3:e0:49:7c:7c:06:66:88:ec:62:
         30:59:d4:8f:23:47:23:4b:d1:a0:82:ce:14:6a:74:e1:a9:04:
         42:08:89:dc:2e:65:3e:35:f9:9e:31:66:43:ce:a0:75:fc:df:
         a7:8d:25:85:44:88:75:ba:74:63:64:f7:e1:cb:b0:81:8b:84:
         c2:11:20:c2:2b:c9:83:27:ee:e5:92:43:01:04:96:e3:19:51:
         ea:ff:33:35:17:30:cc:79:53:ba:44:35:64:ba:b0:26:b8:6c:
         99:72:e9:4c:8b:13:9e:10:dd:2d:98:c3:f5:41:4a:a7:99:3a:
         d9:76:73:28:17:f4:c1:1d:fc:79:5e:53:6d:41:e6:4e:19:2c:
         9a:bf:d2:00:39:29:71:7c:1f:17:38:33:10:61:87:8f:e8:a9:
         6c:48:9a:4a:c1:49:3f:98:04:b8:14:1d:e0:f4:89:fc:f4:e0:
         ee:b7:f2:6c:ca:26:8f:76:c0:ef:66:52:23:d0:d8:96:6b:de:
         01:41:e3:b5:43:66:e6:5a:3d:6c:30:dd:8c:c2:09:a0:36:cf:
         99:58:9f:ae:7e:1f:59:3b:c4:58:f3:0f:51:9c:fa:27:53:69:
         f7:92:9e:19:69:eb:26:8c:bc:4d:35:bd:6d:66:31:40:5e:c5:
         91:20:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----