Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/83b13bdd3c6549ffc139d74acb17e93060c65707.roa
File:                     83b13bdd3c6549ffc139d74acb17e93060c65707.roa (raw, json)
Hash identifier:          vqKcAsPJFCTbVDt+p4gz3BWAzJxxWQOXzult6OdZXG0=
Subject key identifier:   C9:E9:BF:7B:B0:D3:32:75:AD:71:60:FC:B0:5F:B4:CB:61:06:88:23
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E4DB5
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/83b13bdd3c6549ffc139d74acb17e93060c65707.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:1a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937397 (0xe4db5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=83b13bdd3c6549ffc139d74acb17e93060c65707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:82:2f:53:d3:8a:68:75:43:fd:40:4b:0f:
                    4e:db:aa:8a:8d:f8:9e:e5:6a:9f:55:3c:1b:70:d9:
                    1c:96:b8:a7:1d:32:6f:a9:04:60:3e:be:fd:d4:b8:
                    51:25:0f:da:0f:47:b2:bd:e1:8f:4c:f2:81:6f:2c:
                    97:45:dd:23:e1:11:79:95:cf:b3:35:c3:f5:46:c1:
                    ac:c2:91:d1:e1:14:6c:dc:93:e7:98:73:48:5c:92:
                    0c:29:77:65:2e:c2:c2:33:f1:4b:c7:32:4b:23:6d:
                    c6:da:8c:d3:52:df:86:d9:40:d3:d3:b8:79:85:fb:
                    c2:65:f4:99:28:b6:b7:c5:5c:6b:be:65:ce:b7:d6:
                    6c:29:4b:c6:60:bd:20:84:32:45:60:87:a1:b6:f9:
                    36:de:6e:dc:9d:fd:a1:c5:2d:e2:f7:97:3e:16:8c:
                    d3:4c:df:50:e3:d2:ca:77:c1:0d:71:8f:cd:1a:65:
                    19:4d:82:5a:8c:8c:0b:2a:8c:15:f2:b5:50:04:ba:
                    f4:1e:af:71:8a:f5:ec:9c:74:a4:cd:38:81:79:0c:
                    dc:06:de:4c:e2:45:1b:19:ab:a6:ef:fa:d5:33:91:
                    12:fe:7f:44:f5:7a:a6:83:36:fd:02:3d:50:d7:44:
                    c9:44:f7:a1:82:6c:8f:ce:30:ac:bc:30:0d:07:d0:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E9:BF:7B:B0:D3:32:75:AD:71:60:FC:B0:5F:B4:CB:61:06:88:23
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/83b13bdd3c6549ffc139d74acb17e93060c65707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:5d:1b:22:e8:83:c0:04:90:ca:f6:af:8c:15:df:fc:e6:
         a5:b1:51:e2:48:76:5e:0b:a0:e8:fb:a4:ef:62:7a:72:79:a3:
         97:d5:e1:e7:54:7a:33:c5:af:e3:22:1f:30:53:29:87:58:d9:
         8c:a0:3d:bf:24:14:41:d0:9f:a2:21:fc:ab:9b:02:84:7e:6c:
         60:27:e7:a7:91:3b:2f:33:b5:76:df:bb:8b:b0:99:49:11:47:
         22:7c:7d:93:07:b0:1c:7e:80:ab:21:dd:c2:d4:d8:51:b5:6d:
         db:f7:84:90:96:ac:72:8f:7a:08:de:c8:b1:6d:8a:bc:4d:a4:
         d2:8f:18:57:21:fb:b5:77:3b:7e:d7:63:0c:c4:e4:a6:cb:b8:
         00:12:ca:d4:22:50:6a:a7:7c:fb:00:a5:36:81:b5:ce:59:cb:
         cf:04:fd:0d:e1:84:c2:62:22:35:43:f3:a6:35:47:54:20:41:
         28:bf:f1:fd:df:bf:5b:3d:cd:d1:60:a2:2a:d6:7f:cf:ac:4d:
         54:e9:f3:4e:e4:47:51:15:9a:fd:ff:c9:ab:21:9e:bd:94:3a:
         0f:3e:f3:69:87:b1:c6:42:b0:b6:e6:64:d6:35:e0:af:30:6f:
         2f:5e:d5:67:2c:dd:bf:00:89:4f:83:71:1b:6f:4a:9f:62:e3:
         ff:d7:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----