Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9f2989325e19b7bb77fec0cd27230109f2bc35de.roa
File:                     9f2989325e19b7bb77fec0cd27230109f2bc35de.roa (raw, json)
Hash identifier:          wGj+aLQQwL24XkqgRHLsiI8R9V0w7Gk5TRKMjwJGTuI=
Subject key identifier:   63:86:39:4F:48:78:09:84:8A:C2:6A:E6:E6:FF:5A:33:19:F7:AF:EA
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E4D80
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9f2989325e19b7bb77fec0cd27230109f2bc35de.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     27947
IP address blocks:        2800:68:1d::/48 maxlen: 48
                          2800:68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937344 (0xe4d80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=9f2989325e19b7bb77fec0cd27230109f2bc35de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:30:07:f9:e3:3a:d3:0e:d1:c6:60:e1:34:
                    43:a7:57:b2:c3:98:c1:08:70:6a:f1:81:a7:5c:c0:
                    a7:7f:44:d6:b2:5d:ff:d4:91:92:14:32:5c:eb:1c:
                    38:d6:d2:21:c8:3d:5a:d0:bf:51:ab:b1:3a:7d:20:
                    41:a2:b6:b1:b0:c9:99:36:af:4a:60:07:1a:58:d7:
                    4a:89:23:0f:0b:46:31:ed:a7:c2:d1:b1:5e:7e:c7:
                    d8:b2:a4:59:cd:05:25:82:1f:66:ef:c6:17:1f:15:
                    9c:d4:5c:38:93:8b:ef:3e:9d:fd:ae:9e:2a:9f:65:
                    99:5c:e2:e6:05:77:77:a6:6a:9f:56:e3:46:40:52:
                    4b:9b:99:10:c1:db:25:d7:db:14:cc:78:9f:8b:1f:
                    8a:e6:c3:a1:de:18:2d:ff:c9:89:2b:ae:8b:02:9f:
                    ba:6d:cc:67:38:25:aa:fa:28:17:7a:b0:45:75:5a:
                    e2:bf:67:51:42:56:23:ff:a8:b5:4c:26:da:fa:ee:
                    9d:09:c3:31:d0:26:b6:90:8f:79:91:86:dc:1d:9c:
                    a4:2e:8f:4e:b4:a1:ba:b1:0b:e7:77:c6:04:f6:5c:
                    e9:86:db:5e:a4:a0:a4:3d:39:69:fd:54:3d:63:b4:
                    ba:50:82:b2:5f:b2:4c:1d:8e:e5:6f:f6:08:1e:8a:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:86:39:4F:48:78:09:84:8A:C2:6A:E6:E6:FF:5A:33:19:F7:AF:EA
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9f2989325e19b7bb77fec0cd27230109f2bc35de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:17:79:33:87:ff:7f:1a:a5:2a:90:c1:92:57:b3:d7:9d:
         38:05:90:92:a6:d8:3b:6a:a2:f7:ed:37:9f:98:1e:a4:e9:75:
         03:37:dd:45:44:92:69:01:55:1f:4d:f9:9b:f4:a0:a9:f0:6b:
         d5:1c:79:d5:6a:df:ab:1b:ae:47:da:03:9c:36:5c:6b:20:c7:
         7a:f1:32:8a:c6:9e:d6:1b:36:6f:ce:d2:a2:be:ac:6f:d1:ff:
         d9:e8:0f:66:8f:e6:67:45:bd:0c:fb:b9:48:20:4b:ea:e2:0d:
         7e:81:fa:f8:39:c7:6a:1d:7b:46:15:ac:51:9c:b8:cc:96:ef:
         f6:9a:a2:fa:85:44:93:0b:d1:c8:ad:d0:45:e6:66:51:26:dc:
         d9:35:d6:39:60:dd:4b:97:e5:f9:4a:8c:db:ce:65:22:ef:41:
         89:ca:35:bc:8a:76:58:ab:52:9f:22:8d:ca:c2:ab:29:91:23:
         bb:da:b4:1c:15:79:b3:b9:7a:d7:ca:c8:5a:18:93:6b:5e:c3:
         6d:81:86:9c:b1:e3:72:30:b4:b3:51:19:a0:93:74:a7:3e:f5:
         4a:b4:e6:78:a2:4f:5b:67:f5:bc:9d:c3:60:d9:a3:d7:6f:74:
         26:61:2d:6d:57:f2:c9:50:31:41:e3:a7:72:bc:3d:ea:a8:16:
         5a:2b:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----