Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d5c45a3758430fb487b5307d4d81171354316dba.roa
File:                     d5c45a3758430fb487b5307d4d81171354316dba.roa (raw, json)
Hash identifier:          co7TFV8mG4REwfJzH+hCdL9DCnChvaxo4PhCB60Zn+8=
Subject key identifier:   B0:2A:7B:5A:D9:32:7A:17:12:9B:E4:18:4B:64:FC:A6:58:91:BB:CD
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E5598
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d5c45a3758430fb487b5307d4d81171354316dba.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939416 (0xe5598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=d5c45a3758430fb487b5307d4d81171354316dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:dc:1b:f1:64:a1:cf:25:b2:ed:9a:d7:81:
                    97:15:6e:ab:d3:6a:28:50:0d:3e:44:0f:f2:7c:93:
                    c5:59:f8:75:10:3b:f5:26:4a:e9:5b:42:a7:2d:d7:
                    c2:99:30:e6:ee:b3:b8:62:75:dd:81:c5:01:10:09:
                    f1:23:a4:2d:08:c1:2f:7c:a1:78:24:63:4c:b1:40:
                    1c:9b:22:34:72:5c:e3:97:94:80:04:2b:7d:dc:8a:
                    db:11:59:96:8e:f3:31:02:89:71:be:ce:30:39:a4:
                    33:f2:bd:67:7c:9a:1a:1e:a7:5e:de:30:c9:7b:07:
                    8f:08:10:ce:d3:88:e3:c5:60:02:77:e9:4f:6e:2d:
                    f0:ac:9a:bb:fd:18:8f:31:a6:70:c5:03:38:0c:7a:
                    0c:ba:b0:dd:53:85:21:4a:57:f6:3b:32:41:7f:d9:
                    c7:d9:c5:6b:72:fe:97:c4:00:42:0f:ee:65:f2:7d:
                    39:99:77:ee:d2:de:e5:e4:b7:13:76:2b:fd:6f:94:
                    c3:05:ba:6d:ec:58:2b:64:22:fc:c4:ac:6d:4a:4b:
                    ed:f4:da:9d:70:52:84:f4:0c:3a:b8:c7:90:6a:77:
                    d4:b2:33:cf:ae:73:d5:f8:d6:47:c4:b4:f3:eb:47:
                    c0:9c:09:f5:90:b8:82:bc:9f:13:f3:83:a5:c4:1f:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:7B:5A:D9:32:7A:17:12:9B:E4:18:4B:64:FC:A6:58:91:BB:CD
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d5c45a3758430fb487b5307d4d81171354316dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:ad:68:50:4e:22:e9:78:e4:46:e1:ff:45:cd:ee:3b:7d:42:
         fb:78:38:13:81:56:5b:b1:22:be:85:56:d7:13:43:c0:51:ed:
         8d:8d:e5:a3:94:69:63:50:53:33:8c:a2:b7:6c:6b:0c:28:b3:
         94:d3:12:43:c4:89:5f:2a:e9:0e:aa:df:ba:bd:1c:f4:20:e4:
         49:0d:d5:c9:ea:b2:4b:8b:77:8e:80:73:ca:2b:42:34:35:ba:
         fa:50:a8:3b:80:28:13:e9:23:c6:69:cc:9e:46:16:d9:c2:e5:
         37:69:f1:79:08:cf:14:e8:60:e6:5b:51:85:cf:fd:ce:de:f9:
         0f:76:c1:b6:87:71:a6:b8:83:4c:44:fa:65:bc:a5:85:9c:e5:
         50:00:8e:cf:13:86:1a:4e:ee:3b:64:e8:e3:ce:e9:ad:8f:0c:
         72:0a:6c:39:5f:4b:d1:61:1e:90:c4:db:f0:f3:87:d3:9e:56:
         16:a2:2f:e9:72:0a:fd:21:1d:76:59:66:8d:75:5b:f6:1f:d2:
         d0:db:2f:36:fb:63:10:71:76:c9:af:da:9b:5e:80:a2:d8:4d:
         80:3f:cc:49:1b:8c:93:d8:3d:92:0f:ea:eb:bc:42:44:4d:3e:
         5b:a1:c2:31:a5:a6:f6:91:1b:c8:22:e2:2b:b8:8e:de:e5:4d:
         5f:c7:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----