Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95fd2382-55ee-4cbb-bde5-1422ed6a0827/ea8281fcce9e60d8cf444fe5cafabf480830263c.roa
File:                     ea8281fcce9e60d8cf444fe5cafabf480830263c.roa (raw, json)
Hash identifier:          jCYtKlBUSVDBiV5HJQGAcBajHWYZQvteToQTnucezH4=
Subject key identifier:   EB:3B:81:61:3B:0D:0F:78:B6:16:29:C0:B6:36:4A:E8:E9:E8:5F:63
Certificate issuer:       /CN=80248175fc792eb41e732d5f6e0992d9bdacff04
Certificate serial:       0BF91D
Authority key identifier: FF:92:E8:B6:C6:C8:25:5A:23:8A:E8:99:8A:74:E5:E2:33:BA:FA:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80248175fc792eb41e732d5f6e0992d9bdacff04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95fd2382-55ee-4cbb-bde5-1422ed6a0827/ea8281fcce9e60d8cf444fe5cafabf480830263c.roa
Signing time:             Wed 24 Mar 2021 14:35:43 +0000
ROA not before:           Wed 24 Mar 2021 14:35:43 +0000
ROA not after:            Tue 24 Mar 2026 14:35:43 +0000
asID:                     19429
IP address blocks:        2801:1f:f000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784669 (0xbf91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80248175fc792eb41e732d5f6e0992d9bdacff04
        Validity
            Not Before: Mar 24 14:35:43 2021 GMT
            Not After : Mar 24 14:35:43 2026 GMT
        Subject: CN=ea8281fcce9e60d8cf444fe5cafabf480830263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:54:39:48:5b:b4:b5:09:9b:dd:5f:fe:d6:
                    ab:b1:eb:d7:94:b1:ad:79:f7:23:61:fe:0c:d5:5d:
                    74:41:43:cb:db:b7:40:cc:cd:66:5a:70:cf:9e:b0:
                    08:61:56:9e:52:2f:c3:1d:52:83:20:63:46:67:af:
                    55:9e:28:5e:54:7c:b0:ab:ca:34:68:cb:9a:81:f6:
                    2d:83:16:52:f1:85:68:ca:d9:1a:f5:fa:14:37:41:
                    25:10:60:3f:73:75:d8:97:20:49:3f:30:35:0c:e5:
                    c4:74:09:1c:3f:79:19:ea:df:ed:2e:ff:90:ee:5e:
                    02:3d:0f:52:76:bb:10:b1:00:53:22:46:64:0b:81:
                    98:26:22:2b:a8:36:5a:ae:9b:f9:6f:08:f8:ea:6a:
                    a2:18:39:13:74:a4:f1:e9:9c:c6:07:9c:69:81:07:
                    2f:3b:b4:0e:25:01:de:f2:5c:c8:9f:59:88:ec:f1:
                    e0:96:b4:6e:b6:c3:2f:c1:89:cc:1e:68:76:0a:5a:
                    bb:14:d4:f3:4f:e1:cf:16:ee:9d:c6:6d:7f:da:01:
                    7f:ed:a3:0a:1c:b1:57:0d:71:90:90:c0:a5:20:27:
                    20:76:ad:fa:e0:e7:8e:3f:03:d5:0f:be:5a:d3:2e:
                    57:90:05:69:8c:9b:af:45:64:77:3a:ce:9b:22:fe:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3B:81:61:3B:0D:0F:78:B6:16:29:C0:B6:36:4A:E8:E9:E8:5F:63
            X509v3 Authority Key Identifier:
                keyid:FF:92:E8:B6:C6:C8:25:5A:23:8A:E8:99:8A:74:E5:E2:33:BA:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80248175fc792eb41e732d5f6e0992d9bdacff04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95fd2382-55ee-4cbb-bde5-1422ed6a0827/ea8281fcce9e60d8cf444fe5cafabf480830263c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95fd2382-55ee-4cbb-bde5-1422ed6a0827/80248175fc792eb41e732d5f6e0992d9bdacff04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:2f:12:e2:76:36:31:aa:4d:cb:56:cc:25:77:2c:ed:65:f6:
         8a:52:95:2b:80:dd:f7:58:42:ec:4d:1b:29:85:4a:4a:e9:f5:
         d6:43:ec:1f:88:49:8e:06:74:44:9d:7a:93:49:7a:ae:98:14:
         75:36:4a:eb:62:2a:ac:64:4d:06:78:d3:71:c5:38:55:20:44:
         20:30:77:93:91:4a:d6:a4:43:06:40:18:bd:8a:65:c6:81:99:
         8e:79:2d:8f:da:96:13:68:68:8d:67:c3:a0:9d:e9:19:d5:fb:
         a3:91:b4:68:1a:43:9e:99:17:28:54:0b:e7:cb:ef:74:2a:d5:
         f6:04:0f:b5:70:99:6a:2b:76:94:54:e2:4f:f2:cd:e4:8b:97:
         aa:e9:1d:e6:f7:e8:9b:dd:5f:8f:7a:da:31:06:98:3c:d5:92:
         a7:76:7e:2c:92:06:dd:1f:16:fd:1f:65:04:5f:01:7c:1c:60:
         a8:0b:fa:3a:a7:9d:30:50:2b:0f:1d:9f:12:c2:37:d9:8d:83:
         3c:62:72:d9:de:1f:10:2f:42:90:b8:20:a1:6e:bc:73:d7:0b:
         48:ff:11:76:98:7e:5e:52:57:80:76:52:f5:95:44:b0:6c:62:
         1f:99:e6:a5:8f:e8:81:61:23:f6:db:d8:8e:f6:2d:2b:2e:a0:
         93:ba:40:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----