Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/764dee32f6977606c6ebdf337b9fd4b3a4221043.roa
File:                     764dee32f6977606c6ebdf337b9fd4b3a4221043.roa (raw, json)
Hash identifier:          nZtglfNay4xi/qizIrRKZ1uByIswNdDuZyGQpn3hdZ8=
Subject key identifier:   3F:63:34:A7:46:5F:29:3A:25:57:5D:4C:DB:0E:CA:B3:48:2C:89:F8
Certificate issuer:       /CN=46d9ddd044bcb08dfa2883e8990797737d942efe
Certificate serial:       07D723
Authority key identifier: F1:F5:A6:C4:81:85:3A:FD:FD:EE:84:F9:A5:98:17:00:7F:3F:AC:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46d9ddd044bcb08dfa2883e8990797737d942efe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/764dee32f6977606c6ebdf337b9fd4b3a4221043.roa
Signing time:             Wed 24 Mar 2021 14:35:15 +0000
ROA not before:           Wed 24 Mar 2021 14:35:15 +0000
ROA not after:            Tue 24 Mar 2026 14:35:15 +0000
asID:                     27951
IP address blocks:        2801:17:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513827 (0x7d723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9ddd044bcb08dfa2883e8990797737d942efe
        Validity
            Not Before: Mar 24 14:35:15 2021 GMT
            Not After : Mar 24 14:35:15 2026 GMT
        Subject: CN=764dee32f6977606c6ebdf337b9fd4b3a4221043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:5d:25:3d:20:d9:33:c7:fc:49:55:4e:12:
                    e3:3f:db:1e:46:fa:fd:32:81:de:0b:e9:05:2a:ac:
                    e6:47:3e:e4:ed:8a:50:8b:d4:9c:00:7a:39:16:75:
                    88:b0:eb:ff:e1:bd:83:4b:ac:75:6c:43:6d:d5:00:
                    f7:b2:06:69:0d:36:41:f2:f2:15:86:a3:8e:94:e5:
                    6e:c7:36:22:2c:e7:e1:61:ea:c7:9d:20:86:af:82:
                    87:4a:71:f4:42:0b:00:46:68:44:ce:24:cb:d6:45:
                    61:cb:f9:3a:cf:24:12:a8:5a:78:45:f6:2e:b8:a7:
                    ec:4d:e2:3d:10:97:14:54:72:13:58:dd:a5:29:74:
                    1e:c8:1d:af:66:74:aa:56:20:3d:54:5a:09:d7:4e:
                    4d:c0:59:42:19:65:0e:e8:5d:a1:cd:9a:c0:f3:ab:
                    3f:b0:ad:4d:23:fa:5a:7a:25:ce:90:3e:af:e3:34:
                    bc:49:fc:11:aa:32:82:82:fb:49:17:b0:53:39:ed:
                    6c:4a:10:c0:f1:ed:53:1b:39:0e:77:2b:25:0a:41:
                    0e:5d:41:8d:9c:00:60:19:25:2a:29:b6:ce:a9:4d:
                    b7:ce:20:78:a5:00:86:7c:bb:7f:47:9f:d1:c1:8c:
                    d1:a3:c2:e9:38:36:86:ca:67:1a:89:41:83:34:a3:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:63:34:A7:46:5F:29:3A:25:57:5D:4C:DB:0E:CA:B3:48:2C:89:F8
            X509v3 Authority Key Identifier:
                keyid:F1:F5:A6:C4:81:85:3A:FD:FD:EE:84:F9:A5:98:17:00:7F:3F:AC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46d9ddd044bcb08dfa2883e8990797737d942efe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/764dee32f6977606c6ebdf337b9fd4b3a4221043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2f6d6ae-2c5a-4683-b189-caf0db191f8d/46d9ddd044bcb08dfa2883e8990797737d942efe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:31:83:ff:ec:f8:7e:6f:09:32:54:66:fb:ff:5d:7e:be:8c:
         f6:7e:b2:d2:e5:88:34:61:3e:90:e0:8d:56:16:d9:ef:4e:26:
         5e:36:40:36:81:c8:d3:97:b0:a0:0b:5b:39:be:ba:87:3d:68:
         c0:20:a3:e4:83:e3:b0:02:dc:44:37:b6:bd:8f:ec:a0:b9:54:
         9e:97:bb:d1:02:39:d4:b2:2a:1b:b6:7a:9c:11:1e:c2:73:40:
         63:32:d7:8d:33:1f:26:e6:a5:27:48:da:30:77:c7:7c:66:30:
         ed:d4:78:7e:44:a0:e6:c2:16:fe:51:70:63:8a:89:6c:80:55:
         18:43:bf:54:a6:ec:65:21:77:aa:2f:0f:0b:b6:90:3c:34:c6:
         52:0f:e0:28:e1:9c:5a:53:bf:27:cf:03:ec:3c:fd:25:80:38:
         e4:d5:88:b8:34:40:f0:76:93:a0:86:bf:bf:55:16:5b:52:65:
         00:95:a7:50:27:ef:32:06:26:95:f3:b2:64:34:df:a9:2c:52:
         6b:ef:3b:59:55:b2:3c:28:bf:30:be:5e:b1:15:92:19:e3:b3:
         c1:f1:04:62:b2:7b:e6:4e:69:9d:0c:dc:f2:a0:bf:93:d0:88:
         e1:94:f3:b9:74:cb:af:df:33:27:4f:94:ee:5e:6b:d8:05:60:
         8a:15:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----