Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a82edb24-4759-49d7-b7ec-ae1ebc06d7bd/e605b24792b0ab0210284cc7c49e8d738ed35562.roa
File:                     e605b24792b0ab0210284cc7c49e8d738ed35562.roa (raw, json)
Hash identifier:          BQVFlpJrY2SxPuZiKofiUcyNXL+n57URbuQn/Mb2rm0=
Subject key identifier:   10:F2:A5:05:34:92:EF:8D:1F:67:E5:C2:46:24:60:84:A3:9C:26:A8
Certificate issuer:       /CN=ab57d54156e5b7a6448196353f5962b21f4afd05
Certificate serial:       0D1129
Authority key identifier: 95:60:E8:2E:4B:52:84:17:18:9A:1E:05:2B:5D:2B:CF:7A:00:AE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab57d54156e5b7a6448196353f5962b21f4afd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a82edb24-4759-49d7-b7ec-ae1ebc06d7bd/e605b24792b0ab0210284cc7c49e8d738ed35562.roa
Signing time:             Wed 24 Mar 2021 14:33:44 +0000
ROA not before:           Wed 24 Mar 2021 14:33:44 +0000
ROA not after:            Tue 24 Mar 2026 14:33:44 +0000
asID:                     264729
IP address blocks:        2801:1b:9000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856361 (0xd1129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab57d54156e5b7a6448196353f5962b21f4afd05
        Validity
            Not Before: Mar 24 14:33:44 2021 GMT
            Not After : Mar 24 14:33:44 2026 GMT
        Subject: CN=e605b24792b0ab0210284cc7c49e8d738ed35562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:6d:bb:b4:48:4c:c0:94:5a:84:e4:70:7a:
                    24:e2:f3:95:bc:b2:42:22:17:60:c2:07:6a:0f:06:
                    cf:6f:f0:75:72:57:ea:3f:11:30:50:7f:b0:3f:80:
                    dc:cd:fe:eb:03:e0:98:c5:9f:b9:04:7a:57:5d:30:
                    89:63:60:cd:7e:04:d8:5f:b2:d4:59:73:87:8c:67:
                    f4:76:ec:e7:78:5d:a6:01:a1:0f:cb:3e:53:97:b1:
                    f6:a7:2c:03:52:b5:fa:ac:19:f9:79:33:13:61:7b:
                    d2:2c:cb:02:4e:fe:62:a9:d9:14:11:85:dd:6d:46:
                    78:7b:96:43:3b:a0:e9:bb:32:9a:13:71:6c:3f:8e:
                    05:ce:c4:e9:0a:a7:ed:34:51:fa:f1:45:be:88:f4:
                    f1:70:1a:a8:67:0f:71:ae:f0:00:a3:29:11:bc:72:
                    d8:6f:86:f1:a5:4d:8c:46:74:e6:8a:4b:90:98:3c:
                    cb:f3:68:41:34:9e:2c:27:e0:d3:cf:0c:27:c1:e7:
                    c1:ab:0b:3c:a1:29:41:15:a5:f7:02:31:d7:74:8c:
                    6d:71:a3:b1:63:23:b3:0b:a6:b0:c0:90:3d:08:81:
                    4f:ed:e2:da:e8:b9:ae:cf:48:5e:e0:cc:57:ac:37:
                    99:09:b8:ad:60:89:e0:4d:bc:88:f9:d4:e7:6e:41:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F2:A5:05:34:92:EF:8D:1F:67:E5:C2:46:24:60:84:A3:9C:26:A8
            X509v3 Authority Key Identifier:
                keyid:95:60:E8:2E:4B:52:84:17:18:9A:1E:05:2B:5D:2B:CF:7A:00:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab57d54156e5b7a6448196353f5962b21f4afd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a82edb24-4759-49d7-b7ec-ae1ebc06d7bd/e605b24792b0ab0210284cc7c49e8d738ed35562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a82edb24-4759-49d7-b7ec-ae1ebc06d7bd/ab57d54156e5b7a6448196353f5962b21f4afd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:44:99:f6:07:72:cf:02:20:63:cb:a5:3a:98:04:c3:91:f5:
         ca:6b:8a:bd:ac:47:75:f4:1f:51:69:2c:60:99:a7:04:b6:3b:
         26:63:1f:ef:71:37:10:e6:ef:8c:d2:ad:fa:57:db:23:6d:e4:
         6b:7a:8a:80:6b:73:b5:55:9c:17:26:ad:2c:a1:52:0d:f8:8f:
         90:e9:c3:a0:3c:f9:45:b0:6b:13:5f:52:34:a0:df:f5:32:2c:
         ce:dc:e8:d0:17:9a:49:0e:2e:c0:b1:6c:31:e0:78:ef:13:13:
         c7:2b:85:0d:a6:d6:e1:b7:47:34:8a:0d:04:66:cb:e0:7b:6a:
         39:fa:89:12:ae:42:27:9e:79:66:93:2d:3b:78:71:4e:9e:78:
         f4:35:91:83:f5:05:46:4c:63:35:61:15:25:a8:3e:ea:6f:66:
         59:a3:6f:f5:d6:70:1d:e2:e6:99:0d:d5:30:58:e9:25:82:8a:
         ef:9c:dc:12:cb:f8:fd:cd:09:fe:b7:f9:c4:58:4c:74:c9:2e:
         fb:8f:f9:09:eb:dc:f3:b2:f9:52:dd:e0:36:ce:f1:62:ba:1a:
         dd:3b:0a:de:cd:ae:9f:e4:8e:44:99:58:a5:fe:4e:fc:b0:cd:
         b7:a9:b2:e9:d3:6e:7b:f4:f2:ef:87:de:3a:43:ee:17:b6:9b:
         a3:47:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----