Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/2afea52ed5ef61312160445d867e49721d34785b.roa
File:                     2afea52ed5ef61312160445d867e49721d34785b.roa (raw, json)
Hash identifier:          BBv9M5AhIrhHpkxoPBI5jALrsHly9cTQTravH8d9Ils=
Subject key identifier:   75:87:7D:E1:17:43:E0:F3:71:0C:91:88:2E:2C:44:F4:C8:EE:7E:30
Certificate issuer:       /CN=99a93fa2e48a3eca74da21b5331c098de8887574
Certificate serial:       0D3F11
Authority key identifier: D4:95:B8:68:24:4E:CF:A4:7C:1C:39:B2:63:E2:A8:29:D5:A6:2A:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a93fa2e48a3eca74da21b5331c098de8887574.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/2afea52ed5ef61312160445d867e49721d34785b.roa
Signing time:             Wed 24 Mar 2021 14:36:29 +0000
ROA not before:           Wed 24 Mar 2021 14:36:29 +0000
ROA not after:            Tue 24 Mar 2026 14:36:29 +0000
asID:                     19429
IP address blocks:        2801:14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868113 (0xd3f11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a93fa2e48a3eca74da21b5331c098de8887574
        Validity
            Not Before: Mar 24 14:36:29 2021 GMT
            Not After : Mar 24 14:36:29 2026 GMT
        Subject: CN=2afea52ed5ef61312160445d867e49721d34785b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:06:35:46:79:21:c8:95:64:3e:e5:29:c5:
                    db:c6:b5:af:67:ff:af:46:64:7b:23:88:99:d2:c9:
                    5c:4c:f8:59:f0:72:d3:80:92:d6:a1:82:9e:48:1c:
                    7a:74:19:0d:9c:cf:8a:4c:c4:d6:e4:d5:0e:e7:e4:
                    f6:60:29:a9:61:72:6d:4a:8c:35:21:68:e9:3d:11:
                    43:af:52:8b:fd:20:e5:ad:86:63:42:eb:11:07:47:
                    0f:40:9d:e3:4d:b6:2e:39:68:1d:62:cd:05:c9:92:
                    8d:67:53:9d:81:22:73:04:67:5e:df:82:a7:4f:64:
                    d1:c7:5c:a2:5a:79:32:ca:4b:d3:c4:f9:9c:9e:f5:
                    08:fa:74:2d:f0:4b:cf:af:30:91:be:0f:52:da:2e:
                    24:41:1f:7b:40:ff:f4:36:21:a3:44:92:5d:12:f3:
                    ab:f7:f8:a5:4b:d5:11:2f:60:ee:1e:6e:be:d1:75:
                    83:7e:56:a1:cc:54:36:c3:bf:b7:c6:ca:f4:78:1a:
                    0b:b6:17:4a:39:2d:7e:49:7c:8a:a7:ec:0d:10:57:
                    94:e9:b0:57:17:23:63:7a:e3:18:2b:98:69:4b:6e:
                    a7:cc:51:ae:fd:51:24:ca:4b:51:74:25:41:b4:51:
                    32:2a:67:85:60:98:72:d0:fc:ab:a9:83:7f:cf:55:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:7D:E1:17:43:E0:F3:71:0C:91:88:2E:2C:44:F4:C8:EE:7E:30
            X509v3 Authority Key Identifier:
                keyid:D4:95:B8:68:24:4E:CF:A4:7C:1C:39:B2:63:E2:A8:29:D5:A6:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a93fa2e48a3eca74da21b5331c098de8887574.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/2afea52ed5ef61312160445d867e49721d34785b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abae610d-1b6f-43fb-97e5-7551cce42760/99a93fa2e48a3eca74da21b5331c098de8887574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:06:77:7b:28:10:37:cf:94:6a:df:ef:2f:a5:bb:19:5d:17:
         d9:c8:6d:36:63:d5:fe:99:a7:b8:18:95:88:2d:6b:dc:2b:0b:
         a0:d0:11:2d:14:9d:c6:74:f7:62:ca:9d:2f:d4:fa:db:b7:40:
         f7:bf:56:04:6c:9f:d7:69:54:fc:ef:65:9b:2d:7e:59:45:0d:
         75:e6:92:c4:95:90:de:3c:4f:6a:e4:63:dd:ec:04:e9:9b:e2:
         56:79:99:23:e7:b7:30:1a:23:e4:43:82:b7:a1:b3:62:93:44:
         e3:b6:47:a3:82:38:28:4c:46:82:ac:9a:3a:b2:a5:e5:cc:dd:
         48:21:9b:ba:d0:93:4e:ae:e4:ef:d0:52:11:5a:90:e0:1b:12:
         91:4c:9a:6a:83:7b:e7:e8:25:18:b7:3b:1e:84:81:4e:b6:e2:
         f9:14:bc:07:e1:f0:d0:e6:22:eb:37:d2:22:b8:05:f8:9a:12:
         3b:1e:01:f5:05:bb:73:4b:f9:c6:ef:b7:e1:4b:be:9a:f9:b2:
         61:7e:70:4a:3a:32:6c:40:2a:33:82:0f:52:09:d2:96:b3:ea:
         b3:e8:e6:9f:b1:f9:02:de:4a:45:f9:ee:23:42:8c:19:22:93:
         87:e1:87:70:cf:25:6c:a1:20:c7:6f:ef:e8:48:28:f7:6c:b0:
         a7:1f:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----