Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1b30277ceb1b488e6240e22530086c6291ad2085.roa
File:                     1b30277ceb1b488e6240e22530086c6291ad2085.roa (raw, json)
Hash identifier:          Sf8JZ5PEUYBp0EU282FSw8KV6v5K+sSL8xy7uTAhCFw=
Subject key identifier:   BD:C0:DF:C6:2E:C1:35:63:EA:EE:F2:D3:26:94:6D:3A:E7:E7:E4:1D
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E6F8A
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1b30277ceb1b488e6240e22530086c6291ad2085.roa
Signing time:             Wed 24 Mar 2021 14:38:32 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     28006
IP address blocks:        2800:370::/32 maxlen: 48
                          2800:4f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946058 (0xe6f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=1b30277ceb1b488e6240e22530086c6291ad2085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:3f:ec:97:d0:5b:0e:c6:53:2f:2c:a2:35:
                    f8:e8:ac:12:d8:b6:2a:ed:40:0b:8b:a8:83:85:a4:
                    20:6b:82:9e:b8:af:af:4c:06:b6:8e:5c:81:e3:fe:
                    0d:93:98:67:1d:2f:21:d2:39:0e:d2:fa:20:4a:3d:
                    ad:cf:50:9f:13:7c:ea:7a:3b:b4:69:be:e5:ba:34:
                    f6:a9:34:20:28:40:05:e3:ee:3c:11:f7:4d:e8:c4:
                    f0:74:da:2d:ae:d5:a5:2b:93:d6:41:30:1d:27:de:
                    b4:4a:50:9d:3a:f3:98:f3:c4:0b:84:ce:97:c2:fe:
                    76:2d:50:52:34:2d:fb:c7:87:f8:c4:20:d5:a9:11:
                    0e:76:b3:cc:91:78:c1:f4:b3:16:fb:2e:f5:f3:8b:
                    d5:d7:8c:cb:60:18:9a:0b:16:0f:04:1a:45:d7:6d:
                    14:c2:6a:97:36:b9:87:ae:45:6d:99:a5:07:55:5e:
                    c9:f3:23:9a:ef:0f:a3:1a:83:b3:be:68:07:04:46:
                    5b:e2:d1:fe:e1:12:ff:43:c9:3f:38:6e:cc:fc:a5:
                    41:aa:c5:80:f3:a3:10:6e:d8:02:ab:52:3b:79:10:
                    53:a1:ff:e5:b6:fa:77:ba:2a:cc:62:4b:83:de:b6:
                    3a:c9:36:20:b7:f9:e2:c2:c0:1f:12:b6:ed:7e:d5:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C0:DF:C6:2E:C1:35:63:EA:EE:F2:D3:26:94:6D:3A:E7:E7:E4:1D
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1b30277ceb1b488e6240e22530086c6291ad2085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:370::/32
                  2800:4f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:16:89:f9:5e:44:3b:0d:d3:1a:a6:26:01:c0:16:68:5f:
         dc:8e:7c:7e:bd:e0:98:98:95:4e:ce:ea:47:54:9a:33:84:e3:
         bf:a9:a7:e7:80:9f:d5:5a:11:d4:4b:95:53:0b:89:98:2e:24:
         76:0a:5e:c8:f6:c4:56:e9:76:36:12:c1:5a:a3:d9:85:ab:41:
         48:3d:0a:c1:94:21:9e:ce:5f:0d:f0:d9:1f:fe:d8:1c:2c:55:
         55:a1:0b:9f:08:c3:6a:f3:b2:ea:f7:bb:cb:89:4a:28:18:eb:
         05:03:10:04:e3:d9:29:c4:1c:59:17:75:0d:25:41:d5:1c:10:
         1c:7b:7f:dd:2c:29:52:10:4d:41:e6:2b:9f:49:d7:32:26:f3:
         45:12:86:c0:3d:8b:a0:e6:9f:f3:93:e6:8f:32:cd:a2:4c:5c:
         70:67:35:c3:d9:1a:55:6c:81:3e:f1:e8:5c:38:e8:22:93:4d:
         80:19:b8:ef:2c:00:90:08:76:a9:8e:c1:9c:5c:7c:06:e0:ad:
         bc:34:6c:1b:a5:fb:cf:7a:b8:42:c6:51:8a:1c:1e:89:09:d2:
         e1:29:dc:75:7e:0e:93:26:6e:1e:2d:64:74:48:9b:6f:2d:18:
         62:da:6c:29:ca:a6:84:49:d6:11:be:26:fb:be:61:63:45:0e:
         8d:26:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----