Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/c6e9fcd63db307da6ae8eafe637d55b13679de73.roa
File:                     c6e9fcd63db307da6ae8eafe637d55b13679de73.roa (raw, json)
Hash identifier:          qHtJ7+5Jv7ldRiMPIRPp2tW7blb4BONlLVxQwOeAtj4=
Subject key identifier:   A5:03:F1:51:A7:F8:94:59:EF:A4:D5:FB:CD:80:E9:2E:11:DC:5D:7C
Certificate issuer:       /CN=dd6660715432dca219d013cf5f8591f73aafbd11
Certificate serial:       04C229
Authority key identifier: 97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/c6e9fcd63db307da6ae8eafe637d55b13679de73.roa
Signing time:             Sun 30 Jan 2022 07:30:00 +0000
ROA not before:           Sun 30 Jan 2022 07:30:00 +0000
ROA not after:            Tue 30 Jan 2024 07:30:00 +0000
asID:                     271925
IP address blocks:        2801:13:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311849 (0x4c229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6660715432dca219d013cf5f8591f73aafbd11
        Validity
            Not Before: Jan 30 07:30:00 2022 GMT
            Not After : Jan 30 07:30:00 2024 GMT
        Subject: CN=c6e9fcd63db307da6ae8eafe637d55b13679de73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:72:7c:eb:96:fe:82:25:45:59:95:2c:8e:
                    6c:cc:d3:63:1c:4b:8c:4c:f7:7d:34:7b:4f:d3:82:
                    d3:44:31:8b:39:40:ad:94:d0:40:2c:2e:92:ab:07:
                    89:c6:2b:09:6f:3d:d0:eb:f2:0f:1f:72:30:44:c9:
                    8b:c2:9d:fc:ef:c3:83:65:6f:30:d1:ca:44:93:31:
                    49:23:28:6f:d7:17:de:3e:8a:c8:65:5f:b3:dc:58:
                    dc:df:a1:78:9b:87:55:d4:83:45:06:68:fd:0e:de:
                    b8:97:6b:f7:73:a6:81:c4:5d:da:3c:a9:74:70:e8:
                    d4:da:80:34:3a:72:48:03:c1:24:e8:07:e0:6b:25:
                    db:9a:25:16:dd:bc:88:e2:78:fb:b9:e3:60:d1:c3:
                    51:03:3e:f3:a9:eb:17:48:20:77:fd:cf:6f:e1:91:
                    28:0d:a4:84:06:7f:cf:f6:f8:13:54:c4:26:b6:bf:
                    be:15:8c:26:57:32:d4:9c:c3:12:34:fb:1e:40:f8:
                    ae:bb:26:45:32:59:68:eb:21:65:06:e2:a7:8f:3a:
                    c6:ba:8c:10:c3:1d:e4:62:98:03:6b:ec:94:3e:eb:
                    85:44:d6:74:82:8d:db:ec:82:14:99:38:cd:15:79:
                    b3:13:5f:34:cb:31:36:28:e0:41:df:29:18:7f:9e:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:03:F1:51:A7:F8:94:59:EF:A4:D5:FB:CD:80:E9:2E:11:DC:5D:7C
            X509v3 Authority Key Identifier:
                keyid:97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/c6e9fcd63db307da6ae8eafe637d55b13679de73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/dd6660715432dca219d013cf5f8591f73aafbd11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:9f:64:dd:cd:9b:77:0e:9c:c3:a6:ab:f8:d8:94:69:89:
         2e:d7:f0:5f:b1:d2:45:3a:ae:d2:36:44:33:a2:68:fb:be:e8:
         1d:fb:b8:df:29:fe:d1:b1:80:1d:d0:b3:38:62:ce:27:cf:03:
         a1:82:0f:36:f7:be:da:d8:20:2f:f3:21:bb:54:8b:e6:ab:2c:
         e1:02:d1:7e:e9:a6:b8:a8:f8:ae:e0:7f:d4:56:ca:63:71:09:
         a9:63:fa:59:20:b7:e5:3c:9b:85:3a:fc:d2:7d:02:8a:08:27:
         27:5f:59:d2:16:52:48:d1:01:6a:92:d4:50:d3:ca:6a:3b:09:
         af:f5:ab:57:12:ec:30:9b:55:11:9a:48:89:92:c2:17:4a:07:
         b8:01:75:89:da:1a:1b:45:9e:5b:0f:dc:ec:88:ff:f7:eb:3c:
         3c:2b:8f:13:b9:c8:66:17:9d:55:3d:72:df:13:e6:54:69:12:
         cc:5d:d8:d8:9c:73:dd:c6:07:41:dc:cc:96:c6:30:97:a7:1a:
         32:15:63:bf:ac:ae:6f:79:bf:ac:99:97:bb:73:f0:cb:45:38:
         ad:52:e3:29:3a:a0:08:c6:60:11:4d:2f:07:65:2e:8c:6d:3b:
         80:ff:b9:b8:6d:56:c7:69:6f:83:3d:ce:95:35:6e:a1:e4:1a:
         01:65:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----