Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3d26945ab2b85790290a59be02958f6efea8cc34.roa
File:                     3d26945ab2b85790290a59be02958f6efea8cc34.roa (raw, json)
Hash identifier:          UK9A42ZHgdGwGvSbgnvl4P6mu+YNu/DL5qb9yF8Vgas=
Subject key identifier:   6C:D2:8E:A7:A9:48:C0:5D:21:F5:35:B5:BD:F9:77:A7:F6:40:01:0E
Certificate issuer:       /CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
Certificate serial:       0D1566
Authority key identifier: D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3d26945ab2b85790290a59be02958f6efea8cc34.roa
Signing time:             Wed 24 Mar 2021 14:34:09 +0000
ROA not before:           Wed 24 Mar 2021 14:34:09 +0000
ROA not after:            Tue 24 Mar 2026 14:34:09 +0000
asID:                     64112
IP address blocks:        2801:14:9000:6::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857446 (0xd1566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81aa2de9d81221fefa524fd694489ce8b67c8d4
        Validity
            Not Before: Mar 24 14:34:09 2021 GMT
            Not After : Mar 24 14:34:09 2026 GMT
        Subject: CN=3d26945ab2b85790290a59be02958f6efea8cc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:27:25:33:fe:8e:0b:48:8e:da:bd:74:f6:
                    1a:1e:f6:70:62:44:27:f6:c0:a3:e1:d0:12:32:30:
                    00:f1:b4:93:ad:2f:ec:94:8e:3f:66:78:5e:c2:14:
                    60:85:69:c2:8c:91:8e:9a:6b:61:32:ac:69:24:28:
                    35:e5:c8:f6:f9:0b:21:51:74:28:6d:63:26:89:68:
                    6b:95:9c:8a:56:f9:72:d6:71:99:70:37:d2:d9:be:
                    f9:4a:1b:ca:2e:43:4a:15:03:b7:94:31:0f:1f:2b:
                    6d:8d:80:f5:9c:d4:80:1c:d1:78:12:69:0f:fe:eb:
                    73:ff:0a:91:65:fe:62:28:fb:a4:16:e5:19:b6:d0:
                    e5:3d:fb:a1:15:4d:f5:50:b6:d1:a7:f2:3b:9b:88:
                    e5:70:43:f4:fd:5b:74:0e:b3:5e:3c:7a:4b:7e:5a:
                    94:e4:36:c8:5c:dd:d6:50:26:25:21:22:02:2b:be:
                    97:12:1d:8f:de:ee:a2:32:66:1c:29:d5:74:bd:09:
                    c5:a5:3c:33:30:ad:81:0b:f4:0b:c9:5f:45:66:94:
                    c3:cb:24:db:4e:d1:80:20:54:cc:aa:c6:ce:20:40:
                    63:cf:20:d5:82:8f:64:c1:fb:9a:2e:30:1a:d5:79:
                    0e:f4:da:2f:96:0b:74:14:e7:21:95:b6:ba:22:a0:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:8E:A7:A9:48:C0:5D:21:F5:35:B5:BD:F9:77:A7:F6:40:01:0E
            X509v3 Authority Key Identifier:
                keyid:D0:F4:CA:20:7D:B5:AD:52:AD:D4:E4:88:01:CE:DE:C3:02:62:98:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f81aa2de9d81221fefa524fd694489ce8b67c8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/3d26945ab2b85790290a59be02958f6efea8cc34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be0debb6-bda3-4828-986d-e2f12e7a5231/f81aa2de9d81221fefa524fd694489ce8b67c8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:9000:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         28:77:5e:5a:2f:de:98:96:6c:ef:87:27:a2:6e:42:61:da:38:
         1a:43:5b:91:81:28:8c:b6:84:06:be:a2:07:a3:4a:ec:7a:66:
         1d:01:72:0e:0d:f5:89:62:d1:f6:b5:bf:23:10:2a:42:da:96:
         b3:e8:61:93:b4:74:89:60:df:d7:c7:71:de:0e:42:5c:a8:1f:
         50:a0:b1:ec:80:37:6b:fd:37:75:60:4d:6a:28:bb:45:d7:16:
         d7:e7:fe:b6:4d:92:32:f4:47:fc:6b:03:b8:2c:2a:55:46:2b:
         a2:8a:cc:39:5a:48:06:97:53:6a:ce:a9:29:7d:f0:78:44:b6:
         f1:79:55:46:ef:de:5e:35:00:6f:8b:99:70:3c:b5:cd:0a:5b:
         6f:bd:db:92:29:48:d8:8d:3f:cc:c2:29:c3:15:51:1a:6d:e6:
         db:b4:76:1d:86:eb:f6:19:d2:2a:3e:22:09:a3:11:10:58:82:
         50:70:10:26:cc:dc:5c:4b:2b:0d:a1:a9:c7:d3:41:13:68:56:
         99:6b:3e:1e:62:0f:a1:76:0b:b5:fb:01:9e:59:29:ff:27:da:
         b9:a6:bc:6d:f2:a3:02:b4:1a:20:a9:60:02:ea:68:65:90:a3:
         01:e4:e6:2f:26:60:08:18:49:a2:11:cb:6d:9b:79:b2:3a:3a:
         be:fa:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----