Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/f2286a8b98612c1d3a3a656d8e85ba80f396abd4.roa
File:                     f2286a8b98612c1d3a3a656d8e85ba80f396abd4.roa (raw, json)
Hash identifier:          u/ZLibIsQXe2bK//12FXToGHfdGx006ea1EciEl9du4=
Subject key identifier:   E6:7E:9E:71:DA:87:4C:30:DA:41:6C:5C:94:B9:8C:90:DD:0D:01:8F
Certificate issuer:       /CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Certificate serial:       0DD3DA
Authority key identifier: FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/f2286a8b98612c1d3a3a656d8e85ba80f396abd4.roa
Signing time:             Thu 15 Apr 2021 02:36:20 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267848
IP address blocks:        2800:be0:4e8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906202 (0xdd3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f2286a8b98612c1d3a3a656d8e85ba80f396abd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:98:ed:ec:6f:c7:9f:9f:af:6c:78:81:17:
                    f5:bf:8a:34:b4:94:fa:1a:8b:fd:a8:c4:8c:2f:0b:
                    4e:1c:e1:ce:97:e4:79:12:63:38:c9:c8:bc:ef:94:
                    f5:81:88:20:49:57:fc:07:a5:f5:59:09:57:4f:7e:
                    ae:e6:bd:ea:c3:99:cd:ab:44:44:2c:5c:86:2e:49:
                    0a:4f:c1:f4:c7:7a:f9:1f:6c:57:d5:c0:1f:82:e8:
                    f1:28:d2:45:68:5e:a0:17:cc:30:91:5a:a8:c0:80:
                    7b:7b:c2:46:3b:09:26:44:d9:d6:e0:52:af:45:c7:
                    0e:fb:e1:40:c8:32:14:40:e2:98:50:f3:92:df:b0:
                    eb:70:9f:45:dc:79:0e:d7:d5:9e:55:f4:56:78:da:
                    a2:f0:7e:b9:0b:1a:5a:06:9a:db:ad:21:ec:76:20:
                    cf:1d:c5:15:49:da:3a:d1:03:f6:75:65:5f:a5:cc:
                    09:8c:a6:ea:2f:03:93:0a:c0:ca:e5:cd:98:b9:04:
                    4a:fb:b3:2d:bc:5e:38:64:f6:d0:6f:96:ca:39:7f:
                    ee:73:6e:b3:98:57:0a:5e:48:77:e9:a7:08:52:38:
                    8f:ce:58:5d:a8:ee:74:1e:45:4c:d0:06:f1:26:d7:
                    b3:c2:26:c1:f2:f5:f1:94:05:6c:b6:e8:f1:f9:39:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7E:9E:71:DA:87:4C:30:DA:41:6C:5C:94:B9:8C:90:DD:0D:01:8F
            X509v3 Authority Key Identifier:
                keyid:FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/f2286a8b98612c1d3a3a656d8e85ba80f396abd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:19:40:02:62:f1:4d:5b:e0:52:4a:50:3e:e8:9c:7a:46:9b:
         ee:5c:1d:7c:13:d5:e3:37:6a:45:03:8b:2f:6b:c5:1b:fb:e9:
         4a:f6:54:92:8d:e8:25:d3:40:50:f0:94:3a:12:91:49:59:e2:
         56:f7:1a:a5:3b:59:24:1c:90:ba:0a:d8:99:7c:e1:88:13:29:
         e4:58:54:57:1f:0a:ec:4d:ad:0e:5f:2c:21:b2:97:ed:05:b6:
         a8:79:44:1a:c3:1b:b9:cc:46:c7:3f:92:2b:52:7c:ed:65:04:
         5c:11:05:d5:e6:cc:86:d8:72:52:44:8d:8d:de:5b:0e:a2:e4:
         95:a1:40:7a:00:29:a3:81:ee:a7:5b:c8:ce:eb:d0:cf:08:0b:
         10:3e:26:d5:62:0b:86:e0:cc:a1:19:5a:ce:35:aa:ca:00:8d:
         11:65:cb:55:9d:0c:38:e1:b0:8d:c2:01:fc:5a:f9:2f:35:b8:
         13:50:97:f4:21:a8:c9:3f:a0:b3:3d:c1:d2:c8:77:62:37:db:
         87:50:20:f3:fe:67:fc:6d:e3:2d:4c:00:ae:ec:9c:b8:2a:60:
         df:4f:44:e1:cc:11:dd:c0:f5:19:19:3e:1d:a9:db:3f:01:9d:
         7a:5d:2b:cd:c6:c8:8f:7a:c0:40:5e:88:db:69:e7:73:d7:d9:
         d9:53:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----