Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/4b2f0718c95e2edc08a9d5b38da643fa0736cce5.roa
File:                     4b2f0718c95e2edc08a9d5b38da643fa0736cce5.roa (raw, json)
Hash identifier:          ueW6BIoFQ47Gt8u0O5Ud6583a+fmveU6NZZOtudpSm8=
Subject key identifier:   29:BE:AE:B2:F4:BC:FD:12:FC:3F:17:61:43:35:AD:95:C7:3C:9C:B7
Certificate issuer:       /CN=af916a8098c48f9f0fefd791512ee124a99ce09d
Certificate serial:       0487
Authority key identifier: 72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/4b2f0718c95e2edc08a9d5b38da643fa0736cce5.roa
Signing time:             Tue 10 Aug 2021 16:51:50 +0000
ROA not before:           Tue 10 Aug 2021 03:00:00 +0000
ROA not after:            Thu 10 Aug 2023 03:00:00 +0000
asID:                     20191
IP address blocks:        2800:1b0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af916a8098c48f9f0fefd791512ee124a99ce09d
        Validity
            Not Before: Aug 10 03:00:00 2021 GMT
            Not After : Aug 10 03:00:00 2023 GMT
        Subject: CN=4b2f0718c95e2edc08a9d5b38da643fa0736cce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:d0:01:4e:71:cb:ff:ba:2a:23:c9:79:00:
                    f0:93:8a:0e:cf:58:c3:6e:8e:fb:9c:6e:17:3c:08:
                    c4:86:da:54:e6:56:d9:2d:46:06:7d:e9:45:58:be:
                    af:0f:09:ab:4a:80:dd:ca:85:a2:0a:7a:2d:c3:06:
                    45:5f:38:59:0b:57:72:8c:9c:39:7e:da:5c:08:6a:
                    27:2f:3e:a7:83:28:e6:cd:f0:8b:71:36:ba:66:3f:
                    39:a8:cf:3d:58:67:a2:b8:73:9d:bb:53:5f:1f:b6:
                    90:60:f8:1b:6e:37:1f:8a:35:a5:de:1c:67:73:ed:
                    f7:0c:53:7a:ff:a7:1a:90:1b:8e:b2:3f:67:9b:9c:
                    11:05:be:bb:9f:9e:11:11:77:d3:a2:c3:1c:01:da:
                    4d:59:8b:b9:84:2a:b0:93:c3:8c:08:1b:6e:0c:5a:
                    96:8d:b8:7f:f9:6d:f6:6f:29:a3:39:22:89:ba:56:
                    d8:dc:3e:16:b1:ae:99:d8:d7:24:40:60:ad:4d:9e:
                    6d:ef:82:84:18:fb:22:40:26:c1:98:1f:47:fb:9d:
                    ad:dd:12:10:32:0e:16:77:d0:c6:6e:30:49:c3:19:
                    13:ba:97:c5:9f:ae:49:1f:fb:ef:20:b8:c1:55:f6:
                    3e:fd:90:78:ed:d2:c5:93:c5:a3:fd:31:d0:1f:59:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BE:AE:B2:F4:BC:FD:12:FC:3F:17:61:43:35:AD:95:C7:3C:9C:B7
            X509v3 Authority Key Identifier:
                keyid:72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/4b2f0718c95e2edc08a9d5b38da643fa0736cce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:92:2c:a8:fa:1a:1b:ef:1b:80:f4:a1:c7:0f:46:be:6e:6e:
         a6:a1:33:70:fc:93:9b:a7:64:66:08:01:67:4a:cd:30:22:e2:
         af:bf:6a:42:b2:e3:41:03:23:1b:71:ad:d8:93:09:1f:13:8a:
         75:0e:68:c2:fa:c8:43:9f:d8:83:77:3c:e7:9a:f6:fa:61:a0:
         bd:b8:81:c5:ee:5c:66:96:6d:98:9f:4f:57:75:aa:f1:a3:c5:
         f4:f3:22:aa:48:de:80:36:d9:c0:c4:9e:3b:b7:28:ce:52:fe:
         c9:81:74:b0:58:67:35:ce:4a:5b:d7:51:35:d1:fa:d1:8b:0b:
         3f:91:0f:99:16:49:be:32:b6:78:1b:b2:f5:f7:b8:be:fa:04:
         c5:3a:b3:d3:fd:cb:33:83:bc:32:90:f2:47:6c:22:a3:92:f9:
         a8:86:33:b5:cc:df:8c:ed:1e:23:40:c7:85:e4:a5:80:6a:ca:
         22:91:e6:68:9f:cd:ec:0e:6a:f4:d8:fd:fb:dd:9c:95:53:f3:
         b3:5c:f8:04:c6:0d:7e:7a:32:77:55:ad:16:33:07:06:7b:82:
         03:7b:a9:0c:4c:93:59:2e:ff:6f:22:04:f8:b9:04:db:9f:f7:
         43:52:a6:88:4f:84:23:b8:bf:0f:9d:85:08:27:38:4c:25:e0:
         3c:09:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----