Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/9dd945f5a51d45a17a3c99121cd155ee2cb358af.roa
File:                     9dd945f5a51d45a17a3c99121cd155ee2cb358af.roa (raw, json)
Hash identifier:          5Crq+TAIFvq0fiI21t4NRAeOg5iKdR+AHTN7V6ZXbLA=
Subject key identifier:   2D:E6:98:DA:F4:29:CA:8B:7A:B3:57:28:D7:B2:1F:B0:B7:B1:A5:36
Certificate issuer:       /CN=5ba8a9b59c8945a662e21cd46811ed814369fe6f
Certificate serial:       0511
Authority key identifier: 24:94:19:9B:9C:04:78:26:7C:0C:2A:E9:B8:25:56:93:AD:AD:EA:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ba8a9b59c8945a662e21cd46811ed814369fe6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/9dd945f5a51d45a17a3c99121cd155ee2cb358af.roa
Signing time:             Mon 27 Sep 2021 22:00:55 +0000
ROA not before:           Mon 27 Sep 2021 03:00:00 +0000
ROA not after:            Wed 27 Sep 2023 03:00:00 +0000
asID:                     267788
IP address blocks:        2801:15a::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba8a9b59c8945a662e21cd46811ed814369fe6f
        Validity
            Not Before: Sep 27 03:00:00 2021 GMT
            Not After : Sep 27 03:00:00 2023 GMT
        Subject: CN=9dd945f5a51d45a17a3c99121cd155ee2cb358af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:f2:ed:6f:be:ef:78:e1:d2:38:09:83:5a:
                    9c:37:0f:86:53:83:57:c3:97:cf:4a:0c:7b:b7:9d:
                    8a:2e:2f:8f:28:fb:ec:64:f1:17:fd:f6:3d:75:d0:
                    f6:fa:74:26:c4:5b:e3:f3:f0:0f:d8:38:3f:db:8a:
                    75:20:b9:3e:6a:06:bf:73:85:88:b8:07:c3:39:01:
                    a7:c2:b0:f1:8c:45:3c:c7:d7:b8:7c:a6:70:82:e8:
                    ab:6a:aa:70:31:d1:62:85:f1:af:56:4c:73:70:00:
                    b1:a4:be:d5:e2:f4:d9:70:30:9b:d3:b5:d1:3e:d1:
                    04:d2:8f:d6:df:15:fc:3b:52:9a:61:2b:3c:ca:60:
                    52:6f:2c:9c:17:12:f7:09:29:fe:fc:90:d5:64:e0:
                    57:71:ab:95:52:bb:27:24:0d:c6:34:0f:08:33:4f:
                    2f:90:d3:95:05:50:20:ba:56:4d:51:6b:83:6b:ce:
                    a6:ba:f7:82:4f:5e:b5:6c:17:fc:8f:08:ea:f7:08:
                    c6:84:5a:32:11:ec:af:f4:8b:17:e2:91:d6:23:03:
                    88:4f:3a:da:a5:67:f3:9d:ca:fd:a1:33:7e:a9:27:
                    de:2f:51:f4:a1:1e:29:62:45:8b:e7:c7:b7:03:50:
                    a6:32:5c:cf:31:80:43:a6:46:c9:18:f0:a0:e4:da:
                    ca:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E6:98:DA:F4:29:CA:8B:7A:B3:57:28:D7:B2:1F:B0:B7:B1:A5:36
            X509v3 Authority Key Identifier:
                keyid:24:94:19:9B:9C:04:78:26:7C:0C:2A:E9:B8:25:56:93:AD:AD:EA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ba8a9b59c8945a662e21cd46811ed814369fe6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/9dd945f5a51d45a17a3c99121cd155ee2cb358af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/5ba8a9b59c8945a662e21cd46811ed814369fe6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15a::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:51:2e:a4:0b:cb:3b:a1:79:a2:4c:2a:b0:04:17:57:aa:
         35:a1:6e:de:42:7f:14:5a:3f:6b:4b:69:32:ca:02:02:70:59:
         d9:f0:24:04:be:ea:fd:67:95:da:7a:e4:72:5c:76:c2:9b:ca:
         69:0a:36:fe:20:cf:61:33:b6:b8:f1:74:5a:7d:df:c5:a8:c2:
         56:56:48:c8:5c:ed:ce:96:86:c0:ed:c5:94:ff:1f:57:de:1a:
         6e:0e:e3:17:1c:82:8f:2a:57:7d:b7:a2:3b:51:d7:d4:59:60:
         5c:3a:19:67:1b:2f:eb:c9:99:f2:f7:2b:20:ff:99:69:9f:77:
         aa:1d:65:a9:d2:aa:34:31:b7:84:05:de:f9:ae:94:da:06:6e:
         17:3d:d5:c6:3b:65:25:a0:0d:4d:d3:a5:9e:cc:a3:66:66:74:
         68:4e:d1:9c:a0:0b:bb:b8:31:fd:b3:c2:d3:37:78:f3:67:b6:
         7b:f7:2e:ad:7f:18:29:45:d7:ef:46:10:6f:33:af:34:52:bc:
         72:0c:7d:ba:07:d5:93:28:c2:b2:24:96:5b:e1:cb:b2:f3:2d:
         10:59:70:28:be:b2:34:50:31:a3:fe:b3:85:20:41:68:e2:a6:
         25:39:46:0e:f8:df:27:35:ec:2b:cd:27:c2:a7:cf:e9:d4:d0:
         08:9c:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----