Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/ced17888df15759cb9cb458dd6b16487f5f22bc4.roa
File:                     ced17888df15759cb9cb458dd6b16487f5f22bc4.roa (raw, json)
Hash identifier:          Xdu4JMqj7ukUwpsohb5hbjlholt47XksGjKvpo974Hw=
Subject key identifier:   0E:D9:DD:77:51:B7:57:73:68:09:6B:25:C1:E2:FE:75:0E:2D:50:38
Certificate issuer:       /CN=348e4be7878a9fdd1d422e44bc7ce5502f14ee61
Certificate serial:       0A6A22
Authority key identifier: 5E:B8:96:D1:B9:D4:1F:A0:87:37:5A:FB:2D:E6:96:48:C4:45:F9:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/348e4be7878a9fdd1d422e44bc7ce5502f14ee61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/ced17888df15759cb9cb458dd6b16487f5f22bc4.roa
Signing time:             Wed 24 Mar 2021 14:35:03 +0000
ROA not before:           Wed 24 Mar 2021 14:35:03 +0000
ROA not after:            Tue 24 Mar 2026 14:35:03 +0000
asID:                     27951
IP address blocks:        2801:172:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682530 (0xa6a22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348e4be7878a9fdd1d422e44bc7ce5502f14ee61
        Validity
            Not Before: Mar 24 14:35:03 2021 GMT
            Not After : Mar 24 14:35:03 2026 GMT
        Subject: CN=ced17888df15759cb9cb458dd6b16487f5f22bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:36:dc:15:36:86:9c:57:db:aa:25:b4:b3:
                    c2:09:d7:92:71:dc:ed:43:10:eb:f9:70:7f:d6:e0:
                    f0:d2:65:42:7b:96:a7:37:1c:3f:fc:73:e2:05:52:
                    a1:5a:e6:79:50:60:25:83:8d:a2:f9:be:3e:47:cc:
                    10:3f:48:d5:ac:78:63:82:7d:2a:86:0e:2b:d0:f3:
                    85:c2:80:a3:e5:62:a4:31:5c:8d:71:52:71:7f:85:
                    4d:18:63:b5:91:f8:84:0c:53:91:df:ae:d7:95:78:
                    e7:1f:17:79:0a:81:9f:76:13:68:7b:dc:b5:56:23:
                    ae:f3:d8:40:92:c1:32:c6:77:b9:b3:31:90:29:10:
                    c7:03:58:70:38:ee:8c:a9:a2:c2:05:9c:f3:de:70:
                    d1:a5:55:6a:89:e8:de:82:9f:78:4b:bf:8a:2d:c4:
                    ab:36:4f:ad:de:d6:04:42:ab:84:28:0c:34:e4:8c:
                    95:5a:e8:fb:63:ee:e8:5d:fa:fd:56:71:70:06:60:
                    5c:ad:80:3a:aa:46:58:3e:b6:ed:1d:e8:d3:83:67:
                    82:69:40:cc:cf:97:39:79:c0:a7:ba:b5:d7:6b:7c:
                    e1:8c:d0:63:9f:97:e1:75:88:7c:ac:9d:b5:fb:a1:
                    ff:b8:de:e8:b3:f5:15:84:6e:9b:7b:00:df:6d:c2:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:DD:77:51:B7:57:73:68:09:6B:25:C1:E2:FE:75:0E:2D:50:38
            X509v3 Authority Key Identifier:
                keyid:5E:B8:96:D1:B9:D4:1F:A0:87:37:5A:FB:2D:E6:96:48:C4:45:F9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/348e4be7878a9fdd1d422e44bc7ce5502f14ee61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/ced17888df15759cb9cb458dd6b16487f5f22bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c66a21f5-0086-45de-a933-1b8a80eda119/348e4be7878a9fdd1d422e44bc7ce5502f14ee61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:172:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:23:fc:5f:b1:fc:ac:85:cc:65:b3:a2:da:12:5c:50:db:0d:
         8d:dd:08:b1:dc:69:25:5a:1b:77:b4:5b:46:d4:4a:d6:e3:9f:
         da:4b:3b:bd:c1:76:f1:c9:a3:c6:83:0f:c5:10:73:be:28:b3:
         39:aa:6e:22:f2:1d:79:2c:59:dd:5b:3e:a1:9f:c8:96:14:5a:
         69:19:d9:ee:33:c4:7a:b9:67:9e:22:71:d2:68:8f:22:b7:db:
         8c:95:3b:ed:7e:fa:cc:13:ae:05:7d:69:53:41:91:5d:60:ce:
         32:80:a9:16:28:2b:ae:f4:3c:b4:63:3b:a0:5d:46:8b:8d:16:
         35:4a:86:07:38:56:e9:c5:fc:69:35:57:d8:27:41:76:18:90:
         36:82:5a:0d:a4:77:22:67:3b:ad:ed:1e:35:b5:eb:34:36:2d:
         e6:58:fa:df:09:80:d1:71:45:46:4d:87:7a:e4:93:41:7c:72:
         9b:16:2c:db:f7:6e:5a:16:99:59:e8:23:53:82:a1:d6:a7:1d:
         47:26:d6:cf:1f:07:a1:fc:9c:0d:6f:c1:6b:87:08:34:8e:18:
         a6:b0:2a:0b:ca:5c:ee:b0:ee:fc:10:42:61:30:0c:b8:c7:e4:
         82:97:2f:a3:0b:be:91:36:5b:57:f9:eb:65:4e:b3:61:e9:c5:
         5e:b8:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----