Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/ab9155914f1020de6b110e7294b3bda5eda5678c.roa
File:                     ab9155914f1020de6b110e7294b3bda5eda5678c.roa (raw, json)
Hash identifier:          aB+s4DR6NBLcdxNzHXwuAjnvmEZ5tzFNhbj/txZjyOs=
Subject key identifier:   33:BB:35:83:3C:FC:0C:7D:14:F2:6B:91:ED:DC:1F:70:1F:F3:B5:1E
Certificate issuer:       /CN=f7fac38e0e71569318fbf63b7f8ceb000d19d4ca
Certificate serial:       5032
Authority key identifier: 5F:7D:25:E2:D1:A1:B1:AC:9E:5F:13:A2:B9:AA:F4:3D:D1:B6:18:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/ab9155914f1020de6b110e7294b3bda5eda5678c.roa
Signing time:             Wed 24 Mar 2021 14:36:05 +0000
ROA not before:           Wed 24 Mar 2021 14:36:05 +0000
ROA not after:            Tue 24 Mar 2026 14:36:05 +0000
asID:                     13489
IP address blocks:        2801:1d6::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20530 (0x5032)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac38e0e71569318fbf63b7f8ceb000d19d4ca
        Validity
            Not Before: Mar 24 14:36:05 2021 GMT
            Not After : Mar 24 14:36:05 2026 GMT
        Subject: CN=ab9155914f1020de6b110e7294b3bda5eda5678c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:0d:23:de:bb:c6:59:9d:ee:d2:82:95:7b:
                    b2:22:a0:89:d0:ae:e2:96:a8:2e:40:11:97:ea:8a:
                    b5:c8:0d:a1:14:04:74:e3:69:30:96:ce:7b:19:e8:
                    02:c0:24:4e:d1:96:7a:75:a5:d5:33:13:16:77:e2:
                    3f:77:9b:e7:60:e4:41:b6:de:97:56:53:1a:eb:c8:
                    82:c3:7b:f3:28:f5:19:9f:27:18:5c:ed:a3:e3:18:
                    ab:26:ae:a6:f3:c1:15:2b:43:1a:da:bb:42:29:28:
                    60:25:bb:8b:e2:cd:40:32:57:48:37:f7:0e:a1:cb:
                    36:b0:39:69:71:d7:12:62:8d:51:57:97:c2:71:2c:
                    7f:ba:d7:f1:63:5b:c4:57:15:b5:1f:fd:8b:bf:fa:
                    40:11:ea:00:80:7f:67:83:e1:b4:0c:71:22:53:2b:
                    b5:83:0f:8c:5f:39:5f:52:bb:84:25:a2:7d:42:9f:
                    a7:cc:38:dd:a8:56:29:0b:58:b4:be:d8:84:a1:e0:
                    4c:63:62:e0:1e:f1:03:bd:d8:3a:39:d1:e1:5b:07:
                    8e:0a:fc:02:8f:a4:3f:20:0b:29:5e:a2:f4:3d:3d:
                    4f:41:c7:58:d7:e0:28:4c:15:47:f8:3a:65:f6:4c:
                    a8:5c:1d:6b:5d:69:70:1e:62:6a:5d:eb:fe:3a:33:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BB:35:83:3C:FC:0C:7D:14:F2:6B:91:ED:DC:1F:70:1F:F3:B5:1E
            X509v3 Authority Key Identifier:
                keyid:5F:7D:25:E2:D1:A1:B1:AC:9E:5F:13:A2:B9:AA:F4:3D:D1:B6:18:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/ab9155914f1020de6b110e7294b3bda5eda5678c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce587e5a-f401-42a4-ba03-e008cace7668/f7fac38e0e71569318fbf63b7f8ceb000d19d4ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d6::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:5c:0c:7d:0e:af:7e:53:96:b3:48:45:73:ea:2d:a1:08:
         d9:22:65:47:6e:67:17:c3:f8:64:c6:ce:e7:2d:44:ac:2f:5f:
         66:93:9d:6a:a4:dc:c5:ad:ff:fe:86:23:67:e3:b0:b0:bc:ee:
         43:96:09:d1:bd:89:56:1c:a7:95:31:17:a4:b4:47:00:e0:12:
         3a:61:5b:1f:05:83:2a:44:86:e2:cf:48:f9:84:9c:8c:a0:74:
         48:4f:b2:d4:44:c5:06:5a:16:b0:ce:c3:25:81:9b:67:c3:0b:
         26:81:39:c9:48:f7:8f:f2:05:f7:3d:1e:41:05:b2:9a:0e:d3:
         69:cc:6f:4c:c3:d0:40:cc:a0:da:b1:81:79:85:73:6e:fc:57:
         07:61:5e:49:b0:6d:2a:24:34:d1:20:9e:13:1b:97:b2:46:58:
         e3:2c:06:3a:b5:96:f8:5e:fa:33:3e:e4:c8:dc:e2:e2:7b:be:
         f1:2d:a0:dc:40:09:39:93:5e:ec:d9:c3:a3:63:2d:da:3d:59:
         89:18:a7:f6:65:53:43:c8:87:a5:dc:2b:e3:33:88:90:06:e7:
         17:59:f5:6e:b3:a5:4d:6a:fe:9c:4e:04:24:17:c1:d1:bb:68:
         a8:56:35:1f:de:da:91:42:e1:4f:cb:b0:62:2a:f6:eb:3b:52:
         6b:82:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----