Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/4811c6c6fa37844129ba6a7c780b51530bedb034.roa
File:                     4811c6c6fa37844129ba6a7c780b51530bedb034.roa (raw, json)
Hash identifier:          QwCkvx3a0iibm07i/pZMP1GDHujwBbet73luwaCVR8g=
Subject key identifier:   8B:F4:C1:AB:5C:E4:B9:D6:87:64:67:D4:79:18:2C:1C:C7:BE:6E:5E
Certificate issuer:       /CN=5a2d02496b31d1521c53287dfedd888ca51de7ca
Certificate serial:       029F0C
Authority key identifier: F6:9A:6E:B3:C3:0B:2C:68:DC:F4:DE:88:4F:5C:4A:3E:67:90:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a2d02496b31d1521c53287dfedd888ca51de7ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/4811c6c6fa37844129ba6a7c780b51530bedb034.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:59 +0000
ROA not after:            Tue 24 Mar 2026 14:34:59 +0000
asID:                     13489
IP address blocks:        2801:1a:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171788 (0x29f0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a2d02496b31d1521c53287dfedd888ca51de7ca
        Validity
            Not Before: Mar 24 14:34:59 2021 GMT
            Not After : Mar 24 14:34:59 2026 GMT
        Subject: CN=4811c6c6fa37844129ba6a7c780b51530bedb034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:0f:2d:57:7e:75:67:a3:ce:62:fa:f0:d7:
                    b9:f3:bf:04:7d:d4:b5:b6:d0:ad:03:ed:55:46:1d:
                    68:38:2f:44:4e:6c:ea:3a:5d:3f:6d:31:78:e5:19:
                    69:25:cf:17:db:3c:ba:80:b7:c7:2e:1c:de:de:0d:
                    11:47:60:e2:ab:96:2b:1f:74:6e:cc:57:b9:ed:4a:
                    d5:d6:a8:9d:ee:9e:49:94:96:e7:fc:40:63:e2:fc:
                    91:29:9f:57:84:f8:3e:6a:54:d5:b6:ee:3e:58:79:
                    82:06:c1:5e:ad:a6:68:ad:d1:92:9f:5a:12:8a:fb:
                    c6:d2:b3:2b:26:dd:b5:48:e0:9e:e7:3e:b3:1f:b1:
                    7b:85:16:39:e3:d4:cc:6a:ef:6b:dd:d2:36:be:cf:
                    7b:c0:4c:bf:e9:18:b8:6f:4a:0d:ee:fc:b2:fc:4c:
                    f9:43:4e:83:87:4e:05:fe:5a:f1:b4:27:70:df:38:
                    5e:c7:31:67:46:6f:ba:da:71:a4:c1:5f:42:ed:09:
                    91:10:d3:1c:b3:9f:4f:a7:8b:62:01:c8:ed:da:94:
                    6b:a8:05:b3:63:42:c8:48:a7:49:48:78:7b:8b:81:
                    7d:8f:05:4b:c5:bb:5d:18:c9:2d:61:12:77:46:b9:
                    5e:46:e9:c4:91:82:5e:eb:8b:62:1b:c8:5f:04:51:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:C1:AB:5C:E4:B9:D6:87:64:67:D4:79:18:2C:1C:C7:BE:6E:5E
            X509v3 Authority Key Identifier:
                keyid:F6:9A:6E:B3:C3:0B:2C:68:DC:F4:DE:88:4F:5C:4A:3E:67:90:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a2d02496b31d1521c53287dfedd888ca51de7ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/4811c6c6fa37844129ba6a7c780b51530bedb034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2c1755e-c015-4700-ace8-87da709a9976/5a2d02496b31d1521c53287dfedd888ca51de7ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:63:20:32:e8:a7:cb:ae:fd:bb:56:3e:1a:18:65:e8:e9:
         5d:6e:22:1b:01:19:f0:f2:a9:4b:33:99:3e:5c:26:6d:0f:6e:
         6d:db:5c:95:5f:b3:b9:02:bd:72:3a:1f:85:af:f4:82:7c:f3:
         cf:b7:01:5f:8d:5e:3d:52:6a:35:6d:3e:1f:d3:22:5a:89:d4:
         7a:77:90:bd:04:e4:11:18:29:27:ad:69:ff:43:b1:b7:53:77:
         c9:8a:f0:58:5b:a4:75:e5:6b:b2:70:43:40:96:46:f1:09:a9:
         1a:32:7f:43:e4:23:6e:2a:e6:dd:41:2e:bf:83:f5:88:56:0d:
         db:67:1d:f5:4a:4d:e3:cb:56:48:77:34:15:86:72:96:81:70:
         dd:05:b8:52:36:18:2b:e6:56:22:b8:b9:55:66:8a:1c:99:bc:
         d6:4d:d8:ed:5c:46:01:1d:3f:14:4c:ca:2d:9e:55:6b:bc:ad:
         2d:a9:11:5d:2c:a3:4d:2d:f5:86:8d:40:f8:55:5a:12:9f:74:
         fb:64:1f:71:d6:14:31:7a:50:8d:fb:07:a9:03:8c:95:63:9e:
         e4:eb:b1:f2:9a:06:e5:21:8b:49:bc:15:5b:34:37:4c:af:73:
         ea:e3:a8:58:8e:05:a9:3b:d0:9c:eb:0d:83:f1:31:e2:99:63:
         05:02:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----