Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/9941e1581fb067c6cfc3f013d926dc05048f781c.roa
File:                     9941e1581fb067c6cfc3f013d926dc05048f781c.roa (raw, json)
Hash identifier:          zMq5wNW5s4J7t4NxnB9u1XKb+tFo5YWOWk2NzdQtGMs=
Subject key identifier:   FA:45:AA:C9:F4:3A:C0:FA:B6:14:03:51:E8:49:E1:FD:22:30:75:3A
Certificate issuer:       /CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
Certificate serial:       0D89AA
Authority key identifier: AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/9941e1581fb067c6cfc3f013d926dc05048f781c.roa
Signing time:             Wed 24 Mar 2021 14:40:36 +0000
ROA not before:           Wed 24 Mar 2021 14:40:36 +0000
ROA not after:            Tue 24 Mar 2026 14:40:36 +0000
asID:                     14522
IP address blocks:        2800:9a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887210 (0xd89aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82de3982dc3fe10698e2213ddec20b8ab75df7bf
        Validity
            Not Before: Mar 24 14:40:36 2021 GMT
            Not After : Mar 24 14:40:36 2026 GMT
        Subject: CN=9941e1581fb067c6cfc3f013d926dc05048f781c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:79:9f:b5:82:52:41:11:e4:5c:e0:e4:53:
                    15:15:bf:c7:e1:7a:0c:c4:b8:68:6a:f6:f7:f7:01:
                    88:b2:5b:a8:a0:94:61:ac:92:30:e5:73:21:22:17:
                    43:ed:64:19:d0:2b:91:35:b1:93:5c:22:d8:fe:63:
                    2d:34:87:de:36:14:76:b5:1f:fe:bb:cb:e9:9f:89:
                    b9:81:ee:0c:bb:e5:e3:16:50:c6:69:99:9a:8c:07:
                    ae:47:89:fc:ac:05:80:27:0c:01:96:b5:42:4d:d2:
                    1b:64:72:d5:2b:a8:80:de:fc:dd:06:c0:1e:9e:49:
                    d7:4c:b3:cc:55:d7:d7:af:d0:47:e7:2b:6f:e5:f6:
                    c8:d1:c9:18:51:84:51:85:78:22:c7:ee:2b:b2:e6:
                    0e:2e:c4:55:86:ec:4d:09:12:07:b3:cb:0f:29:ee:
                    a4:a3:80:3c:c0:ba:e2:e2:c7:f4:7c:ef:df:57:2f:
                    ee:f0:06:51:a9:a9:c6:3d:24:f3:ba:08:fa:2c:4a:
                    aa:40:9b:b5:c2:cc:9d:f5:8b:35:36:af:80:d7:c8:
                    14:0d:9a:08:a6:51:ce:23:b4:88:6c:ef:ea:a4:f0:
                    54:32:a7:8f:89:2d:04:4b:16:b1:4d:4b:53:d7:b6:
                    04:86:7e:0a:11:25:ce:77:af:6f:c2:bc:33:66:92:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:45:AA:C9:F4:3A:C0:FA:B6:14:03:51:E8:49:E1:FD:22:30:75:3A
            X509v3 Authority Key Identifier:
                keyid:AD:2C:98:FD:25:51:E2:8A:30:65:C7:48:5B:5F:46:44:46:B9:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82de3982dc3fe10698e2213ddec20b8ab75df7bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/9941e1581fb067c6cfc3f013d926dc05048f781c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d37891fe-eea3-48a1-a501-257aaa18d4bc/82de3982dc3fe10698e2213ddec20b8ab75df7bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:39:ce:3a:93:34:96:69:ae:7a:e1:a5:a7:97:fe:1d:57:2c:
         d8:bc:7d:b5:5e:90:92:5a:9d:7a:ef:dd:99:98:84:42:25:b6:
         22:1b:11:7a:6a:e0:89:fb:24:85:71:d0:e5:37:ec:b5:61:27:
         eb:0e:9e:a9:1e:9a:7b:41:7e:f9:74:06:f2:5b:8a:1e:8b:ae:
         ef:9b:60:6a:9d:8d:2f:63:40:b9:48:37:1e:8f:28:09:5b:6d:
         e1:29:c7:9c:71:09:3f:08:b5:3f:40:17:60:fb:fa:e4:b8:c9:
         a9:50:f9:6f:3e:70:73:31:8a:fb:5d:39:c0:d2:fa:54:18:d4:
         bf:05:83:ab:d2:3e:00:c8:81:b6:30:1a:ab:b9:50:88:d4:00:
         85:0d:1f:28:04:f5:cc:ae:1d:82:90:89:9a:58:22:36:97:90:
         35:be:ce:99:6d:28:4a:81:d5:c5:66:4e:47:da:0c:5a:d9:10:
         d4:75:09:5c:43:94:0e:62:0b:c3:06:b8:ec:eb:51:01:bf:fe:
         cc:00:14:f1:41:d5:ae:a0:96:51:3d:03:c4:c9:a9:b7:92:f1:
         bc:f6:47:f9:c1:70:3a:f6:52:e3:ff:35:1a:02:95:d4:c4:a4:
         4a:89:7c:28:89:36:b9:37:1f:b1:8d:07:2b:a9:46:19:62:81:
         c4:d6:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----