Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/edee5451062f88cb41626178dad8dc0329678b4c.roa
File:                     edee5451062f88cb41626178dad8dc0329678b4c.roa (raw, json)
Hash identifier:          +3eWN6rJ00l93tL4ZTDwlIr2YF8dXHD0TZq7LGS81z8=
Subject key identifier:   8C:91:D1:4B:CE:D8:FF:59:22:7A:CC:1F:93:C0:39:F5:13:DD:1F:96
Certificate issuer:       /CN=7db044f18ec6db172c49aa346f3a11d1fedc19fc
Certificate serial:       134955
Authority key identifier: 61:97:7C:68:FA:B0:B6:96:7A:65:24:9C:8C:AD:EE:5F:A4:79:34:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7db044f18ec6db172c49aa346f3a11d1fedc19fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/edee5451062f88cb41626178dad8dc0329678b4c.roa
Signing time:             Mon 25 Apr 2022 14:11:57 +0000
ROA not before:           Mon 25 Apr 2022 03:00:00 +0000
ROA not after:            Thu 25 Apr 2024 03:00:00 +0000
asID:                     18747
IP address blocks:        2801:1aa::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263957 (0x134955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db044f18ec6db172c49aa346f3a11d1fedc19fc
        Validity
            Not Before: Apr 25 03:00:00 2022 GMT
            Not After : Apr 25 03:00:00 2024 GMT
        Subject: CN=edee5451062f88cb41626178dad8dc0329678b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:01:f9:5a:86:27:ce:d0:2b:77:29:39:e1:
                    9c:71:9b:48:80:2c:af:c9:b0:34:94:e8:02:4f:e3:
                    37:d6:41:bf:24:39:cb:c6:c2:70:cc:bd:b0:d6:de:
                    a8:0c:0f:f6:d5:9d:56:da:46:27:56:47:d8:92:81:
                    d9:92:d6:e3:60:8e:7d:00:e0:0d:ee:88:77:22:b4:
                    0e:95:74:38:0c:62:6d:48:7b:03:7d:ae:3e:39:d5:
                    34:9d:e0:3a:32:1e:b3:e4:2b:c7:23:d9:78:6f:aa:
                    82:e5:25:ae:d4:30:17:aa:71:7c:07:ed:0a:ec:a3:
                    c6:76:8f:8f:14:dd:61:44:6d:76:bf:12:1a:a2:b2:
                    13:27:3d:07:6a:87:f1:b4:98:81:ff:18:9a:ec:08:
                    cf:de:29:be:39:0a:5d:4c:72:a1:0c:05:e7:dd:b1:
                    98:38:ab:b8:d6:24:4f:3a:c6:03:c0:b4:73:4d:13:
                    b2:9f:ce:f8:09:63:2d:da:15:ed:d6:88:c3:7c:0c:
                    2b:15:9a:34:6d:24:bb:0a:55:cf:8e:47:da:81:6d:
                    47:c9:25:2e:4d:fd:95:6b:5b:53:09:bf:b7:35:7e:
                    8f:4d:41:d5:92:4b:21:b4:d5:54:58:58:00:62:81:
                    2d:81:1d:7d:0f:a7:7d:9c:cf:42:a4:62:b3:08:95:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:D1:4B:CE:D8:FF:59:22:7A:CC:1F:93:C0:39:F5:13:DD:1F:96
            X509v3 Authority Key Identifier:
                keyid:61:97:7C:68:FA:B0:B6:96:7A:65:24:9C:8C:AD:EE:5F:A4:79:34:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7db044f18ec6db172c49aa346f3a11d1fedc19fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/edee5451062f88cb41626178dad8dc0329678b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db06222b-ab13-47a4-9055-54e3a924ed0b/7db044f18ec6db172c49aa346f3a11d1fedc19fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1aa::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:55:72:45:0e:0f:50:ac:3c:8d:6a:da:b8:29:46:79:e3:
         fd:d6:d2:3a:b9:eb:6a:27:4d:34:25:60:f0:e4:04:86:14:3f:
         97:a9:dc:aa:3e:44:10:8d:08:a6:0a:49:03:f1:57:e7:8c:5c:
         ab:76:97:a9:64:85:29:60:61:42:0d:68:a1:8a:0d:49:be:ab:
         24:fe:9d:1c:a8:14:74:c3:4a:d4:f8:1e:c7:e5:d8:6b:a3:57:
         85:a7:a9:1a:c4:ff:87:9f:d0:83:b0:ab:91:47:37:24:f4:db:
         66:41:39:84:81:68:b3:fe:48:b0:9d:3b:a4:59:87:b1:ef:b0:
         2b:1e:99:1e:0e:84:0e:21:ca:8a:bd:83:81:07:7c:1d:35:2d:
         59:94:f7:79:b9:2c:d0:f3:a5:ec:e8:e4:3b:49:a9:97:d0:3f:
         df:7b:95:7b:bf:e0:41:98:4c:50:eb:67:9c:c0:9a:f4:4c:65:
         da:ad:fd:28:ba:39:65:22:b7:e8:86:ae:56:cd:1a:dd:e9:fd:
         a6:e1:9d:12:5e:c3:5d:8f:94:aa:54:02:f9:0a:09:63:32:56:
         1c:32:9c:29:19:cd:4e:27:6c:c8:68:10:54:5e:f7:ea:72:5b:
         72:55:80:25:65:76:82:1b:2a:6c:1f:80:7b:e6:75:64:92:fc:
         b5:bd:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----