Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/085653a18713073e7ad6bfec84364c80d6b67500.roa
File:                     085653a18713073e7ad6bfec84364c80d6b67500.roa (raw, json)
Hash identifier:          hRu5IHqsJLp4kHzEYLAHwNuwq7lHoorh+epcqOHG15g=
Subject key identifier:   ED:DA:FA:D1:05:29:D8:0C:05:67:D4:D7:15:CB:38:B2:1D:36:E6:C9
Certificate issuer:       /CN=71e4bab784aeb677606a6aabe1d8ca53de9167ac
Certificate serial:       08CFA6
Authority key identifier: CE:14:46:CA:A7:8D:4D:B5:E2:1E:18:91:41:4C:A1:C6:C1:77:14:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71e4bab784aeb677606a6aabe1d8ca53de9167ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/085653a18713073e7ad6bfec84364c80d6b67500.roa
Signing time:             Sat 30 Apr 2022 08:30:00 +0000
ROA not before:           Sat 30 Apr 2022 08:30:00 +0000
ROA not after:            Mon 29 Apr 2024 08:30:00 +0000
asID:                     14080
IP address blocks:        2801:13:2800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577446 (0x8cfa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e4bab784aeb677606a6aabe1d8ca53de9167ac
        Validity
            Not Before: Apr 30 08:30:00 2022 GMT
            Not After : Apr 29 08:30:00 2024 GMT
        Subject: CN=085653a18713073e7ad6bfec84364c80d6b67500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:d0:f8:aa:d9:6f:53:4d:0e:ef:92:91:33:
                    14:39:53:2f:85:ac:91:47:be:62:a6:20:df:32:b3:
                    32:93:d7:da:61:3f:51:d4:0a:c3:63:14:c5:6e:08:
                    58:5e:b0:1b:8d:87:a2:0c:b3:d7:36:c8:4f:55:bb:
                    42:b8:21:9e:03:0d:c0:06:c7:ae:ce:ca:2b:62:4c:
                    d0:ad:6c:cd:d5:f1:e3:d0:57:56:a9:9d:dc:62:7c:
                    2a:61:e5:21:bc:eb:09:4b:7d:5a:4e:80:95:0d:e7:
                    3f:50:be:c0:1b:ee:cb:a7:7f:46:53:98:d6:6a:d0:
                    4e:86:76:74:0b:ac:ac:dc:82:42:cf:4d:35:86:b0:
                    07:94:e3:08:9d:ee:a6:d8:f0:e8:ef:82:e7:4d:67:
                    a0:29:09:1e:22:d6:29:1e:cd:43:f2:0e:52:dd:b1:
                    e2:cd:7f:ca:2f:e3:8f:42:5a:24:55:9d:fd:e3:e0:
                    1e:fd:47:0c:48:1a:68:b6:3e:1b:25:12:bb:8c:c2:
                    7b:64:02:c5:e5:f0:4d:5d:a9:ce:23:32:c1:72:76:
                    f7:73:2a:e0:c3:8a:ae:59:40:af:d1:4c:f1:1b:98:
                    a1:55:ae:08:3b:ef:41:01:c5:ac:01:f1:ae:d6:01:
                    bf:28:cc:69:a3:47:bf:d6:89:81:08:d1:2e:11:5f:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DA:FA:D1:05:29:D8:0C:05:67:D4:D7:15:CB:38:B2:1D:36:E6:C9
            X509v3 Authority Key Identifier:
                keyid:CE:14:46:CA:A7:8D:4D:B5:E2:1E:18:91:41:4C:A1:C6:C1:77:14:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71e4bab784aeb677606a6aabe1d8ca53de9167ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/085653a18713073e7ad6bfec84364c80d6b67500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:cb:f4:27:b4:9e:18:7d:a6:28:9d:51:9c:c3:ee:c5:cf:
         5b:ea:4d:6c:8e:3a:19:36:6f:c9:be:27:b8:d9:00:7d:89:be:
         f9:9f:9c:2e:a8:c5:8f:4e:0a:94:21:91:86:2c:7f:1b:65:7c:
         f4:07:00:1e:ea:d7:64:30:fc:2f:80:42:a2:c2:ac:a9:0c:ce:
         76:dc:75:d2:75:d8:21:dc:68:2b:ac:f5:f2:9b:99:1d:63:dd:
         0e:2e:80:5e:58:2a:3e:22:12:60:2c:8f:fe:0a:79:de:88:0f:
         b8:fe:e2:59:25:87:0e:2a:41:d5:b4:71:07:1d:5f:2a:90:29:
         0a:ed:eb:37:8b:98:1b:7f:d8:ee:48:dd:be:b6:ef:8a:9c:57:
         53:7e:b6:b2:fc:13:43:23:a7:72:c6:9b:18:63:ed:27:40:dd:
         bf:3a:df:3c:ce:c7:f9:18:ce:82:f5:d7:6b:9b:50:10:62:0a:
         39:fa:d4:f6:63:2e:55:10:57:e3:c8:ef:9f:9b:56:79:8e:e4:
         16:f4:d3:4a:8d:46:a6:91:0b:cc:98:43:58:b0:9c:7a:a1:b4:
         dd:b3:5e:e6:d0:3e:dd:fd:f6:4e:cb:61:fd:89:02:77:9f:3d:
         8b:7b:c1:be:1a:8e:31:b6:f1:06:69:2e:99:e1:75:eb:8c:8b:
         b8:f9:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----