Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0397bb0b3c81d67e0ba1e0ed78d251627d22cc0b.roa
File:                     0397bb0b3c81d67e0ba1e0ed78d251627d22cc0b.roa (raw, json)
Hash identifier:          HpptGMCQtUHXKGlxorjoYvQpJqdE14bAAtz36INCLVI=
Subject key identifier:   D8:E5:F2:AD:24:65:DA:7E:0B:05:65:8B:71:A9:6F:64:DA:D4:4B:94
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E1380
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0397bb0b3c81d67e0ba1e0ed78d251627d22cc0b.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4056::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922496 (0xe1380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=0397bb0b3c81d67e0ba1e0ed78d251627d22cc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:0c:d4:4a:a6:67:06:64:01:f8:2e:2b:0b:
                    18:d9:d4:e3:b1:dc:c2:5c:45:d5:cd:2d:2f:05:74:
                    c9:a7:77:ce:44:bf:eb:63:71:74:31:de:2f:31:88:
                    4b:62:b4:19:0f:5c:36:3d:16:1c:5a:85:0c:57:87:
                    90:24:96:39:9e:3e:43:25:39:52:7c:c1:ae:71:87:
                    f3:f7:34:b8:58:25:b7:cd:fc:46:f1:8a:2c:1d:b2:
                    d3:7a:30:bc:23:ce:b5:97:05:83:d5:c0:43:e5:0e:
                    ad:30:45:5a:aa:e0:4a:ea:d1:9f:67:ab:9c:c6:e7:
                    d4:36:ad:1d:e8:29:4d:51:59:52:77:91:59:b2:78:
                    88:95:76:09:09:ef:8b:5b:d7:fa:7d:ab:5a:27:d1:
                    54:e1:5a:5a:52:d6:49:fa:61:99:7f:83:cf:07:20:
                    92:a0:fe:e7:57:9f:39:a5:f3:4c:2b:98:5e:29:80:
                    ed:00:26:56:74:1a:d5:d6:89:47:35:11:c0:16:7f:
                    77:b0:2a:16:90:6d:e5:f4:61:31:18:e0:6e:4d:04:
                    6c:cd:6f:1b:35:cb:7c:78:eb:75:fe:d3:2c:99:04:
                    c4:2e:39:69:25:a2:ba:e6:f5:69:bd:03:b5:84:7b:
                    c2:e7:6d:f9:0b:97:76:8d:f0:49:84:07:a5:ea:5e:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E5:F2:AD:24:65:DA:7E:0B:05:65:8B:71:A9:6F:64:DA:D4:4B:94
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0397bb0b3c81d67e0ba1e0ed78d251627d22cc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4056::/47

    Signature Algorithm: sha256WithRSAEncryption
         55:3d:14:f3:eb:d2:56:42:a4:b4:af:79:f6:1d:2f:94:c7:c6:
         ca:72:bf:0b:c2:e7:5b:f7:29:47:ca:28:d6:d4:9c:23:b7:68:
         ba:58:fd:1a:59:23:e6:4b:d6:07:db:2b:38:ba:97:96:9d:38:
         08:22:a5:39:a5:51:e8:5b:d6:3b:6a:b4:e6:be:28:b3:df:7f:
         d5:5e:70:6c:32:a5:47:38:98:0b:2a:ad:7b:c2:b3:a9:99:91:
         5b:2f:db:3c:78:c0:86:a9:c0:c9:c1:d4:12:20:36:3b:ca:e6:
         65:d2:e4:0a:3f:e8:f0:0f:13:4c:e5:fd:d1:70:9b:0a:a9:bf:
         a8:2a:a9:fa:56:ec:98:8a:d4:1e:3b:db:b2:94:1f:9d:2d:7a:
         97:5e:37:b7:03:5d:6e:5a:86:61:3d:79:9c:5a:a7:cc:84:be:
         45:af:de:67:08:39:e7:55:ef:75:4d:5e:52:66:04:91:c7:98:
         3e:2e:6d:46:37:43:c1:e9:db:59:f3:f1:9d:a2:69:76:a9:ae:
         e6:fd:5c:3c:6b:eb:e3:3f:4c:60:db:8e:4c:6a:ce:3f:90:8c:
         e9:40:ec:cf:5e:bc:ee:a0:75:f5:c9:38:7f:cd:b0:16:8f:73:
         4b:90:6f:9b:e7:4f:e1:10:9e:65:ba:73:63:61:7b:3d:a2:87:
         ad:5b:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----