Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0975011966dc0bd5366975e2f2271e2b061efc74.roa
File:                     0975011966dc0bd5366975e2f2271e2b061efc74.roa (raw, json)
Hash identifier:          WcGLsPJdpo0Vpa3KagTpCWpRDDl8u8UMuRQuWFFKAnQ=
Subject key identifier:   E1:E0:48:73:49:5B:8E:DF:DC:01:61:F9:C5:3E:72:79:A8:38:9F:DE
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E0D15
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0975011966dc0bd5366975e2f2271e2b061efc74.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:404a::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920853 (0xe0d15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=0975011966dc0bd5366975e2f2271e2b061efc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:04:64:58:16:16:9a:75:ae:2e:06:ee:eb:c8:
                    d4:77:66:d0:9b:e4:b6:34:82:bc:fb:a7:65:8a:ad:
                    9f:9c:dc:0d:a7:d1:98:18:c8:8e:2f:f1:fd:21:cc:
                    3c:81:3b:8e:9a:e6:35:06:96:9e:40:07:42:15:82:
                    2d:d9:86:e5:9e:95:ad:f3:e2:85:7b:83:9e:a3:44:
                    b8:84:a9:66:f9:4c:7d:c5:dc:82:86:e6:6b:52:6f:
                    d3:fd:03:85:72:b5:41:c6:f2:2d:58:49:c7:51:69:
                    3c:4e:70:f9:5f:28:50:f8:6c:ee:f1:d6:76:58:d8:
                    b8:06:b6:8c:ef:55:37:bc:ea:d2:97:59:cf:7b:a2:
                    ee:54:1e:2a:55:fa:ca:05:ec:a7:72:a2:38:d6:87:
                    87:21:1b:e3:71:63:f6:07:00:52:a5:bf:73:8f:1c:
                    b7:da:e7:84:fa:e3:06:ff:20:7f:fc:11:5c:03:1d:
                    27:af:4f:f3:d6:92:98:49:e8:fd:e4:74:84:8c:0a:
                    04:a4:ef:cf:a5:46:24:bd:38:a6:43:5d:ea:e4:81:
                    e7:a7:62:bf:e4:79:c5:4f:96:2e:3d:85:fc:43:9f:
                    75:88:49:e7:cb:b1:e8:31:15:85:9c:55:29:16:f5:
                    13:3e:01:40:88:54:72:89:ad:cd:d7:ce:13:ff:0f:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:48:73:49:5B:8E:DF:DC:01:61:F9:C5:3E:72:79:A8:38:9F:DE
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0975011966dc0bd5366975e2f2271e2b061efc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:404a::/47

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:99:44:01:4e:07:c6:2d:11:b5:9f:d8:dd:db:08:ce:d2:
         b1:ba:03:b4:45:1f:56:54:f2:2d:56:3e:fe:1b:4d:fd:2d:51:
         69:7a:67:f6:2f:d1:92:07:a4:45:88:89:0a:5c:c8:c9:a6:68:
         17:39:3b:b4:74:f5:66:60:d5:38:57:1d:21:3f:15:75:9a:5d:
         bb:59:9c:93:da:f4:60:9f:bd:90:1d:f5:d2:64:5a:0d:ec:9f:
         2b:96:48:3e:7c:85:a5:a5:e8:be:08:cc:de:2e:e4:54:5a:77:
         fe:38:73:10:2c:b6:6a:66:ee:c4:df:b8:5d:f2:92:b1:5c:a6:
         2d:75:1f:40:98:46:75:eb:f8:3d:6f:c7:24:b6:51:e3:87:51:
         46:e3:53:13:b8:f8:37:0f:79:07:0d:02:0c:e1:fc:47:2a:57:
         94:ac:24:a1:e4:02:30:6e:f1:89:6d:6e:e4:00:aa:c8:7d:38:
         06:50:a8:a2:8a:4e:d4:58:51:a3:26:19:b8:03:a5:21:e1:b3:
         63:36:07:76:74:96:70:8e:cc:3c:36:8e:97:f0:f2:24:49:23:
         09:2b:f3:68:cc:ac:67:89:87:d5:6c:e2:30:6c:34:96:2e:05:
         65:ea:f5:1f:6d:cb:df:a1:cd:b5:d7:2f:1e:40:21:a7:af:36:
         e4:48:69:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----