Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0dc2e3413a7146f252056968333d812a5184c043.roa
File:                     0dc2e3413a7146f252056968333d812a5184c043.roa (raw, json)
Hash identifier:          UPYcybofY1+Axxj3adY7AhzP6SpBnOX7VP+gKi0aY2g=
Subject key identifier:   62:AA:25:0C:E4:F6:1A:B8:BA:5A:DA:7E:B7:6F:17:10:47:67:96:90
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DF0FC
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0dc2e3413a7146f252056968333d812a5184c043.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4004::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913660 (0xdf0fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=0dc2e3413a7146f252056968333d812a5184c043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:cc:22:7c:bf:14:c5:2c:5a:9e:be:bf:ed:
                    5a:cf:ff:e2:c0:28:48:4e:1f:b9:57:64:85:ac:9a:
                    b6:ce:02:25:a2:ac:68:ab:d0:07:91:51:27:f8:ea:
                    9b:73:0e:03:35:50:ae:11:13:6f:ee:4c:ee:83:f0:
                    59:1e:62:5e:2a:12:37:28:d1:40:cd:88:ef:63:b2:
                    ab:ac:1e:a5:a8:aa:58:5b:d5:cf:ff:53:10:a0:28:
                    02:7a:2c:70:8e:97:bc:04:52:ee:08:37:50:a6:d0:
                    c6:47:fd:27:d2:34:c3:f0:79:c5:af:96:2f:fd:a9:
                    ca:ca:d8:47:37:b6:f9:e0:b2:7e:40:11:ec:c6:2e:
                    b9:39:35:93:fa:46:b9:51:0c:28:25:a6:f2:e4:f6:
                    91:2e:6a:f5:e7:36:03:d6:31:ef:e6:1e:d7:18:0b:
                    a8:a4:d1:bd:f1:3a:be:64:8d:b4:40:aa:d5:53:07:
                    ae:08:19:d7:0b:e8:df:62:1b:0e:34:d6:54:44:03:
                    f1:43:9c:fb:18:d6:34:4b:87:f0:71:0c:4d:f4:1d:
                    be:43:09:57:bc:c8:2f:90:68:3a:9a:bb:46:d4:e7:
                    b5:63:ff:cd:76:19:66:36:de:96:e0:1b:61:3b:1d:
                    d5:aa:bf:ce:13:5c:3f:57:ea:e2:f3:17:4f:a0:50:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AA:25:0C:E4:F6:1A:B8:BA:5A:DA:7E:B7:6F:17:10:47:67:96:90
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0dc2e3413a7146f252056968333d812a5184c043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4004::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:63:50:d6:07:6e:71:3e:75:22:b2:23:12:55:5b:eb:d9:80:
         46:34:b9:25:2f:42:45:ac:d3:f2:7d:67:ac:90:a5:d1:ba:60:
         1c:06:4f:0e:36:22:d0:2d:46:89:1f:88:5b:08:31:71:7d:83:
         eb:02:1b:0b:82:cc:d6:73:93:43:e4:35:71:05:be:42:77:dd:
         45:25:f4:e5:c5:14:9a:99:38:2c:38:b8:b6:48:cc:62:54:c3:
         38:5d:1e:aa:d9:ab:e8:e4:22:aa:cb:18:04:28:77:72:71:b7:
         30:20:25:f1:45:33:24:d9:82:ce:b8:c4:5a:6f:73:1b:91:41:
         f4:ed:0c:ed:a8:2b:fe:ef:f2:25:7a:c7:38:f8:01:bc:9c:05:
         fe:69:c0:94:e8:14:5a:c8:20:81:90:be:86:b8:07:65:07:ca:
         31:9d:6f:f1:80:87:2c:33:14:d5:2c:9b:c7:77:f5:fd:9f:3f:
         2e:47:08:d0:5c:26:b9:e9:6c:22:25:56:b3:97:84:5b:d7:42:
         31:65:59:48:53:2f:e1:3b:fe:6a:6f:ae:3d:74:24:6a:f4:a2:
         b0:55:37:6d:75:25:c0:84:6e:c0:b7:9c:1c:00:10:09:54:38:
         6c:e0:68:7c:87:eb:78:17:ff:cd:ab:94:5d:7a:83:f4:a8:4c:
         80:b8:07:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----