Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0f9c101b8b61bab633c5b77e67b68e508c203515.roa
File:                     0f9c101b8b61bab633c5b77e67b68e508c203515.roa (raw, json)
Hash identifier:          9vIATBb8oEMuQJ4cq4shDFI7ONmNUBXWJEUGPO8FbVY=
Subject key identifier:   BB:96:D3:38:82:1C:34:3C:50:EA:97:A7:5D:41:06:C1:6F:AD:26:A7
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DDC86
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0f9c101b8b61bab633c5b77e67b68e508c203515.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:405c::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908422 (0xddc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=0f9c101b8b61bab633c5b77e67b68e508c203515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:2b:27:e7:a6:88:73:39:cc:0a:47:56:2c:
                    c9:40:b5:04:90:4c:f4:00:67:51:20:94:72:04:9b:
                    08:83:67:4b:12:bb:55:4b:aa:1b:d8:b6:f5:da:55:
                    94:40:7c:15:b9:10:2b:e2:06:70:c4:b3:45:a9:f2:
                    65:eb:e7:e1:df:cc:ce:d1:10:0d:2d:64:24:85:9b:
                    f0:29:de:f6:d8:ec:07:5c:8a:05:8d:3a:50:9a:4a:
                    64:0b:fc:76:3d:7f:ac:32:65:5d:f1:af:03:98:aa:
                    14:08:65:93:e3:7e:fd:9c:1f:b8:79:2b:9d:c3:3e:
                    dc:37:7a:a4:8a:8e:e1:6f:89:95:7a:ee:af:99:43:
                    4a:51:fb:8c:7f:36:80:42:e5:62:71:d2:05:52:04:
                    65:8d:e3:d6:3b:6e:e8:b9:9a:f5:20:b3:f3:81:9c:
                    5c:90:1e:2e:31:61:65:a3:f3:73:e2:11:3d:f3:45:
                    68:07:6f:43:67:cf:6a:e2:84:46:f8:ee:1a:3a:3d:
                    c5:74:b1:6d:85:dc:02:8c:52:fe:69:e2:4c:34:51:
                    4e:ff:3e:f2:0b:73:c2:0b:15:4f:e6:11:b1:fa:9c:
                    4d:6e:b1:16:23:f9:7d:a4:bb:92:37:33:10:bf:c0:
                    dd:72:35:d0:59:86:ab:df:bd:03:f9:86:00:70:5e:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:D3:38:82:1C:34:3C:50:EA:97:A7:5D:41:06:C1:6F:AD:26:A7
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/0f9c101b8b61bab633c5b77e67b68e508c203515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:405c::/47

    Signature Algorithm: sha256WithRSAEncryption
         03:47:1c:c2:39:e1:b2:49:5b:a7:36:f9:0c:43:60:72:73:06:
         81:45:41:8d:62:dd:6f:b0:af:2a:ec:61:a8:24:66:8e:25:86:
         f6:fd:c0:ad:01:49:2d:13:57:5c:2b:9f:ba:e5:63:1d:3d:56:
         ba:e8:96:5f:9f:f4:b7:57:db:8c:79:08:aa:0b:7c:63:e3:ad:
         8e:14:cb:52:64:03:93:60:36:26:c4:3f:a7:20:c7:50:d8:ea:
         69:75:21:66:0c:4b:d9:b4:c7:cd:25:2a:7b:aa:db:0a:47:26:
         f3:0f:2a:9b:e9:5c:4d:c4:63:23:bb:46:52:41:2a:38:c3:c4:
         e6:9d:fb:32:97:5f:06:a6:9c:1a:01:f0:63:ef:40:97:76:96:
         2b:75:96:bc:99:e9:c8:9d:fd:2c:66:e0:fb:7a:14:0a:a3:4e:
         6b:ff:a0:db:43:36:c2:ae:67:87:cc:0d:44:21:6d:3c:80:cf:
         7b:6f:48:2b:4b:a5:c6:5d:1f:d3:4f:02:2d:da:e7:79:4f:13:
         93:1f:59:d3:fb:ec:f7:61:6b:72:7f:9c:3c:eb:79:4e:d3:2c:
         59:2f:85:04:fb:42:16:f4:2e:be:77:cc:f1:50:af:28:9d:01:
         12:83:39:ab:37:99:3e:bf:09:a0:c5:51:70:e0:a4:6a:46:bb:
         9e:ba:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----