Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/246a04bca50b9d2a0b657536a1d7e99acb44ecbd.roa
File:                     246a04bca50b9d2a0b657536a1d7e99acb44ecbd.roa (raw, json)
Hash identifier:          Fq9edmnZGE6gzTpvNKyPweAih02qtXBieKcHT8XUUKY=
Subject key identifier:   7F:55:9B:43:EE:61:44:7E:53:F2:5E:C4:C8:C9:57:F0:D9:2E:26:68
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       1C2A6C
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/246a04bca50b9d2a0b657536a1d7e99acb44ecbd.roa
Signing time:             Wed 12 Oct 2022 15:45:40 +0000
ROA not before:           Wed 12 Oct 2022 15:43:10 +0000
ROA not after:            Sat 12 Oct 2024 15:43:10 +0000
asID:                     3573
IP address blocks:        2801:1f0:4018::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845868 (0x1c2a6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Oct 12 15:43:10 2022 GMT
            Not After : Oct 12 15:43:10 2024 GMT
        Subject: CN=246a04bca50b9d2a0b657536a1d7e99acb44ecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:c8:5e:1a:3c:ef:30:d1:34:e4:30:07:8d:
                    e3:57:b9:43:01:78:cb:4b:e7:44:b5:dc:1e:84:3b:
                    9e:f9:ea:da:f7:f6:00:38:b6:12:da:05:23:ee:dd:
                    76:b7:68:58:29:e6:d2:85:65:54:76:6a:d6:75:9c:
                    99:6c:67:91:40:f9:bf:e4:ef:70:f4:6d:38:48:45:
                    ba:95:fc:6b:a8:b0:b0:e7:a8:b2:b4:45:23:2b:ac:
                    de:1f:bd:b0:78:b2:d6:82:31:f3:94:10:c3:10:1a:
                    f7:be:a2:bc:42:8e:a5:ee:6e:f5:a0:88:ec:ab:7e:
                    1a:e6:a7:13:30:1b:43:fc:16:10:a3:50:d1:9e:a8:
                    3a:c3:b5:7d:b3:9d:f4:a2:9a:8e:90:55:b2:c6:06:
                    2a:68:a1:97:2c:f7:36:bd:27:47:a6:4c:36:19:42:
                    3b:24:45:52:dd:be:a0:7f:3b:07:97:67:1e:81:84:
                    a7:5c:66:78:04:13:76:88:e7:75:cd:fc:3f:4e:3b:
                    55:37:2d:b6:96:03:8c:c3:64:62:0f:79:53:f9:5a:
                    c6:60:cc:8a:77:65:65:02:11:3e:14:e0:07:36:91:
                    2f:49:30:45:46:be:fa:9b:96:fa:16:7e:80:72:b3:
                    a3:99:ab:91:99:6e:f4:98:3f:be:27:63:8b:55:48:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:9B:43:EE:61:44:7E:53:F2:5E:C4:C8:C9:57:F0:D9:2E:26:68
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/246a04bca50b9d2a0b657536a1d7e99acb44ecbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4018::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:da:da:56:17:44:a2:03:54:d5:9f:4c:35:4d:68:cf:de:a5:
         97:56:1b:00:6c:5d:69:5f:63:52:eb:c8:b2:5f:07:c2:46:52:
         2a:47:5d:d3:a0:09:cb:1d:2b:8a:5d:4f:2b:a5:64:0d:7a:ba:
         98:d6:50:62:7b:62:c0:39:77:20:90:9b:1a:a8:8f:28:dd:0d:
         3f:6a:78:a2:91:47:40:38:14:dd:0d:48:b5:1c:16:5e:f2:ad:
         f3:88:26:3d:18:71:1e:14:aa:32:2e:de:ac:7f:12:17:00:7e:
         07:56:a9:af:8f:a8:b2:c3:35:04:8e:95:da:95:a0:90:33:a8:
         ec:be:fd:a6:0f:cc:f9:2e:03:70:9a:63:aa:55:64:4c:18:49:
         22:1c:c8:1b:14:5e:fc:e7:f0:c8:14:8f:c2:29:02:8b:d6:66:
         e0:fd:c8:2a:73:fb:d6:2a:41:33:a7:00:5e:31:b2:0b:89:3d:
         a9:ba:1e:e6:88:9c:87:4f:d2:a8:56:ba:fa:37:99:4d:22:88:
         88:ea:d3:58:cf:cf:b2:92:83:b1:89:5f:aa:96:d9:48:58:af:
         58:e6:d1:31:da:de:8d:a1:42:8e:8e:16:9a:60:da:cf:b3:22:
         7e:c5:93:f7:f9:bb:74:df:a6:7c:18:74:29:2b:95:44:ba:24:
         5f:a3:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----