Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/269621a6c91ef7989854137f0865389e438e2464.roa
File:                     269621a6c91ef7989854137f0865389e438e2464.roa (raw, json)
Hash identifier:          FfMPX89uGxhduQfsS42twTl6Rs1weaV//0z4pdvEAHU=
Subject key identifier:   94:ED:94:D0:25:DA:D5:EA:DD:DB:BB:F3:0D:1E:61:D5:25:70:32:4A
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DAFF5
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/269621a6c91ef7989854137f0865389e438e2464.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4024::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897013 (0xdaff5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=269621a6c91ef7989854137f0865389e438e2464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:4a:2c:f1:23:42:1e:03:c5:57:b9:c4:ed:
                    0a:d7:6e:bc:60:a0:07:e4:1a:63:11:a9:bb:66:df:
                    30:18:44:b7:ec:96:4c:d4:8f:d0:a9:16:ef:05:2f:
                    12:be:56:59:65:16:5a:a9:e7:98:7d:cd:81:08:36:
                    74:83:6e:67:77:63:e0:6f:f2:cb:01:1c:db:2c:f7:
                    fa:f9:60:33:e8:af:7d:88:74:ec:cb:bb:2c:80:46:
                    47:16:5a:79:ec:88:f3:cc:fb:60:c2:d5:b1:57:11:
                    d7:24:46:c5:a2:3b:ad:a2:b7:aa:7e:98:3d:4d:27:
                    da:b3:3c:89:00:4b:54:8f:dd:b9:81:36:c9:7d:70:
                    1f:f9:22:a3:dc:cb:ae:66:54:79:5a:08:c3:70:93:
                    b7:f0:ce:d1:30:84:6d:da:41:07:b3:34:ae:06:62:
                    45:7a:cf:00:51:24:3e:c1:a2:8f:bb:ba:0e:2c:12:
                    d1:b9:28:fc:5c:d3:56:dc:1c:72:10:88:dd:99:02:
                    03:74:6d:b0:34:43:d8:76:7b:be:12:29:1c:8e:7c:
                    3b:de:82:64:74:18:6b:fc:1e:56:8f:ea:9d:16:cc:
                    01:04:8e:20:b9:e0:98:43:ad:4d:a8:d7:de:a7:c7:
                    92:2a:1e:81:26:cf:c9:f2:1a:fa:7d:88:0b:d2:ab:
                    4c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:94:D0:25:DA:D5:EA:DD:DB:BB:F3:0D:1E:61:D5:25:70:32:4A
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/269621a6c91ef7989854137f0865389e438e2464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4024::/47

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:a7:10:19:c4:db:2c:76:68:2b:42:cf:3e:51:91:8d:00:
         95:02:c9:0f:66:7f:21:10:51:35:d1:fc:46:6c:15:de:3d:5c:
         9e:80:7f:55:2e:5a:fe:cd:3b:f9:9f:5c:62:41:d4:3d:7b:b7:
         af:93:cd:55:be:24:57:25:aa:7c:bf:a7:5d:84:85:57:80:fb:
         a8:54:af:1e:a5:fa:78:5f:ab:cb:fd:67:5e:b6:cd:f4:2c:df:
         8a:a8:5a:9d:61:37:c7:14:7f:9b:c7:56:72:b8:91:c8:02:79:
         35:cb:e9:a1:1b:8b:40:a8:54:48:c5:0b:6b:8d:21:c8:dc:ed:
         36:3e:67:18:0d:84:97:c8:62:a8:9b:ee:49:01:78:15:0e:4e:
         0a:6c:8b:ee:47:0a:a1:c8:a1:b0:87:11:6d:09:01:02:de:02:
         16:af:96:bd:47:04:af:7b:55:ab:14:6d:17:48:7c:6b:a8:dd:
         ec:75:3f:d8:13:d1:0c:56:4c:8e:c5:c3:6a:2a:0c:15:9f:53:
         4c:fe:08:42:ae:29:32:9e:31:51:8f:42:91:b9:16:96:e5:bb:
         d6:84:6d:1c:11:ab:e4:22:60:2e:e1:5f:69:9b:3f:78:3c:e4:
         9e:a2:b9:f1:40:28:e5:8d:54:ca:c9:1f:9a:0a:98:b8:6c:ca:
         a9:b2:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----