Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/29f0811d386281f40abedcab92152b7234e91a7b.roa
File:                     29f0811d386281f40abedcab92152b7234e91a7b.roa (raw, json)
Hash identifier:          ZUHJVO5dcAzWnWwIbcs5wW4gLuGhPfwn+lSeJiN5Nes=
Subject key identifier:   79:83:2C:81:9D:2F:4F:AE:A3:E3:B6:B6:89:EE:E5:1A:5F:69:BA:20
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DBDDC
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/29f0811d386281f40abedcab92152b7234e91a7b.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:400a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900572 (0xdbddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=29f0811d386281f40abedcab92152b7234e91a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:4d:f2:a6:f7:f5:4e:b0:69:8c:16:60:52:
                    3d:c1:ce:77:db:fc:53:05:e9:16:d4:c2:d9:69:25:
                    63:1f:b1:ae:d6:67:17:a0:16:8f:72:7a:86:60:a2:
                    18:1c:8b:91:5e:14:b0:b9:49:af:fa:dc:01:0e:cb:
                    59:ee:22:0c:0b:82:a3:dc:38:38:ba:f3:d5:e8:1d:
                    37:06:3e:e4:34:00:15:a0:51:0c:ba:2c:05:9c:4e:
                    40:74:bb:ee:c8:2a:f5:d3:38:c7:d4:ef:14:7e:21:
                    4b:44:5c:3a:3e:fd:73:12:45:96:64:a8:ec:5d:d1:
                    31:84:4e:3b:1d:90:9e:9f:eb:4d:db:b5:1b:8c:17:
                    59:0e:d0:28:aa:ad:9a:ec:6e:fb:5c:75:5e:63:ee:
                    b7:7e:61:54:8d:d3:91:41:2c:ed:80:a4:57:9d:96:
                    e1:ad:fb:86:39:02:5f:de:36:3c:13:86:40:e0:68:
                    3a:73:b9:21:6f:9b:37:15:33:b8:28:5e:b7:6d:b1:
                    32:2f:fd:5a:45:44:27:54:4f:92:a1:e7:89:c1:a1:
                    65:c9:d1:84:6f:a9:d6:f2:a8:49:42:c6:db:d4:dd:
                    04:8c:95:43:8f:d0:97:1c:41:9a:ee:2a:be:53:c3:
                    81:c7:15:a6:45:11:b0:77:3b:cf:0e:7f:bf:4f:f8:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:83:2C:81:9D:2F:4F:AE:A3:E3:B6:B6:89:EE:E5:1A:5F:69:BA:20
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/29f0811d386281f40abedcab92152b7234e91a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:400a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:0f:7b:c6:e9:f0:06:2f:44:f2:3e:ac:68:38:94:eb:28:
         72:d2:30:b1:fd:a4:7d:be:a1:6f:ff:a4:84:ba:c3:03:95:7b:
         70:a1:dd:90:e7:e6:47:87:9d:29:53:83:70:f9:50:73:23:7b:
         9d:c9:a4:71:32:26:9b:1b:a2:cc:e8:a3:93:97:5d:6a:04:a0:
         c2:da:73:61:0e:30:f0:66:3b:24:5a:3d:cc:87:05:9d:77:2e:
         94:cc:7c:25:bc:0c:c3:2a:b6:b3:fb:a1:bc:c4:8a:0d:bf:9f:
         7a:cd:ec:2d:b8:7e:79:02:76:57:03:94:01:d8:96:9a:34:75:
         3e:73:2e:a3:32:dd:63:62:b1:d2:12:8c:fe:ee:cc:26:a7:fa:
         ae:29:f5:fd:93:f9:e0:fa:f0:cd:b5:f6:07:60:3e:04:2f:91:
         51:ba:32:56:b4:78:e6:60:37:94:e2:f0:72:79:1a:66:b2:6d:
         61:66:82:a4:d8:fd:26:62:ad:55:fd:c3:1b:4e:d0:b7:13:9d:
         d4:49:03:18:4a:ca:c3:00:c6:6b:3c:3b:3f:55:38:40:af:e4:
         c9:14:54:3b:d2:6b:8e:70:63:a0:ec:7c:97:59:99:3f:e9:99:
         41:ab:f8:9f:2d:4b:39:c2:ff:ae:1e:c4:0e:cc:d3:4b:d4:fe:
         6d:25:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----