Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/3a12afb2bd8657795f0f7fb76c481a79b0b297fa.roa
File:                     3a12afb2bd8657795f0f7fb76c481a79b0b297fa.roa (raw, json)
Hash identifier:          eDxJjfV6N/2sjCa/8IMApZQVLMURN46wWal8GcnWJoI=
Subject key identifier:   57:78:79:B1:4A:8A:DF:31:48:2F:D2:1D:4F:30:1C:02:63:E2:B2:CC
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E27C2
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/3a12afb2bd8657795f0f7fb76c481a79b0b297fa.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:401c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927682 (0xe27c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=3a12afb2bd8657795f0f7fb76c481a79b0b297fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:f6:49:c1:dc:61:38:11:6d:47:15:9c:a7:
                    9e:0e:43:92:b4:b1:89:90:ff:3e:69:9f:7e:b1:7b:
                    e6:98:46:53:0e:75:ba:88:54:1a:eb:df:55:19:31:
                    d4:27:69:03:9b:1e:6b:a7:88:31:30:84:d7:5e:cc:
                    cb:e1:ac:e0:72:c2:11:72:96:42:ea:9b:fb:a3:7d:
                    8a:9b:d0:76:09:91:c2:22:93:d7:f2:7f:80:5c:bc:
                    5f:be:39:95:ff:a1:80:ac:0a:ed:f6:b5:eb:3b:9f:
                    0c:42:20:ff:e4:9a:ea:9a:b2:68:2a:36:1a:3a:df:
                    62:be:75:72:b8:c5:6d:20:e0:b3:5b:7d:a3:5b:3a:
                    56:a0:45:b6:9a:b7:3e:a9:9f:4e:9e:78:ca:da:95:
                    96:8d:70:a5:25:9d:13:12:91:f5:98:5b:5f:2c:25:
                    a3:68:9e:21:bc:07:ba:c2:04:e5:0b:08:0c:85:a8:
                    4f:75:e2:10:79:ed:b4:bc:72:b1:01:b9:91:c9:22:
                    bd:75:3a:f8:e0:e9:b0:9f:b4:9e:2f:4c:35:b1:f8:
                    44:a2:5d:83:d9:21:f2:a5:a0:1c:06:8d:ec:1e:a6:
                    94:2c:fc:68:93:bc:68:f9:65:81:48:39:aa:d7:b3:
                    f1:b8:d8:d9:95:15:61:21:af:86:53:92:75:3f:3f:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:79:B1:4A:8A:DF:31:48:2F:D2:1D:4F:30:1C:02:63:E2:B2:CC
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/3a12afb2bd8657795f0f7fb76c481a79b0b297fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:401c::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:db:e3:b5:20:b8:6e:da:45:a3:3f:00:7d:4e:c1:b3:c9:eb:
         8c:f7:cc:de:59:f1:9a:ef:22:43:1c:66:c9:3e:7f:8d:73:80:
         b1:ff:11:f9:14:ba:d7:08:7d:b3:d7:53:86:d0:a6:4c:ca:8b:
         25:3c:e2:1f:40:6d:33:31:f6:c8:57:9b:5f:2c:1c:d6:71:08:
         e0:b5:b3:4f:0e:73:e2:77:e6:7a:dc:e4:f5:da:9f:cd:e0:14:
         a0:f4:3f:54:56:3e:ef:d4:42:c1:fb:b5:8b:1a:ee:2d:9e:c3:
         5c:3f:f2:89:2b:ab:55:4f:11:65:eb:cc:59:fc:2a:d3:44:c8:
         69:20:69:e5:6c:b5:27:a2:15:30:ff:f7:cd:c6:d0:02:9d:56:
         47:15:6d:b9:86:ca:3b:48:3d:d1:bc:43:8c:c1:29:0c:7a:59:
         65:8c:91:c4:31:06:1c:f0:e1:c0:b7:21:38:77:9f:7a:86:8c:
         ce:6b:43:a1:30:8e:65:a7:e1:bf:d2:ab:b1:2a:85:71:4a:89:
         63:d8:48:64:38:f4:d4:0e:55:96:60:7d:e6:6f:39:8d:82:4a:
         06:6b:36:df:4c:6a:52:5b:bd:d7:0b:24:59:a0:78:17:31:f2:
         06:84:62:a5:e1:7f:34:19:8c:da:b5:98:25:78:99:a5:3e:1e:
         18:dc:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----