Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/453abcc1f9d67f50957dbf69ee7cf892948b01fd.roa
File:                     453abcc1f9d67f50957dbf69ee7cf892948b01fd.roa (raw, json)
Hash identifier:          sbE7bjSfCUa4ALRlK08PoFnNdp2FpjH/NNIUEfW5BH0=
Subject key identifier:   84:7D:AD:63:82:29:98:93:5D:17:91:FC:A0:92:8E:A3:01:4E:F7:87
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DB7F2
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/453abcc1f9d67f50957dbf69ee7cf892948b01fd.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4022::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899058 (0xdb7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=453abcc1f9d67f50957dbf69ee7cf892948b01fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:85:ad:46:0d:4b:70:30:e4:68:6a:b8:ad:
                    31:55:4c:cb:b9:75:b4:41:82:63:23:63:c1:c1:5f:
                    12:64:6b:fa:3d:83:0f:b0:e8:1b:3a:e9:26:43:0a:
                    91:40:60:4c:27:db:e3:1d:00:d4:bd:0b:d8:e6:12:
                    29:c4:6a:24:42:51:49:e9:4b:7b:5a:6e:ba:1b:5a:
                    4c:c6:91:65:70:bd:78:39:31:0a:ae:6a:05:43:3b:
                    9f:f2:b9:34:10:7b:10:ec:c7:25:16:ab:db:ca:bf:
                    05:4e:00:89:50:e3:26:02:4f:1d:8f:c2:52:c3:1b:
                    0f:6f:88:e1:0c:f7:1e:3b:82:f8:bf:1c:8a:f8:6b:
                    c0:92:bd:73:e4:7c:80:63:09:3c:ed:3f:a6:cc:db:
                    79:3b:75:15:89:ba:b9:ed:65:a9:4e:40:0e:84:27:
                    42:05:2a:da:84:61:ca:b5:2c:c7:b4:f7:a1:b6:82:
                    53:0c:7c:25:a9:16:00:1a:0c:dd:84:63:f5:48:da:
                    e0:ff:76:2d:ba:34:18:a5:3f:fa:97:2d:89:5c:68:
                    f3:b0:30:bd:3d:14:14:a9:84:2e:b6:8b:4e:5a:e8:
                    81:26:8f:77:99:b7:e1:de:ea:69:45:bd:b1:34:9d:
                    bb:3e:de:2a:18:6a:80:48:02:70:54:cc:dd:4f:f6:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7D:AD:63:82:29:98:93:5D:17:91:FC:A0:92:8E:A3:01:4E:F7:87
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/453abcc1f9d67f50957dbf69ee7cf892948b01fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4022::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:ec:ba:1f:50:df:c1:fc:43:27:01:7c:40:9d:9a:a1:f2:ca:
         c7:63:1a:16:fc:9d:46:52:cc:33:ab:5d:63:d9:d0:c0:08:10:
         cc:ef:0c:2f:56:42:34:9c:34:4a:22:f8:03:27:71:37:bc:79:
         98:9c:06:1f:61:34:a2:a2:a7:84:1d:13:11:25:fd:6a:e7:26:
         c2:28:b7:2f:e2:88:dc:89:a7:a0:e2:68:1a:41:55:18:a6:d4:
         5d:54:d0:87:53:d6:2c:7a:6d:02:1e:ac:46:20:f2:9e:6c:10:
         ac:29:f3:0c:c7:5f:bf:b3:4e:66:18:81:6c:71:8d:00:c0:4a:
         8a:e8:d3:5b:b7:12:1f:ad:4f:f3:78:2b:ab:5c:89:f0:dc:c8:
         4f:82:04:5e:61:0e:2f:13:a8:d4:6c:10:63:0f:b8:f5:f9:57:
         e1:79:e3:79:6d:29:c7:3b:1e:4c:e1:21:d3:15:32:04:0f:97:
         56:d5:d1:4a:97:92:c8:6a:82:b1:4d:1e:40:d9:50:81:d4:e4:
         61:d7:18:3a:2d:e4:66:9e:41:1c:68:d3:5e:af:71:5c:6b:3b:
         3e:46:3a:9d:23:54:5d:93:32:3a:f4:0d:57:6a:95:4c:36:c6:
         85:44:de:44:ea:4a:8e:ad:b0:95:9a:3e:c6:f4:5e:c8:c5:4c:
         d6:26:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----