Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4b36964e917a2480f8bae17d62177207db18ca52.roa
File:                     4b36964e917a2480f8bae17d62177207db18ca52.roa (raw, json)
Hash identifier:          V8A/SRwDeK026FHarfOUOX2ugS9nd2kn553fGYmA4us=
Subject key identifier:   5D:E3:B5:47:2D:98:11:5F:2F:1E:98:72:D1:74:04:F2:AC:AC:70:48
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DC06A
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4b36964e917a2480f8bae17d62177207db18ca52.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4012::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901226 (0xdc06a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=4b36964e917a2480f8bae17d62177207db18ca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:7c:a4:78:92:df:cb:f3:ac:85:f4:67:4f:
                    00:8b:ac:26:f9:7c:2e:a3:37:de:f6:aa:5a:98:a4:
                    79:4d:25:19:9d:6c:75:cb:28:1e:a8:fb:e1:47:fd:
                    1a:9b:e5:80:29:28:34:0f:a8:b1:9a:ec:b9:fb:95:
                    86:a0:01:76:86:e1:cd:0f:15:69:be:76:15:8c:46:
                    33:15:dc:b7:d7:2f:89:ea:ae:a0:cf:a1:65:e5:1a:
                    ae:35:88:31:7a:ee:f9:38:f0:fd:cb:f2:9f:f8:a7:
                    a3:a7:f5:b7:ff:b7:a2:14:a3:11:6e:29:f2:64:d3:
                    40:21:85:81:00:5c:cc:3b:cd:1a:1c:b4:c7:b4:8f:
                    cf:0b:f1:eb:73:02:47:f0:46:52:9c:ec:3d:f2:bf:
                    fc:b8:63:c9:73:cc:76:b4:74:af:11:cc:c8:f4:c8:
                    8c:67:49:8c:07:0a:b2:44:37:29:ca:35:89:07:47:
                    13:2f:d2:67:24:46:97:f6:8d:88:66:bc:7d:2f:6a:
                    23:48:90:5f:81:b6:ec:19:9b:58:83:d8:2f:47:70:
                    a8:8e:0a:df:77:47:76:07:c2:c4:f1:e3:22:27:15:
                    7b:1b:83:91:09:5b:95:d7:cf:3d:66:eb:5e:57:4d:
                    92:d5:38:e0:cc:26:d7:c0:4b:d9:60:d7:17:66:71:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E3:B5:47:2D:98:11:5F:2F:1E:98:72:D1:74:04:F2:AC:AC:70:48
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4b36964e917a2480f8bae17d62177207db18ca52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4012::/47

    Signature Algorithm: sha256WithRSAEncryption
         1d:53:14:72:ad:30:38:c8:52:1a:b0:f2:0e:28:dc:46:40:5b:
         22:d6:72:80:d1:d4:9d:49:27:ad:6e:b3:da:d7:86:9c:fa:17:
         ea:7c:50:01:b8:20:75:00:a4:ec:ff:4d:d1:de:61:8a:a9:22:
         02:96:6a:79:cd:ef:76:fd:3d:06:8b:73:31:5f:08:42:0f:db:
         fd:97:b7:2c:dc:6b:f9:e4:9a:81:54:4c:53:46:a4:d5:87:3e:
         8f:cb:17:6c:57:cd:82:0a:aa:29:ab:4f:13:d9:47:41:12:8c:
         e0:f8:26:c8:a4:a0:c3:12:97:d4:33:8b:3e:52:99:38:3f:8f:
         8d:1f:d2:49:cc:b1:ab:bd:e9:fa:7f:b2:23:1b:f1:e2:cf:8e:
         91:6f:e1:75:14:c3:d8:f1:1f:ef:48:dd:7d:74:9b:f0:e5:9c:
         17:f7:b7:69:8c:7a:69:c4:5f:26:fb:11:91:4a:7a:18:6e:2e:
         95:c5:2a:8c:f2:68:bc:35:d9:84:48:dc:39:3e:70:08:36:92:
         87:a7:c9:82:8e:04:78:f1:08:4d:83:41:2c:3c:f9:39:2a:43:
         55:dd:3b:b2:f5:bd:3b:1b:43:dd:5b:d1:31:33:18:90:ee:f9:
         04:d9:f1:a0:b0:17:f7:97:ef:1b:df:86:3e:23:78:00:f2:9d:
         00:95:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----