Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/56259bd6584ce339576916367122b45db50b8cf1.roa
File:                     56259bd6584ce339576916367122b45db50b8cf1.roa (raw, json)
Hash identifier:          vqGZTZVxSNXaJV1J1Dtp9/JNZoXKRfBdSz+NBofdJmA=
Subject key identifier:   8C:94:6C:11:0F:B7:AC:29:A5:F7:18:46:FA:F4:62:54:BF:BB:35:21
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E1762
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/56259bd6584ce339576916367122b45db50b8cf1.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4048::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923490 (0xe1762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=56259bd6584ce339576916367122b45db50b8cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:02:ba:65:e1:5f:c9:69:5c:3f:c2:ee:82:
                    46:51:dd:9a:31:18:66:6e:c4:c9:c6:45:1c:50:0b:
                    17:ef:4a:cb:c2:d2:b3:64:17:a0:a7:79:b3:57:c9:
                    7e:3a:c2:fb:43:1f:65:45:d4:36:7e:17:2c:3c:e8:
                    2c:ea:41:d5:67:08:33:02:5c:4d:be:76:ad:c9:97:
                    38:2f:1b:25:0b:d7:52:5d:2b:18:50:c4:38:3b:f5:
                    a1:63:fd:23:cb:86:e6:9a:53:39:1d:d8:64:47:db:
                    7e:6d:75:be:16:ae:48:79:4d:00:77:2f:27:a3:a6:
                    77:4a:a4:9e:e1:44:fa:55:ed:ad:a6:e7:b7:28:44:
                    d0:9e:b6:78:ef:23:54:e0:e6:e7:77:25:55:57:b2:
                    93:e5:21:6e:85:03:37:53:61:ad:28:83:d3:f4:c8:
                    4e:25:bf:65:48:fb:bc:79:3e:0c:00:2c:e5:b2:24:
                    9e:97:ec:db:ff:dc:92:08:96:a2:ab:b6:1f:28:7e:
                    ec:8a:51:4d:4c:56:48:b5:ec:84:ef:09:78:b6:1d:
                    7f:3d:c9:61:50:6c:d9:d3:b3:13:2a:64:c0:af:d8:
                    27:45:1f:d5:19:0d:d7:c3:01:72:a1:c0:8e:f1:59:
                    a8:00:83:09:86:3c:b0:12:24:1f:39:b3:31:dc:d3:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:94:6C:11:0F:B7:AC:29:A5:F7:18:46:FA:F4:62:54:BF:BB:35:21
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/56259bd6584ce339576916367122b45db50b8cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4048::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:8e:e0:0a:9f:e3:6b:76:6a:c4:eb:80:37:24:3b:1d:df:
         c6:60:4c:06:2f:c0:99:5a:88:34:db:b5:12:6d:75:d5:81:8d:
         dd:ca:ce:1d:3e:dd:fe:00:0e:7e:2f:09:66:fe:79:14:b4:15:
         1d:0a:6c:8b:7c:86:e5:0a:ac:4b:2b:2d:eb:22:b7:1c:5b:3f:
         44:dc:d2:e0:fc:9a:80:2d:b1:b7:97:70:d3:7f:90:99:81:5d:
         90:f4:8c:17:15:fc:97:44:28:89:ba:ce:a7:d9:fb:01:7c:03:
         cb:cb:6e:0e:9b:32:f7:c2:cd:d9:21:0c:b2:30:9a:fb:8b:82:
         10:65:24:94:58:49:08:eb:61:da:90:26:e0:b4:4a:b4:14:7e:
         06:1c:0f:29:c3:55:1e:7b:77:b8:5b:7f:98:0c:da:5e:23:d6:
         a4:61:d2:c1:0d:41:57:bc:95:f6:e3:6a:c9:a7:6b:58:f3:7c:
         0e:4f:40:4b:56:0b:1e:14:00:ae:c1:c0:ac:54:7a:8c:8f:e8:
         bb:59:59:a8:27:32:9c:4f:73:c5:ef:04:d1:60:c8:d2:6e:6c:
         c4:14:e0:76:af:20:55:8c:3f:e5:9d:45:30:72:dc:c4:86:1d:
         00:15:57:46:e9:6b:0b:aa:23:f7:a5:4e:95:4f:32:8c:a7:2b:
         9e:93:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----