Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/614604775e831305e72cc9ac35d40508a5b74f63.roa
File:                     614604775e831305e72cc9ac35d40508a5b74f63.roa (raw, json)
Hash identifier:          H8MMbmVl9XQ6x+gAU4EcA8rULoBlloFGJjVadnxQhd8=
Subject key identifier:   25:73:46:B6:D0:CB:C8:0F:38:98:42:5F:09:38:57:8C:80:9B:15:43
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DC47D
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/614604775e831305e72cc9ac35d40508a5b74f63.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902269 (0xdc47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=614604775e831305e72cc9ac35d40508a5b74f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:ff:e4:60:7d:5d:e2:16:59:f0:94:a9:b1:
                    16:ee:62:bb:83:15:e3:bc:b6:2b:d1:2a:5e:a9:c3:
                    8d:d6:1b:94:29:0f:2e:6b:f8:e2:1d:40:d1:c7:b0:
                    76:a5:53:11:1e:ea:30:0c:2c:4e:90:9d:c2:82:32:
                    04:9a:21:dd:7e:f6:b8:93:ca:d9:b0:eb:e8:81:a4:
                    89:60:6b:90:40:06:97:73:62:92:c4:f3:eb:aa:d1:
                    db:30:b3:9f:63:43:cd:1a:ab:5b:5a:ac:11:aa:c3:
                    16:ed:7d:0b:a2:55:a7:26:c2:1a:48:e7:e6:ae:62:
                    cd:f7:17:03:23:90:95:d1:51:5a:0d:b5:aa:f1:6c:
                    17:ba:0d:39:dc:6b:2f:03:e3:7d:50:f0:51:94:80:
                    91:98:11:e6:c3:45:b4:1c:40:c9:a8:77:da:e9:87:
                    26:e0:77:f1:34:e0:a6:a3:26:2c:88:8c:94:e2:1e:
                    01:e0:c9:1b:28:cf:79:b8:0e:af:e1:8c:8c:6c:35:
                    90:09:7b:98:aa:27:46:d2:58:db:5b:6e:6f:c4:32:
                    82:10:37:c4:dd:a3:55:4f:c8:77:cb:6e:14:72:61:
                    0f:ab:fc:8e:2c:6a:41:6b:66:03:83:1f:4d:54:75:
                    ab:a3:6c:50:71:5d:d5:04:ba:d5:7f:53:73:7b:12:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:73:46:B6:D0:CB:C8:0F:38:98:42:5F:09:38:57:8C:80:9B:15:43
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/614604775e831305e72cc9ac35d40508a5b74f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4013::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:35:b8:d1:0b:03:df:28:67:01:61:7c:27:48:0d:d2:d7:d6:
         f8:c1:02:c2:39:a7:81:ba:08:ff:45:eb:c6:a2:e8:16:c6:0b:
         38:49:c9:01:4f:e9:e5:1f:ce:f0:a6:e6:9e:ac:f5:52:e5:c1:
         b6:c6:00:ce:f4:6c:e8:04:f4:4d:55:35:00:e0:ce:92:34:3b:
         a2:b8:76:00:cf:5d:e4:62:a4:8e:54:5b:55:e2:bb:16:28:43:
         dd:f1:86:04:8b:13:3a:64:1f:a7:2d:f8:e7:10:a4:c4:61:e7:
         c4:68:9d:dd:da:68:a6:95:80:60:cc:e0:2f:3c:8f:cd:46:a9:
         3e:59:50:1a:fb:91:f3:44:e2:8b:73:95:6b:e3:f2:5b:d5:82:
         e8:f8:50:5b:8f:49:41:8a:ff:6f:60:0c:e7:af:52:a9:0f:bd:
         f9:da:96:4b:1f:e4:68:8a:cc:8d:64:97:85:4f:8a:19:bb:17:
         f3:08:0c:9c:bf:0d:9b:07:68:70:07:30:4f:65:d1:ae:ae:48:
         35:93:dd:e5:1e:47:6f:47:25:6c:20:e5:ae:e6:bb:b5:4b:15:
         2d:88:77:46:db:57:d4:e7:6d:dd:5e:67:85:6a:5c:2a:4d:ea:
         1c:5d:49:47:99:d3:84:14:49:82:ba:53:3c:ae:c4:62:65:da:
         d6:b2:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----