Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/68d0c46cfacd0556b763bc3d987717ee2a1b0fab.roa
File:                     68d0c46cfacd0556b763bc3d987717ee2a1b0fab.roa (raw, json)
Hash identifier:          YO708pL8iHxN2aMrAKuk+pbrLTu/MuyZPZIiqEyn6LQ=
Subject key identifier:   1E:57:B4:18:EC:17:E7:13:1D:B8:26:B8:C4:7A:3D:52:BA:8B:DD:D5
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DB115
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/68d0c46cfacd0556b763bc3d987717ee2a1b0fab.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4024::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897301 (0xdb115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=68d0c46cfacd0556b763bc3d987717ee2a1b0fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:6b:20:e5:b7:c6:7f:83:2b:5a:6f:40:32:
                    94:71:1b:33:20:e9:68:61:00:70:0f:45:ab:97:00:
                    b5:39:51:a9:35:06:af:ce:da:3e:87:62:86:d4:59:
                    5f:31:25:be:dd:12:d8:4b:00:27:42:59:e9:ca:59:
                    48:31:61:52:6b:cb:5e:70:e6:12:99:18:d0:2a:c4:
                    69:40:59:a3:6a:1b:f9:d9:f6:f5:69:99:4d:c6:e5:
                    9d:c3:bc:8a:a5:c6:7d:6c:1b:ef:b7:d6:6b:d1:4c:
                    9a:e2:ad:c6:41:70:1f:bb:9d:9c:9b:fc:0f:e7:e8:
                    8d:4d:74:85:fc:ca:75:0c:c1:12:01:11:2f:fa:1c:
                    ff:60:8f:53:24:91:e1:d8:29:34:06:4c:a3:fe:a4:
                    96:15:e2:2c:a4:6b:72:7e:19:cc:3e:18:60:45:71:
                    02:8b:e5:c6:a4:d5:be:86:33:65:74:db:3e:b8:bb:
                    56:c2:be:72:75:dd:d6:f7:b7:fe:1c:4a:a7:46:97:
                    b2:6d:95:02:29:91:17:37:cf:ca:13:5f:15:6f:f8:
                    b9:cc:18:18:84:12:26:bb:88:87:08:44:b1:0b:85:
                    29:25:13:48:81:6d:89:8e:3b:bb:bf:89:6c:66:53:
                    fb:87:ad:d1:dd:7d:9a:e5:4e:2f:29:62:64:c1:32:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:57:B4:18:EC:17:E7:13:1D:B8:26:B8:C4:7A:3D:52:BA:8B:DD:D5
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/68d0c46cfacd0556b763bc3d987717ee2a1b0fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4024::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:2c:0c:ad:bd:21:85:a0:f4:df:7d:e7:5e:14:9d:86:1a:63:
         a3:e1:ac:f4:96:39:02:ae:80:3a:c5:f8:7e:8a:66:12:39:d9:
         06:28:a3:61:dd:55:71:e3:77:e5:92:bd:63:be:cc:6c:93:1a:
         85:ef:32:d6:f7:be:cb:34:b4:5a:d7:13:30:58:38:a9:1a:2c:
         88:e7:9a:a1:bf:ed:94:45:5f:dd:bd:0b:16:ac:45:d5:dc:60:
         58:d1:3d:1b:f0:0a:9d:2e:f9:68:af:92:6b:9c:13:18:88:eb:
         d7:b6:a5:c7:fa:a8:b0:c0:16:19:68:07:4c:b9:e9:7c:06:02:
         51:5d:6c:77:ce:38:dd:a5:77:f6:b5:7d:08:21:96:a5:d0:6a:
         90:40:c6:8a:01:7c:01:b0:50:20:a3:5e:13:6c:7b:bc:04:60:
         44:84:7a:a8:ed:a5:c3:b6:d8:2f:e4:03:ac:ee:5a:ae:d0:55:
         21:c7:49:5e:9e:2e:18:1e:4d:76:c6:aa:f8:22:d2:5b:a5:ff:
         69:81:91:a4:00:3a:77:4c:df:1d:89:0b:57:78:1a:94:01:eb:
         2b:99:5a:42:a4:d1:84:d9:a6:44:96:ef:d3:34:0d:86:58:52:
         8a:c5:f9:71:bd:5e:2c:f1:0f:1b:c3:11:6e:fe:c3:64:c0:47:
         87:e0:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----