Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/78dca8c18a49b21b31de0ee9b1470682fc5c2090.roa
File:                     78dca8c18a49b21b31de0ee9b1470682fc5c2090.roa (raw, json)
Hash identifier:          ZPmM4RzeIjyn9YSfv/sMbjtSN+bX7JEuqge8BZGaQvs=
Subject key identifier:   54:55:70:C6:ED:61:A9:A5:8D:12:EC:3C:A3:0F:34:36:85:67:61:D5
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DFD52
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/78dca8c18a49b21b31de0ee9b1470682fc5c2090.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916818 (0xdfd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=78dca8c18a49b21b31de0ee9b1470682fc5c2090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:2f:42:4f:6e:4f:9b:c8:af:56:04:da:72:
                    36:12:fe:f5:2b:46:8f:f3:51:60:37:aa:ea:3d:1a:
                    a9:ef:92:5c:2b:6b:07:86:78:a5:4a:16:c7:8f:3d:
                    0c:9b:42:b6:05:19:98:d6:9c:99:23:78:d0:21:54:
                    52:8b:f3:25:3c:06:ee:0e:ed:c2:6e:db:e3:8c:26:
                    1d:e5:6c:34:45:a6:0b:38:06:2f:47:ec:6e:f4:2f:
                    13:e7:2b:4e:10:95:7f:8d:ac:1e:0d:26:58:c4:dc:
                    54:5f:da:66:93:aa:95:38:79:33:18:d0:ed:9a:32:
                    b9:be:8e:89:7c:9e:e7:18:ac:4c:67:9f:cf:b5:0e:
                    9e:c9:66:64:dd:d8:59:f7:e3:c4:d2:5e:62:ce:c9:
                    bb:f8:07:a0:60:bd:e6:9b:85:17:57:e2:cf:82:e0:
                    c8:44:4c:e1:4c:25:47:bf:a3:c2:04:bb:e4:7f:29:
                    a2:5f:1b:49:69:6a:b4:00:13:13:ce:c7:17:18:cd:
                    b6:76:41:bf:ff:1f:39:eb:4b:e1:54:a9:30:65:14:
                    84:db:e8:72:19:67:7c:da:8f:28:74:27:08:1c:ec:
                    d7:5b:c7:52:ac:80:01:06:bc:40:85:2b:b1:ba:40:
                    77:1e:bd:db:7a:0e:d1:cc:92:d0:dc:44:36:24:d0:
                    6f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:55:70:C6:ED:61:A9:A5:8D:12:EC:3C:A3:0F:34:36:85:67:61:D5
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/78dca8c18a49b21b31de0ee9b1470682fc5c2090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:e5:56:3d:91:d4:ec:6c:7a:2a:79:d3:94:42:01:6f:23:
         e7:77:7c:f6:e9:a7:89:c7:3b:3e:98:86:4b:22:05:f2:d2:81:
         b6:7e:9b:7f:f6:a8:4a:be:f8:c4:b0:6f:7f:ad:97:97:8d:84:
         7d:65:5a:ed:a7:ac:c7:ac:d8:c4:d1:37:8a:fc:98:fe:0e:78:
         02:67:92:c1:48:4c:b6:ac:0f:d0:7a:18:51:c8:1a:9d:b1:88:
         21:a2:fa:73:9e:d9:d5:98:60:eb:11:4e:93:6b:88:a6:7d:77:
         ea:be:53:eb:98:54:82:7e:08:31:c9:b8:f7:1b:fe:2a:ef:42:
         2d:88:e6:ca:59:ba:b5:f8:6c:e3:85:c9:3d:b9:c9:e2:c7:6c:
         b6:17:42:84:31:0f:fa:1b:c3:68:21:71:04:c4:fe:78:25:03:
         e0:26:96:df:39:c6:fe:86:55:30:6c:4e:ad:d2:bb:41:02:a2:
         ce:72:3a:35:e8:a8:59:b4:7a:1c:63:aa:6b:b9:5c:7b:5c:35:
         47:54:35:46:9a:5c:88:c8:1b:8b:be:36:aa:9b:24:d3:88:5c:
         97:2c:d5:5c:8f:5a:c8:63:83:d2:d7:3a:39:41:3b:c1:9f:dd:
         b4:98:e8:ec:b6:b3:77:f0:cd:43:44:c2:01:96:4a:d4:4a:7b:
         19:52:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----