Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/7be6e473327d9e4dd61707cef962d2492554f602.roa
File:                     7be6e473327d9e4dd61707cef962d2492554f602.roa (raw, json)
Hash identifier:          37mUUjBYvy4pYq/ap+sIYk2aQlipK/VGJazmZ8UPC1c=
Subject key identifier:   A7:19:F9:E2:04:87:FB:E8:09:E1:31:1D:5D:9F:F4:79:B8:B8:FD:DA
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DC129
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/7be6e473327d9e4dd61707cef962d2492554f602.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901417 (0xdc129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=7be6e473327d9e4dd61707cef962d2492554f602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:23:a7:34:b5:f1:f5:3f:2e:0b:49:c8:1d:
                    c4:e1:72:1c:1c:f2:df:59:85:d1:1a:59:bd:1f:00:
                    d2:7f:ef:49:a7:71:cd:cf:25:e6:7a:22:3d:25:e6:
                    c2:cf:ed:ed:8b:0c:27:66:5a:c4:07:63:1e:7d:35:
                    b8:0d:72:0d:5c:8f:18:2b:b2:05:0c:16:b6:2b:96:
                    c1:9d:b5:f0:84:ad:fd:b2:c7:0a:ff:ae:eb:a9:49:
                    a0:08:b0:31:d2:90:0f:e4:df:5b:54:fe:63:1c:c8:
                    08:a2:4e:5a:05:20:6c:84:c6:b2:c8:37:88:78:60:
                    cf:84:5c:86:12:d2:25:02:67:7c:fc:74:7e:f6:85:
                    d2:9a:03:a0:42:76:23:e5:ad:d0:65:ee:a1:23:82:
                    af:15:10:ec:5b:97:cd:2b:4a:37:c7:0d:04:35:a7:
                    b7:42:60:3e:d2:da:55:dd:0d:84:6f:19:03:a6:17:
                    c7:23:b3:8b:ed:cd:b3:f0:8a:79:bf:ab:60:9d:63:
                    57:46:20:35:df:28:06:db:9a:ac:fd:56:ef:ee:c4:
                    98:83:c7:ed:f9:de:96:6e:0a:d5:9c:1b:d5:58:c1:
                    a4:31:cb:55:4c:08:f8:ee:94:83:7b:93:e2:c6:dd:
                    29:a1:eb:d7:6e:bc:d0:25:34:bd:64:61:a0:f3:f0:
                    10:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:19:F9:E2:04:87:FB:E8:09:E1:31:1D:5D:9F:F4:79:B8:B8:FD:DA
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/7be6e473327d9e4dd61707cef962d2492554f602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4012::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:a3:24:2b:dc:19:c5:f6:7f:e7:d4:8a:93:e2:32:1c:ef:cf:
         63:e0:ae:37:99:6c:23:2c:8c:d4:7b:36:b9:5b:70:58:08:71:
         4d:e4:62:2e:a6:21:ad:68:a1:ef:72:80:aa:34:90:55:97:c4:
         d5:d2:3a:76:5f:d6:62:7a:57:6c:bc:3b:88:e5:d1:11:95:d5:
         fb:10:4b:f6:89:57:39:7e:3d:ef:dc:e6:ab:b5:66:e5:7e:52:
         27:a0:dd:d1:03:fa:6b:87:28:78:f3:00:ea:ac:f7:48:30:ec:
         96:3f:9f:b4:9d:2e:c4:71:bd:5d:63:bf:9d:c2:b3:48:a6:86:
         28:25:3f:94:c0:66:0b:f8:6a:92:94:c9:55:56:82:93:2e:4e:
         ca:8d:18:01:9f:94:88:4d:c1:52:be:94:a8:d4:5a:b5:23:72:
         09:cd:5a:5e:b3:e7:1c:5c:18:c4:b4:48:61:ec:f8:b2:39:f3:
         dc:48:41:5f:42:b7:5d:52:0b:14:14:2f:3e:9f:73:ec:02:ac:
         29:e6:d3:5e:14:85:e1:27:e6:19:b0:91:84:f1:d0:9e:96:0b:
         bc:48:93:b1:8a:95:df:ed:d4:62:5e:96:d6:12:89:67:af:bb:
         19:ac:64:7c:7b:cf:37:5f:e0:51:6c:b8:b6:38:1e:48:9e:35:
         12:56:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----