Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/82def1f0603b87d078a44619d425df476265026c.roa
File:                     82def1f0603b87d078a44619d425df476265026c.roa (raw, json)
Hash identifier:          rvsNYXqPD6qRTJXhDfwcLoU2iL4rwmPyrNUlrs3HETk=
Subject key identifier:   34:4E:25:35:60:85:D8:BE:48:CA:58:7B:8D:55:84:4A:A2:37:8B:18
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DCAE0
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/82def1f0603b87d078a44619d425df476265026c.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4015::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903904 (0xdcae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=82def1f0603b87d078a44619d425df476265026c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:57:a6:a2:ff:9b:f1:4c:1e:ae:cb:9d:44:
                    91:9c:64:6c:03:db:af:22:d0:a8:b6:9b:95:fa:63:
                    a1:48:60:eb:20:72:7d:79:18:a2:70:8c:9c:eb:2b:
                    ee:c3:b5:2f:91:a9:8f:fa:1d:a9:c5:69:e9:d5:e8:
                    46:2d:dc:21:47:7b:e7:f4:7f:80:87:3e:e6:33:e9:
                    c5:2a:6a:a9:8b:b9:88:89:09:79:3d:3f:56:c1:63:
                    44:e5:f5:47:05:9a:67:1f:bc:48:06:45:5c:0f:ed:
                    f2:1b:8a:f5:9f:97:6b:dc:b5:8b:ff:54:b9:4e:79:
                    4f:a7:00:53:f8:ec:28:42:be:d2:b3:2b:67:11:6c:
                    91:ea:e2:b4:b5:0b:73:a9:39:b7:0b:f0:75:5f:5c:
                    51:db:3f:36:48:f7:38:aa:dd:73:8f:a5:8d:77:f1:
                    db:33:a2:6e:82:d7:00:78:f8:ee:50:a9:e5:f1:d6:
                    f6:aa:89:b2:98:aa:cf:9f:28:87:b5:95:73:a5:ee:
                    72:fd:c0:f4:d1:ed:54:03:85:5c:94:ef:25:03:59:
                    d3:93:80:ae:e5:6f:61:2b:7f:e6:77:f7:4d:2e:1e:
                    ca:45:f3:97:00:5b:37:25:ff:4d:55:e2:6d:57:f8:
                    c7:fe:8d:9b:fe:46:21:04:04:cb:a5:3f:87:66:90:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4E:25:35:60:85:D8:BE:48:CA:58:7B:8D:55:84:4A:A2:37:8B:18
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/82def1f0603b87d078a44619d425df476265026c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4015::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:91:19:49:c4:4d:fa:d4:fe:32:b2:a9:3c:d5:6c:32:bc:
         5c:98:81:83:7e:21:3f:00:ce:99:32:41:6d:dc:e0:13:e8:6c:
         ba:d2:0f:1c:3a:7d:39:7b:e0:16:db:8a:b0:57:54:9a:39:80:
         00:0a:41:0d:67:41:d5:d8:69:59:3e:d2:e0:92:f0:cf:10:b0:
         ad:0c:67:38:c8:9e:b3:61:ec:c4:d0:e6:9a:09:9a:f9:bc:26:
         fe:df:44:ef:11:fe:7f:1e:5f:e6:ac:01:62:8d:8a:d3:e3:6f:
         19:a7:db:75:4e:66:27:da:d3:f0:3d:5e:82:64:5a:2f:43:fa:
         48:28:aa:ae:4b:9e:19:e9:c2:d8:12:8e:56:95:61:1a:46:8e:
         a3:98:27:0c:44:98:7d:a8:90:a7:7c:a6:ee:f8:56:da:e9:32:
         12:d1:40:a0:f0:2d:6e:d1:47:d1:6c:07:03:87:0d:a1:56:72:
         d3:f4:23:0b:b9:48:24:e7:77:ab:66:a9:ac:73:f3:b8:4c:49:
         aa:5b:76:b8:e0:f1:05:59:a4:48:97:d7:62:06:63:80:ec:89:
         30:09:19:c8:a9:fe:90:f3:9f:ea:2f:2f:0f:f4:6d:35:13:d5:
         fc:cc:67:53:eb:69:e7:94:36:23:21:d3:c7:7a:fd:0a:44:ad:
         ba:75:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----