Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/868c24ac4a12fdda7a06e17527cbda0c6db38843.roa
File:                     868c24ac4a12fdda7a06e17527cbda0c6db38843.roa (raw, json)
Hash identifier:          6KycW4oEXuvpPsruKdiEHQvEUBrivz47/daNBlHu0oo=
Subject key identifier:   E2:5C:DB:9F:11:81:5D:87:87:98:71:09:42:1F:AE:F5:FB:C9:54:02
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DBF90
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/868c24ac4a12fdda7a06e17527cbda0c6db38843.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:400b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901008 (0xdbf90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=868c24ac4a12fdda7a06e17527cbda0c6db38843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:a2:4c:53:7e:b9:50:c1:40:83:a6:a6:11:
                    2d:05:f6:93:b5:30:d2:57:3b:b3:0d:9c:21:28:9d:
                    b7:5e:b6:f9:c5:bc:7a:93:73:7f:24:d5:42:10:1c:
                    e4:22:04:ce:5a:19:c4:d9:99:c3:85:a9:19:9c:2c:
                    d2:33:54:5d:18:44:80:5e:61:9a:2f:24:f9:5a:74:
                    8c:e1:bc:4f:e0:f4:51:fd:3e:e1:f0:4f:05:84:44:
                    c7:b7:77:42:ee:23:00:5e:01:d3:e3:12:4b:2a:d3:
                    b3:aa:a6:f0:f5:0a:76:e9:48:20:81:a7:21:9d:e4:
                    0e:b0:15:fe:c5:a0:1c:ef:9a:b9:ca:95:66:49:db:
                    e1:4a:cd:cf:9b:45:a5:90:9b:be:60:98:b8:28:bc:
                    05:d0:1f:1a:32:89:72:ad:f6:89:16:46:3c:5f:1b:
                    41:22:89:aa:40:38:47:37:93:e0:43:8f:fb:f0:f5:
                    02:8a:df:2b:96:07:93:50:f8:04:c6:78:0c:ba:da:
                    cb:31:6d:95:11:59:68:ef:d8:a9:7b:ae:82:f4:a7:
                    e7:28:52:c0:8d:f6:05:43:a1:d6:c2:61:13:37:92:
                    ac:2d:dd:f5:bc:76:b5:f5:4c:01:00:f5:5c:b7:18:
                    0f:88:eb:24:8f:51:48:19:8c:e3:6f:b8:ac:32:eb:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5C:DB:9F:11:81:5D:87:87:98:71:09:42:1F:AE:F5:FB:C9:54:02
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/868c24ac4a12fdda7a06e17527cbda0c6db38843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:400b::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:42:56:8f:9b:1e:64:ca:3a:d4:fb:27:80:da:bb:28:1e:67:
         96:18:1a:0e:10:62:88:dc:b2:84:07:96:fb:b2:64:93:a3:44:
         05:6e:5a:8c:6e:dc:ab:82:41:9e:1b:ac:1f:01:46:d4:dc:7a:
         19:bf:f7:4d:55:5c:ab:c2:1f:d3:96:0f:2b:5c:9a:f1:ac:42:
         dc:82:37:ec:74:38:6c:5d:e3:20:b1:0e:4a:09:43:06:6a:ae:
         a4:01:0c:fe:4d:11:ee:a2:bf:4a:13:ab:88:70:33:fd:d6:e7:
         7e:16:33:b6:30:9a:e2:ce:88:53:7c:2a:c7:a3:83:00:15:d2:
         a0:1b:70:16:d5:04:90:e3:ea:4d:f7:d7:01:a4:2c:70:42:e3:
         45:af:b0:02:3a:97:e6:60:70:11:34:5f:66:7f:10:0d:0a:06:
         e9:15:44:06:ec:5c:b8:bb:cc:da:f9:93:46:9c:07:57:7b:a0:
         24:f4:11:35:9d:0c:f2:6a:14:53:83:46:93:4a:66:90:eb:f6:
         8e:16:1e:40:28:d3:9d:fc:9a:63:90:34:7c:1b:53:8b:91:8b:
         cf:a2:ac:29:7d:b1:5f:13:13:af:4b:a7:13:43:60:97:d3:ba:
         61:68:6c:86:c1:f3:80:3d:68:71:fe:c9:1b:c0:fc:1d:e8:bd:
         49:24:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----