Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/9ce8ddfb13e9ac41a891d2e2c4ee5338cf599827.roa
File:                     9ce8ddfb13e9ac41a891d2e2c4ee5338cf599827.roa (raw, json)
Hash identifier:          8n/w2v0yqfP8RmKnqPIOxErrmY+khUyuH128c6kGcSM=
Subject key identifier:   1A:F2:97:E8:F0:52:CF:55:1C:C2:53:1F:F2:00:85:09:D7:24:53:DC
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E2182
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/9ce8ddfb13e9ac41a891d2e2c4ee5338cf599827.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4016::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926082 (0xe2182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=9ce8ddfb13e9ac41a891d2e2c4ee5338cf599827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:8a:dd:b5:c6:03:66:35:ee:cb:69:ff:26:
                    6d:fb:b5:e8:70:c6:33:82:91:79:21:e8:66:01:0b:
                    a1:78:1f:a6:c3:c3:f0:88:5c:6a:c8:aa:46:10:af:
                    1d:03:cd:c0:50:92:6e:6e:94:4c:fa:31:03:f9:ba:
                    21:c7:ec:19:40:ba:86:c0:c6:ed:c7:58:37:d1:5b:
                    0e:7d:c6:65:74:cc:ce:05:f4:bd:8d:b3:84:3e:23:
                    d5:bf:83:08:11:d4:02:ad:bf:5e:ee:d8:98:32:9b:
                    76:9b:1e:e0:fd:4c:8c:17:ed:c2:d2:e8:ce:35:96:
                    dc:6f:78:e2:29:0e:f1:b3:44:1b:da:7c:96:e6:f0:
                    1d:52:b1:9e:dd:c1:b9:64:ba:d0:60:b5:08:d8:92:
                    62:38:f3:df:eb:9e:d1:05:37:ae:42:0b:7a:7e:fe:
                    8f:7f:ac:c2:ca:33:d1:9d:4f:6c:21:c7:bc:8c:cc:
                    6e:c2:6a:d2:cc:98:ab:35:39:48:f6:1c:b5:95:63:
                    4a:79:8e:98:7f:ff:93:5e:b5:ef:a4:c0:7f:59:ed:
                    aa:9a:9a:2f:4e:32:a3:95:6b:61:61:7b:f6:6e:dc:
                    cd:78:e5:7c:ac:f2:97:e2:3c:23:8e:a6:86:95:7a:
                    6a:ed:b3:a5:1c:11:37:15:33:9e:1c:22:95:9e:9c:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:97:E8:F0:52:CF:55:1C:C2:53:1F:F2:00:85:09:D7:24:53:DC
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/9ce8ddfb13e9ac41a891d2e2c4ee5338cf599827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4016::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:0a:b7:5b:3e:7a:85:36:d2:61:0e:c1:a7:75:8e:3d:fa:
         f6:d8:05:d7:1d:ff:06:1e:73:42:eb:ec:a7:87:27:9c:e7:10:
         ae:a3:a3:ea:54:14:23:55:c4:98:11:22:e2:75:b3:f7:eb:34:
         96:2b:19:e4:92:72:60:b4:74:90:1c:8d:95:9b:4e:3c:0e:d3:
         12:01:9c:a2:ae:85:cd:35:5f:68:96:e4:99:e8:79:ad:be:7f:
         8f:cb:c6:c9:0f:a5:43:4e:e1:68:6e:04:50:67:22:e6:5c:eb:
         f3:e5:0d:12:d9:f1:7e:9a:a2:b0:b1:57:a9:31:e3:09:d5:4a:
         99:ca:11:4c:c0:86:de:10:52:78:98:42:4f:16:0a:0a:e3:7a:
         f4:b7:03:41:2e:79:60:b8:57:db:33:1d:bc:5d:b6:f9:df:e1:
         73:9b:47:c4:64:29:a2:f9:3e:58:c6:e5:46:ed:d4:bd:be:97:
         30:c7:f4:1f:c1:97:8c:d1:be:c8:90:2d:49:16:b1:23:19:47:
         8c:c0:08:11:03:0d:72:a0:8a:cb:0f:16:66:48:d1:2a:73:0a:
         c5:d7:08:c6:0c:a3:d5:09:38:01:2a:b3:0b:bf:d8:8b:72:18:
         f9:e8:3d:3f:ad:5b:83:16:c0:ce:44:88:70:12:01:4a:e9:68:
         9f:fc:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----