Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/adc38f870612fddf93ef67c1168f9b8fba3062e4.roa
File:                     adc38f870612fddf93ef67c1168f9b8fba3062e4.roa (raw, json)
Hash identifier:          BJccVhztRT+7Rwg2G5ZkWM5fzF7bogLO3yF5eiCM4rU=
Subject key identifier:   DA:85:CC:B2:DF:42:61:7C:0E:24:73:FA:5A:CD:E8:FD:7E:89:4E:53
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DF3A4
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/adc38f870612fddf93ef67c1168f9b8fba3062e4.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914340 (0xdf3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=adc38f870612fddf93ef67c1168f9b8fba3062e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:92:54:f5:eb:24:7a:cd:d9:bf:d8:2d:01:
                    fa:0e:e7:29:68:e1:95:d2:51:5f:05:e5:f8:95:aa:
                    a3:a3:18:ad:cf:98:c9:b8:fc:de:61:67:77:ed:91:
                    a8:29:75:ab:0c:d8:ca:62:36:36:db:86:ae:53:5f:
                    bd:ec:75:b3:8c:40:6d:fd:c5:18:71:11:20:a7:b1:
                    1b:5a:20:22:e6:d3:db:e6:15:9a:97:32:c9:9d:39:
                    0b:3f:9c:d0:04:e0:31:00:0f:d2:ab:6f:b4:b8:23:
                    5e:7d:6f:2d:b2:63:b2:d5:d6:60:8b:44:48:6c:72:
                    7e:8d:64:8c:aa:6e:a5:5d:83:2b:d5:03:04:0f:ba:
                    27:b4:a9:fc:13:25:f9:0d:e7:33:2a:71:aa:95:a0:
                    a5:70:0d:b4:5b:ce:b7:51:a9:8c:27:b7:4a:b1:23:
                    06:87:9e:61:27:de:65:b7:9b:05:cb:65:7e:55:ee:
                    9e:90:d4:ed:93:16:73:e3:07:41:16:27:f0:ab:b4:
                    5e:58:9f:1a:2c:5e:8e:09:57:ab:ff:dc:00:5b:4f:
                    1c:e6:d9:19:00:db:a6:10:74:fb:3e:82:e0:af:47:
                    ed:55:0a:6b:3e:35:cf:ed:a3:14:86:ea:38:1b:58:
                    45:22:86:59:12:a2:d2:e7:f2:6f:23:3d:6d:ca:1b:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:85:CC:B2:DF:42:61:7C:0E:24:73:FA:5A:CD:E8:FD:7E:89:4E:53
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/adc38f870612fddf93ef67c1168f9b8fba3062e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4004::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:0f:32:13:86:91:17:57:65:0c:21:3a:d5:76:e1:f2:38:63:
         a4:21:f3:ec:17:78:b8:d3:31:28:10:42:f2:9e:d2:f2:c7:51:
         83:70:6f:39:68:6a:92:b6:03:37:43:3d:8e:0f:ed:8e:5d:55:
         15:b4:e6:67:03:14:69:a0:2f:5d:e0:eb:a9:b4:9a:a6:77:87:
         48:0a:71:01:39:2a:67:f6:ee:58:09:3a:39:e2:f7:70:d9:d0:
         9c:8b:4c:7b:ac:2d:20:90:af:d9:ce:f4:0c:ae:e5:64:4b:1c:
         32:cd:c7:23:4e:79:13:f6:3f:66:40:2f:96:38:5e:c2:01:90:
         fd:12:91:b8:1b:5e:c1:de:b1:b6:65:af:f0:97:37:30:03:32:
         68:3b:44:12:e7:9d:9d:d3:10:c4:8a:af:19:b3:56:8a:77:9c:
         6d:70:48:e4:c4:46:b7:77:1e:e4:a6:b5:eb:ad:c2:ac:50:bf:
         d7:73:4a:57:60:1a:b3:cf:10:06:6f:84:7f:2d:50:d3:e0:7e:
         f1:9d:e3:4a:61:f4:e5:ba:a7:3d:bb:62:44:c7:8e:e6:3e:20:
         a2:07:61:5f:2a:ed:32:10:54:c6:f9:f8:ad:4e:6f:fa:fb:3b:
         a2:47:fa:32:58:ab:9a:83:0f:1c:a7:b3:68:93:86:0f:d5:43:
         6a:2a:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----