Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d34a6a4ff74bad198d9e5e7ff5a2a4bfcb68fde7.roa
File:                     d34a6a4ff74bad198d9e5e7ff5a2a4bfcb68fde7.roa (raw, json)
Hash identifier:          jVPFKsgqfhYijb6TicqB1ytko+ZDq5f9HjP99v7BCjs=
Subject key identifier:   F4:30:0C:BF:34:AE:AB:28:28:11:E2:C0:92:29:49:D6:3E:D5:34:C1
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DEA79
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d34a6a4ff74bad198d9e5e7ff5a2a4bfcb68fde7.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:2020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911993 (0xdea79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=d34a6a4ff74bad198d9e5e7ff5a2a4bfcb68fde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ac:60:81:41:8a:8c:1f:92:54:60:17:8b:1e:
                    85:b7:4a:ff:3b:ed:8c:77:c5:6f:ee:41:99:1f:a2:
                    06:87:7d:1c:e3:65:9e:32:fc:ca:b7:f6:72:d3:dd:
                    2d:da:1b:70:45:58:b9:bf:e9:ff:23:32:31:25:f8:
                    a7:8a:03:a6:2c:00:ff:b5:32:51:30:1c:ad:56:19:
                    56:28:3f:36:60:6b:38:7d:32:e0:b5:a2:b4:56:10:
                    e7:52:ac:14:46:1f:f6:6b:50:46:36:42:98:f6:68:
                    e9:3b:b9:f8:7c:20:56:ad:b8:29:98:71:b5:69:47:
                    41:88:22:02:34:3f:ad:58:b0:35:5e:ed:78:a5:9b:
                    ff:bd:1f:3a:a8:a3:04:01:af:2e:f2:2d:3b:98:6a:
                    c0:18:4d:c2:79:df:76:1e:2c:0a:5d:fd:ce:e8:f2:
                    a3:d1:b7:6d:b1:20:20:fc:ab:6c:b9:d2:11:77:39:
                    23:80:6e:60:1b:36:e1:a9:de:2c:70:9d:07:56:8b:
                    31:e3:2f:32:49:e9:cb:b5:a0:83:b9:11:a8:4e:ae:
                    78:6f:40:fe:0e:09:be:76:4c:8d:50:98:bd:02:0c:
                    41:e6:f3:bf:f1:08:6d:cb:d5:1d:74:3e:cb:1b:9f:
                    bc:75:11:49:6d:b9:9e:14:62:b3:d8:cc:76:97:91:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:30:0C:BF:34:AE:AB:28:28:11:E2:C0:92:29:49:D6:3E:D5:34:C1
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d34a6a4ff74bad198d9e5e7ff5a2a4bfcb68fde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:2020::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:80:7f:d7:81:ab:ab:97:cf:48:f8:ae:8c:b3:1c:39:c0:
         ec:40:59:77:45:87:d3:b3:28:a8:eb:e4:0b:59:0b:ef:aa:2f:
         8f:70:76:69:ed:4a:3c:c2:ec:9e:2c:69:b6:36:ea:e9:0e:fd:
         92:db:bf:89:9c:90:36:3a:2d:b1:41:b9:ae:a8:a0:db:69:1a:
         e5:f7:3d:71:d7:50:b0:c1:92:34:ca:dc:6d:68:91:dc:cd:c9:
         0c:8d:d3:f4:b4:da:f4:2e:28:67:b4:dc:a3:a6:e0:29:8a:37:
         66:95:0e:17:e2:65:3f:10:3d:df:0c:31:53:6d:31:dd:8e:63:
         e0:bf:f8:0b:ff:16:02:f3:94:6d:20:d0:8c:52:9c:f0:59:7d:
         20:dd:a2:49:13:f9:69:48:6e:45:11:ae:6c:74:e7:d2:07:72:
         ba:4e:03:91:ab:b6:7e:d3:ca:d7:ba:83:dd:c1:83:2b:7c:ae:
         52:98:87:b1:1d:f2:6c:3b:90:11:2f:70:a3:98:90:65:1b:3c:
         f8:59:30:88:d8:b3:17:0c:d0:11:68:cb:34:37:0e:1b:06:bf:
         23:32:45:53:70:3b:42:87:1c:0a:f4:fe:dd:46:40:f6:5b:0c:
         73:f3:dc:d5:8e:32:2f:6c:e4:d0:16:cb:bb:34:00:2f:ec:13:
         5e:fa:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----