Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d9651c4eedef43a1225dd131d4b9bed32a922447.roa
File:                     d9651c4eedef43a1225dd131d4b9bed32a922447.roa (raw, json)
Hash identifier:          okfUTN8u4Vm+RFia6n4yl14jBp5Of4VrkeBVZrIYdrU=
Subject key identifier:   60:9A:90:20:24:3C:84:06:C5:87:EE:BA:6F:97:1B:6C:9F:7D:E5:D6
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DE126
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d9651c4eedef43a1225dd131d4b9bed32a922447.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     21433
IP address blocks:        2801:1f0:4028::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909606 (0xde126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=d9651c4eedef43a1225dd131d4b9bed32a922447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:79:6b:14:8b:e6:41:fd:72:b3:78:6d:c6:
                    b1:f0:97:77:bb:a1:f4:61:7b:f0:20:dc:65:b0:4a:
                    fc:43:e4:dd:f9:e3:85:09:78:50:63:84:2e:fd:7a:
                    f2:c0:18:18:8f:e0:3d:9c:a8:67:d6:4e:95:5e:87:
                    5d:f6:11:e9:46:41:53:fc:bc:33:a6:4d:40:4e:65:
                    e8:8c:82:10:6d:0c:75:8b:c0:6c:89:6a:07:54:94:
                    75:3f:b5:ec:52:0d:53:17:6d:8e:9f:f7:63:d3:2d:
                    be:57:71:43:0b:d1:8c:26:60:cd:a9:b2:a1:20:ff:
                    93:7f:68:e1:2e:dd:bc:73:cb:0d:13:ee:d4:ed:31:
                    98:6c:68:ff:ce:c1:10:b0:63:0b:8e:8d:8e:65:c4:
                    aa:b7:e3:0b:d0:e8:5a:bb:5e:43:cd:70:27:d3:55:
                    bb:e3:ac:75:95:6c:ea:01:65:57:1f:13:0a:ba:79:
                    8e:14:22:28:3c:f5:4c:38:77:2b:f3:ed:58:bb:df:
                    07:0a:6e:2c:1b:5a:83:eb:0b:fb:0e:eb:fe:13:fb:
                    92:93:bd:68:19:bf:43:e4:4f:5d:f5:87:65:b4:90:
                    dc:77:4e:78:67:24:65:7c:b5:35:5c:a2:13:b4:f1:
                    18:c9:b5:94:80:3c:75:8b:47:36:6e:c6:a4:fb:29:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9A:90:20:24:3C:84:06:C5:87:EE:BA:6F:97:1B:6C:9F:7D:E5:D6
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d9651c4eedef43a1225dd131d4b9bed32a922447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4028::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:3c:80:04:10:14:3e:e8:71:df:2c:69:f4:ab:67:68:e5:
         ea:56:df:30:9a:11:cc:73:ad:83:f5:5f:97:96:40:14:d2:40:
         41:78:17:cd:2f:ed:f6:0c:d2:ac:f5:6b:19:3d:5e:62:a1:8a:
         6e:54:ad:1e:31:ce:fe:74:fc:cb:2a:7a:32:03:65:6f:7b:4e:
         9d:cc:53:67:93:53:3d:a4:80:64:75:42:7a:05:59:6b:6c:c7:
         8b:fa:30:34:01:61:cd:39:a8:77:6e:ff:60:79:f6:1a:37:04:
         c1:a4:49:78:7d:ed:c8:a5:15:85:30:37:35:21:3f:d4:88:87:
         34:b0:26:79:3b:0f:63:05:0a:b7:c0:81:c2:4a:5d:57:cc:fc:
         e6:bb:13:82:98:54:12:34:4f:5a:00:d7:ac:08:5e:f9:7f:4f:
         e1:8b:df:70:b0:c3:24:7b:5c:6e:5b:d8:b0:27:05:15:17:1c:
         8b:3b:81:ed:de:50:47:99:4b:7e:4e:cb:45:96:09:32:2c:c3:
         62:58:01:bf:31:08:cf:3b:74:01:d1:e6:34:2e:51:f9:c2:74:
         87:ab:e1:f5:ea:4c:9a:0a:7a:11:ae:c9:83:52:0f:bc:d8:08:
         61:29:c8:13:98:11:e2:da:2b:95:15:87:6d:4c:be:de:27:3e:
         44:2a:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----