Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/dfb3709d03054bf601151748d101453a841c7ec9.roa
File:                     dfb3709d03054bf601151748d101453a841c7ec9.roa (raw, json)
Hash identifier:          HHfvLWopX/ZxDbjf7ToOjYudsJn3eROpmo02qb1s5a4=
Subject key identifier:   85:E1:FC:23:AA:12:8B:AA:F1:FE:DF:1E:DF:C5:2D:74:CC:C9:12:E8
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DE443
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/dfb3709d03054bf601151748d101453a841c7ec9.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     21433
IP address blocks:        2801:1f0:4028::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910403 (0xde443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=dfb3709d03054bf601151748d101453a841c7ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:18:00:57:6c:fe:9d:12:09:ff:4a:83:7c:
                    db:8b:02:95:7d:63:3e:11:61:12:f4:cc:2d:26:16:
                    2b:65:06:d0:23:43:21:2c:b4:96:21:d5:39:39:39:
                    2b:bc:a0:a9:36:20:71:ca:d8:75:e4:26:89:c7:7f:
                    1c:7a:a4:90:9a:38:2e:ca:cc:fc:3e:61:dc:74:85:
                    41:47:e8:41:bb:03:6c:68:8a:9b:d7:4a:f3:03:2d:
                    c5:49:b6:b7:a0:d2:4b:33:6b:b0:d7:29:73:ea:78:
                    6a:88:70:0b:12:f7:6a:2f:90:9d:6a:4b:e9:f8:d0:
                    a8:6c:ac:4e:6a:b9:a9:12:c8:d0:49:87:98:1b:d6:
                    f3:f9:4d:1a:2c:cf:7c:07:88:8a:11:e0:4c:b9:48:
                    05:7c:be:5b:24:37:b3:a8:45:b9:bb:82:9f:bf:a2:
                    46:26:1d:2f:3b:89:b2:73:9b:32:b4:80:a9:17:6b:
                    c7:6c:b9:bd:40:41:8e:aa:6e:a4:a3:b9:89:e3:63:
                    d7:d0:91:81:bd:6e:f4:4e:30:50:0c:8f:77:a4:01:
                    60:17:db:94:e2:28:fb:86:72:1a:39:74:53:1b:a9:
                    b4:f8:1f:3d:12:03:68:19:00:a2:f8:2e:03:e8:5d:
                    d5:84:86:42:90:56:31:48:89:9b:b0:66:18:45:37:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:FC:23:AA:12:8B:AA:F1:FE:DF:1E:DF:C5:2D:74:CC:C9:12:E8
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/dfb3709d03054bf601151748d101453a841c7ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4028::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:25:14:c0:c2:74:d5:d3:06:14:73:5a:31:f7:49:e5:c5:9b:
         79:dc:60:8a:0b:9f:c2:73:d9:9c:39:ba:9a:30:37:ca:97:1e:
         b1:41:22:97:78:5c:05:36:bb:fa:e0:bc:05:3e:1f:e7:3c:29:
         05:bd:d7:2a:94:4a:42:d8:b4:b1:0e:21:f8:cc:83:6f:dc:ff:
         d6:b9:32:c5:0b:84:59:db:70:9c:1d:93:5a:8d:99:0c:00:a4:
         7b:28:07:ce:40:4d:69:15:49:59:a0:23:c1:b0:e2:39:b4:11:
         d5:d4:ca:49:5a:db:ff:3c:b6:22:07:ce:63:55:80:41:a4:78:
         eb:a2:93:0f:2e:a1:05:63:29:68:63:c0:23:dd:8c:ed:49:fc:
         9c:dc:9c:b7:6f:14:a9:ff:c7:72:15:bf:97:45:1d:ce:10:1b:
         09:29:8d:8a:4d:2b:96:dc:17:e1:1a:28:a4:09:90:a2:6a:31:
         be:92:4c:8c:af:80:0e:74:d6:2c:f4:71:8a:dd:d5:34:e4:5a:
         03:d4:1c:1a:62:0c:fb:ea:64:87:e8:90:6d:00:61:a1:66:44:
         4d:9b:a8:70:5c:ad:9d:6c:9e:07:4c:77:77:d6:21:1a:14:f3:
         10:e8:16:e8:02:28:bc:f5:d1:89:aa:ed:68:19:14:63:a9:2c:
         7e:20:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----