Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/e8b4551a60d2fff560607bedcc5d0a5432cb28bb.roa
File:                     e8b4551a60d2fff560607bedcc5d0a5432cb28bb.roa (raw, json)
Hash identifier:          n3qLKrEiJXTWKvrjdPYWXP+fzptcIAYJ7OW+kua0Yeo=
Subject key identifier:   63:0E:51:46:7D:FE:DE:D9:1D:A8:67:E7:52:F9:4F:B3:B7:4B:2C:54
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E32F5
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/e8b4551a60d2fff560607bedcc5d0a5432cb28bb.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4021::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930549 (0xe32f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=e8b4551a60d2fff560607bedcc5d0a5432cb28bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:4b:e9:46:db:85:8a:4c:ea:14:03:19:3e:
                    ef:f3:5f:10:da:b3:11:ce:fd:42:f9:80:42:1d:45:
                    f8:0b:93:7f:4f:45:7f:b4:67:8d:43:1c:36:67:88:
                    1c:a2:bf:e5:92:9b:55:2f:5a:bd:d8:ca:b6:d5:88:
                    13:69:40:c2:1e:31:0d:51:e9:98:34:8d:69:f1:36:
                    a9:f6:73:c9:24:1c:9b:6b:c9:d8:c5:8d:18:d6:50:
                    6a:ca:82:c9:d4:75:a8:81:b8:69:b0:1d:5b:1d:94:
                    52:d0:7f:be:eb:13:95:1b:b5:e0:98:e2:01:23:7d:
                    ef:47:1b:7b:d7:6a:75:41:97:81:3f:c1:98:4e:42:
                    3b:38:94:35:55:47:e2:2d:e0:dd:a8:67:24:94:65:
                    f2:df:fc:38:9c:a1:9e:47:36:e7:e1:f8:7f:d0:f0:
                    1b:8e:89:0a:b8:0d:c8:a7:fb:65:85:75:5e:81:5d:
                    6f:0d:12:aa:ff:f2:df:c5:2a:64:fc:88:29:ef:50:
                    f7:ee:9b:1b:eb:47:e9:32:ba:27:80:3e:a8:c8:f2:
                    51:7a:14:15:9c:dc:e8:5a:42:e3:19:f3:26:f5:9f:
                    aa:bd:aa:35:7f:28:9a:f1:55:a6:62:bf:ae:c3:15:
                    64:08:fa:c8:f5:84:8c:3a:80:46:20:aa:ab:ef:18:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:51:46:7D:FE:DE:D9:1D:A8:67:E7:52:F9:4F:B3:B7:4B:2C:54
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/e8b4551a60d2fff560607bedcc5d0a5432cb28bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4021::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:a6:3e:3a:9b:0b:b6:cc:13:72:00:a2:77:82:19:0d:7f:9e:
         52:95:c5:6a:6a:63:28:31:35:dc:96:6d:c2:be:b1:0a:ef:b0:
         1d:6d:0e:20:0f:8b:bd:69:a7:50:2d:1b:ae:94:64:c8:5b:32:
         31:d5:93:bd:42:00:18:68:26:d1:00:f8:6d:ee:f1:35:81:a0:
         85:67:d1:66:0a:c9:6d:39:2d:93:04:55:87:98:6e:ec:4a:a2:
         fa:0d:b1:78:7d:40:ad:cd:7f:79:56:d3:49:6c:9a:b7:20:aa:
         0e:a1:e9:fe:12:c4:15:df:0d:28:6e:3e:c9:8a:f7:b6:f6:55:
         cb:a5:9f:29:c2:2e:35:51:d3:2c:ba:c2:2b:59:e9:d1:c4:56:
         7b:f7:8a:08:ad:94:95:53:c5:ad:e2:4a:9f:8e:d7:0c:bd:bb:
         2e:27:4e:76:37:4e:e0:ac:56:13:ea:28:ba:a6:07:af:aa:34:
         50:2a:a1:cc:ff:49:6c:76:be:92:2c:d0:2d:0f:ef:b9:93:b0:
         ac:2a:0b:ef:27:70:92:7c:47:ec:c3:76:61:b0:0d:37:bf:e3:
         4c:17:e3:5b:25:3a:f6:00:50:75:c6:74:89:2c:24:84:c7:9a:
         e5:62:1d:f5:67:a7:4f:8c:5c:42:0e:92:7a:fc:98:08:e8:7b:
         01:c6:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----