Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/11349c71813e15c9ecdbcb51ea66e9366cebadef.roa
File:                     11349c71813e15c9ecdbcb51ea66e9366cebadef.roa (raw, json)
Hash identifier:          YfJNiIJOmdn5+ZahXmEcj8Ai4ADvQxhbpBMjYYZR+Bg=
Subject key identifier:   F0:2D:6C:F4:5E:49:F3:63:E9:37:EB:50:F9:1E:95:FA:9D:B5:C3:0C
Certificate issuer:       /CN=55749e5629796ab0615462147e57520811c115c5
Certificate serial:       0D336D
Authority key identifier: 6B:51:EB:5C:8E:DA:BC:F6:9D:E6:E2:C8:10:8E:07:B1:47:4A:89:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55749e5629796ab0615462147e57520811c115c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/11349c71813e15c9ecdbcb51ea66e9366cebadef.roa
Signing time:             Wed 24 Mar 2021 14:36:35 +0000
ROA not before:           Wed 24 Mar 2021 14:36:35 +0000
ROA not after:            Tue 24 Mar 2026 14:36:35 +0000
asID:                     27817
IP address blocks:        2801:1a:b000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865133 (0xd336d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55749e5629796ab0615462147e57520811c115c5
        Validity
            Not Before: Mar 24 14:36:35 2021 GMT
            Not After : Mar 24 14:36:35 2026 GMT
        Subject: CN=11349c71813e15c9ecdbcb51ea66e9366cebadef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:a1:70:30:52:48:d6:4c:5b:f7:35:af:3c:
                    f9:ee:99:f1:fe:e4:37:ff:19:e1:da:5c:07:46:50:
                    2d:91:be:f8:39:f0:82:7e:42:3a:6c:c1:69:c3:3b:
                    36:94:5d:11:94:e1:1c:39:e6:34:21:2e:b8:a3:ac:
                    7c:93:83:9b:5c:72:1a:b6:da:fc:f4:d9:a5:c6:ca:
                    aa:c1:13:14:4d:08:b3:3a:3c:20:b5:4b:11:d8:e2:
                    ed:b7:bd:b7:e7:ec:ad:3e:e6:81:c5:29:1b:92:c9:
                    b0:47:27:59:9a:fd:8d:19:f8:02:40:a0:de:66:3a:
                    94:24:e9:bb:a3:52:1a:ac:54:31:65:87:e9:a2:4c:
                    ea:63:c3:32:68:69:fc:b3:ca:6b:d7:f1:35:50:17:
                    79:cb:dc:60:4e:20:83:72:60:c6:97:bc:f5:54:1a:
                    24:7e:4f:3c:8a:e4:47:b0:9d:66:5f:10:08:1d:d3:
                    d8:48:67:63:d6:7a:10:fd:0b:7f:c4:e9:7b:42:ba:
                    17:5a:77:f6:dd:30:6a:5d:fe:d7:3f:00:62:65:36:
                    48:78:3a:16:41:f9:3c:e0:ed:9d:c3:18:82:5b:5c:
                    bb:2d:ea:85:14:c2:3e:13:22:7b:24:bf:a9:0b:93:
                    e2:04:bd:18:e2:90:f6:20:f4:8b:d0:8d:b2:70:8e:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:6C:F4:5E:49:F3:63:E9:37:EB:50:F9:1E:95:FA:9D:B5:C3:0C
            X509v3 Authority Key Identifier:
                keyid:6B:51:EB:5C:8E:DA:BC:F6:9D:E6:E2:C8:10:8E:07:B1:47:4A:89:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55749e5629796ab0615462147e57520811c115c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/11349c71813e15c9ecdbcb51ea66e9366cebadef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e04ffc5f-7f61-4595-abcb-7ae80c103f57/55749e5629796ab0615462147e57520811c115c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:68:fb:aa:3d:39:d0:11:2f:5e:e8:95:c3:14:d4:c4:90:
         48:fe:4a:2e:cb:27:65:e7:cd:a0:bb:cc:a0:4e:76:e3:14:24:
         cb:ab:bd:bd:c3:d1:3d:17:c3:ca:c1:4e:1f:79:89:87:90:e3:
         bc:82:f2:43:ce:6c:4d:58:ce:93:3d:61:89:22:e5:f2:ef:5f:
         28:d3:06:e0:2a:74:07:20:eb:86:c0:41:7e:44:28:cd:bb:7d:
         14:23:77:22:48:81:44:a7:7a:6b:70:36:60:24:62:51:d3:bf:
         fc:c0:fe:d2:d2:22:4a:01:9a:71:5f:25:f4:0a:03:59:52:d4:
         fd:e3:77:54:58:4b:8b:a6:e1:9e:54:32:80:27:bf:16:0b:c8:
         97:05:f6:49:ee:a4:65:56:8a:81:d5:be:46:ff:3a:37:d6:7d:
         ee:5b:71:61:54:99:9b:52:bd:f5:b0:60:5e:c0:96:40:45:4c:
         4b:3a:1a:d4:c7:1c:19:92:e0:ce:1e:b8:62:19:ee:b6:22:d9:
         4d:fe:4e:a3:14:db:19:c7:87:44:e8:9b:4d:89:78:1d:45:4d:
         83:a7:3b:69:03:1d:8b:f9:fd:1f:84:2b:3c:30:72:bb:1d:c7:
         97:22:de:6c:b8:1d:f4:ea:74:ba:4e:58:c9:e7:c0:9b:a6:79:
         42:fa:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----