Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f1f24235-0751-4b8f-91a4-886bcf7ead36/a9e21ab2f1246f8a8f6d71179a8685f2739fbec3.roa
File:                     a9e21ab2f1246f8a8f6d71179a8685f2739fbec3.roa (raw, json)
Hash identifier:          FN/dWBNh4V/+PjkSuOPQHiqqxtS2wHqAVd0KoMPFzs0=
Subject key identifier:   10:CE:9F:4D:59:15:22:55:30:0A:6A:BC:37:3C:66:B6:D3:EE:32:4D
Certificate issuer:       /CN=6ad4195398fca00018bd9e6342ae7807c04d9ae4
Certificate serial:       0211E4
Authority key identifier: 5E:00:6C:3A:62:A1:97:7B:A0:70:53:02:74:1E:22:46:47:F4:8F:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad4195398fca00018bd9e6342ae7807c04d9ae4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f1f24235-0751-4b8f-91a4-886bcf7ead36/a9e21ab2f1246f8a8f6d71179a8685f2739fbec3.roa
Signing time:             Wed 24 Mar 2021 14:36:10 +0000
ROA not before:           Wed 24 Mar 2021 14:36:10 +0000
ROA not after:            Tue 24 Mar 2026 14:36:10 +0000
asID:                     13489
IP address blocks:        2801:156::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135652 (0x211e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad4195398fca00018bd9e6342ae7807c04d9ae4
        Validity
            Not Before: Mar 24 14:36:10 2021 GMT
            Not After : Mar 24 14:36:10 2026 GMT
        Subject: CN=a9e21ab2f1246f8a8f6d71179a8685f2739fbec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:d2:8c:77:5f:6c:3a:7e:78:b4:81:7f:01:
                    5d:24:30:4a:b0:fd:e0:12:a2:a6:cf:1b:78:72:35:
                    55:3d:16:5e:47:a5:4b:fd:2a:1c:ff:22:7a:7c:13:
                    fe:ba:af:ff:59:f0:51:8f:e1:1e:92:e1:3a:21:04:
                    32:62:3e:f3:8e:75:52:96:2f:41:b0:0b:0c:82:b6:
                    74:e2:60:3d:ad:9a:9f:e7:19:30:45:c6:85:11:3a:
                    84:8f:04:e1:2a:4a:84:0b:23:83:2e:42:a0:90:8a:
                    6f:b4:66:8b:24:9b:43:16:24:7e:72:52:be:95:83:
                    b2:fa:91:79:b7:f3:52:85:76:7c:2c:0a:9c:6e:76:
                    de:5f:73:e1:0d:bb:7c:0a:2a:d3:8b:b7:82:fc:a4:
                    ab:56:50:c5:f4:e5:64:d2:e3:0f:b1:1c:57:00:1e:
                    47:97:5b:fd:28:95:a0:23:16:af:29:fc:28:bf:0f:
                    3d:ad:77:42:a0:99:63:ce:58:c2:b6:68:60:b4:24:
                    b2:02:ef:71:76:d4:a5:ec:c7:9c:ea:f4:c1:27:f4:
                    35:49:40:59:c2:82:99:94:1a:7d:8c:d1:b9:a8:0d:
                    89:78:eb:97:0a:e7:c2:90:1b:79:7e:d0:31:17:69:
                    81:b6:01:b0:8c:f2:14:0c:2c:d2:30:ea:10:a5:e6:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:9F:4D:59:15:22:55:30:0A:6A:BC:37:3C:66:B6:D3:EE:32:4D
            X509v3 Authority Key Identifier:
                keyid:5E:00:6C:3A:62:A1:97:7B:A0:70:53:02:74:1E:22:46:47:F4:8F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad4195398fca00018bd9e6342ae7807c04d9ae4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f1f24235-0751-4b8f-91a4-886bcf7ead36/a9e21ab2f1246f8a8f6d71179a8685f2739fbec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f1f24235-0751-4b8f-91a4-886bcf7ead36/6ad4195398fca00018bd9e6342ae7807c04d9ae4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:156::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:75:4d:e3:90:60:4a:3c:6c:f1:ca:09:9f:03:31:68:3f:85:
         13:0c:74:99:4a:0e:a3:57:85:89:56:33:42:b1:eb:c4:a6:a2:
         15:6e:98:15:7b:bf:26:0b:ac:b5:a9:af:83:31:0c:8c:fd:25:
         35:30:5b:d3:76:63:5b:bb:a3:c3:91:42:5e:f6:a7:92:f5:8f:
         9b:6b:0b:7b:4e:1b:5a:35:98:3e:35:17:b5:93:3a:ef:fd:f2:
         34:19:bc:c6:f6:88:a3:9f:a1:f0:ad:5c:e1:ac:35:f0:18:2b:
         30:37:1e:6c:39:5d:91:ff:c5:20:a8:bf:15:72:39:7b:41:d9:
         ca:ba:67:17:6e:78:e9:6d:60:bd:17:60:8a:99:e5:11:63:a5:
         1d:59:fc:24:6b:da:9c:0e:c0:91:a3:07:93:95:74:3e:a2:f0:
         58:76:df:75:15:26:3f:1d:38:16:cd:29:aa:8f:d0:0d:0f:6c:
         83:73:f0:21:f1:8c:b8:60:51:27:68:e7:2b:a9:d0:40:e9:7f:
         3a:42:33:b3:25:94:04:28:a5:eb:65:56:07:1a:3b:9e:4c:8d:
         e9:cc:7f:c0:59:01:6d:24:dd:f8:66:3a:dd:1c:c8:a6:fb:15:
         ce:8a:bb:7e:d4:97:b1:c5:39:b3:e7:52:f3:bc:9b:e0:ee:d8:
         53:e1:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----