Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/509b65bb8faeeca69ba13bb1bf5449ed82d7a48a.roa
File:                     509b65bb8faeeca69ba13bb1bf5449ed82d7a48a.roa (raw, json)
Hash identifier:          7JkaA1IpuLHOWBrOpuOtTfmOuAEHoHVQk+JuuCo60aY=
Subject key identifier:   99:BB:DC:BD:4C:19:67:8B:A3:AC:10:6B:18:C5:C8:1B:D5:3B:19:9E
Certificate issuer:       /CN=974f10a6b41e1836c4132ece8b484c339fda32da
Certificate serial:       042DFC
Authority key identifier: 60:0D:6C:0B:A0:68:D2:5A:3C:45:FC:6A:DE:97:5A:A6:02:5B:5B:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974f10a6b41e1836c4132ece8b484c339fda32da.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/509b65bb8faeeca69ba13bb1bf5449ed82d7a48a.roa
Signing time:             Wed 24 Mar 2021 14:35:21 +0000
ROA not before:           Wed 24 Mar 2021 14:35:21 +0000
ROA not after:            Tue 24 Mar 2026 14:35:21 +0000
asID:                     27817
IP address blocks:        2801:16:a800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273916 (0x42dfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974f10a6b41e1836c4132ece8b484c339fda32da
        Validity
            Not Before: Mar 24 14:35:21 2021 GMT
            Not After : Mar 24 14:35:21 2026 GMT
        Subject: CN=509b65bb8faeeca69ba13bb1bf5449ed82d7a48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:e2:ad:24:80:a9:ae:56:1b:8f:44:50:d9:
                    ec:a1:dd:64:46:12:5d:ec:ef:e6:27:65:3e:06:3b:
                    a6:6e:05:64:08:9e:1a:1f:91:db:49:bc:5e:e3:0d:
                    25:f1:bf:0e:1e:d6:ab:4a:7a:cf:18:b7:ba:a9:9a:
                    fa:d1:5f:db:91:14:18:db:fb:15:95:af:0e:74:3f:
                    f3:8c:53:4f:36:23:9f:4d:0e:7a:d5:66:d2:d1:47:
                    b4:a8:e9:f9:2b:95:39:bf:e9:e5:99:c9:70:75:7a:
                    5f:67:b9:aa:9d:dd:c0:eb:28:32:08:88:e7:20:d7:
                    49:b1:20:8b:4d:e3:b1:1a:c3:82:05:12:ae:57:fb:
                    40:b9:63:b3:82:58:ca:9d:29:d7:29:d7:fd:db:e5:
                    c8:22:b5:8a:fd:18:55:bd:cc:d0:9f:93:4c:41:86:
                    4a:91:4d:18:3a:c4:8e:8c:ad:e7:aa:70:ec:26:7e:
                    02:35:0f:10:99:81:c4:c4:e5:7b:ff:33:55:aa:5f:
                    a8:57:25:c6:15:57:ce:6e:f1:03:03:39:23:91:e3:
                    4f:ee:ea:d0:e7:71:4f:c3:aa:1e:f3:53:24:c6:5d:
                    7c:d3:d3:fa:0a:ee:31:45:c0:c8:f9:43:8b:f5:9e:
                    6e:b2:79:bc:2d:8f:51:8a:ab:bd:84:dc:8a:54:51:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BB:DC:BD:4C:19:67:8B:A3:AC:10:6B:18:C5:C8:1B:D5:3B:19:9E
            X509v3 Authority Key Identifier:
                keyid:60:0D:6C:0B:A0:68:D2:5A:3C:45:FC:6A:DE:97:5A:A6:02:5B:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974f10a6b41e1836c4132ece8b484c339fda32da.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/509b65bb8faeeca69ba13bb1bf5449ed82d7a48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/974f10a6b41e1836c4132ece8b484c339fda32da.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:df:18:9a:f5:ed:2b:72:b3:a3:e8:32:31:82:ae:2f:01:3b:
         a9:7a:d6:57:80:b2:9a:77:56:50:02:5f:99:cd:8d:27:55:e2:
         2b:9a:20:83:8e:c2:59:3e:c6:07:5e:06:db:58:c8:ed:09:4b:
         25:ac:3b:2f:f9:a4:fe:d4:1a:0d:02:e3:f9:4c:18:27:21:ee:
         9d:f9:97:62:f2:3f:65:34:a4:7e:3d:84:c9:e8:c5:67:b7:ce:
         fa:88:69:41:b4:5f:27:9d:c0:15:68:ee:40:01:04:cb:26:0a:
         22:24:c3:ae:1d:be:e1:01:d9:ae:f4:b5:91:98:71:0c:18:27:
         34:78:14:aa:9d:0c:3d:dc:80:ad:f8:27:34:17:be:e7:02:89:
         c2:85:79:b8:5f:59:32:ee:d8:15:f4:29:d7:9d:95:d5:8c:f0:
         3d:a2:60:22:e2:da:32:29:89:93:d9:9c:fe:fb:d0:39:b9:95:
         13:a8:c2:b6:2d:52:29:44:da:bd:57:8b:c6:b9:62:79:04:d2:
         2d:4e:fc:77:b8:a5:58:fa:d0:95:7c:c9:86:dd:3b:ad:fe:a6:
         19:3c:3b:00:20:6b:e4:f7:91:57:90:2b:90:df:ca:d6:7f:b7:
         e9:cf:0a:d6:d6:14:a9:cb:ba:1f:be:65:68:eb:bb:72:7a:b5:
         cb:79:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----