Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/04155c6bbeae9e87e37303eac58d90defffd9d82.roa
File:                     04155c6bbeae9e87e37303eac58d90defffd9d82.roa (raw, json)
Hash identifier:          g3fFNlEGr/PW9FFgbnyNwjKkN22vqWMm6B4hxX6JBVA=
Subject key identifier:   74:D0:5E:17:46:C1:CB:38:EC:5E:B4:C0:5E:F6:60:67:18:CC:56:21
Certificate issuer:       /CN=c51088545d67fa073263cda959bf704f45a92d2e
Certificate serial:       038CF0
Authority key identifier: 9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/04155c6bbeae9e87e37303eac58d90defffd9d82.roa
Signing time:             Sat 04 Jun 2022 16:56:13 +0000
ROA not before:           Sat 04 Jun 2022 03:00:00 +0000
ROA not after:            Tue 04 Jun 2024 03:00:00 +0000
asID:                     18747
IP address blocks:        2801:111::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232688 (0x38cf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51088545d67fa073263cda959bf704f45a92d2e
        Validity
            Not Before: Jun  4 03:00:00 2022 GMT
            Not After : Jun  4 03:00:00 2024 GMT
        Subject: CN=04155c6bbeae9e87e37303eac58d90defffd9d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:88:0a:c6:32:8d:15:55:c8:47:e7:9b:24:
                    d0:c0:7a:37:29:1a:29:ea:43:11:ec:42:77:8d:82:
                    54:9f:0b:1e:28:f2:f6:64:be:2e:b1:4b:21:78:32:
                    f7:e3:ed:dd:2f:6a:c6:98:c2:8a:8d:32:f9:d5:ca:
                    5e:fe:f8:cc:af:2a:fe:3c:18:c8:8a:32:ef:b2:0e:
                    0d:33:5a:fb:01:3a:65:66:e0:9b:72:d3:56:b7:d6:
                    65:29:18:43:15:69:2b:cc:47:71:a7:9a:cf:99:b1:
                    83:bc:24:ce:8d:c4:ca:81:72:e7:3f:f4:1b:52:95:
                    18:68:4c:fa:db:ad:8d:45:9c:0e:51:71:b1:3e:20:
                    89:6e:af:5f:ba:89:00:de:1e:e0:cb:f0:a9:4a:70:
                    b9:f0:6d:6b:ab:00:d0:8f:fd:a2:18:6c:90:2f:86:
                    4a:a9:6c:e4:71:0f:81:8b:db:22:98:aa:82:51:a9:
                    10:27:b5:99:b3:ff:0e:43:4f:27:7b:e2:5a:de:55:
                    a2:e8:9e:35:b9:ea:b5:6f:b1:e9:18:f5:9e:b3:9d:
                    6e:cb:a7:b8:46:86:13:0f:f9:ba:73:e5:5b:26:bd:
                    ce:8f:a6:6d:60:d6:05:ed:c2:24:f1:a9:9f:92:7b:
                    8d:0d:8e:d9:e4:a4:63:4a:06:48:1e:8b:ef:54:30:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D0:5E:17:46:C1:CB:38:EC:5E:B4:C0:5E:F6:60:67:18:CC:56:21
            X509v3 Authority Key Identifier:
                keyid:9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/04155c6bbeae9e87e37303eac58d90defffd9d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c51088545d67fa073263cda959bf704f45a92d2e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:15:62:8d:e7:63:6c:5e:20:4f:4e:1b:eb:13:db:a4:3b:1d:
         39:6d:a7:97:d9:45:73:c2:00:84:c0:31:8c:a8:a6:0c:a2:06:
         90:3d:28:ca:c4:77:f9:46:c4:f2:e0:20:6b:d2:ed:3a:a1:59:
         97:5d:c6:df:6e:97:a4:0a:64:62:87:b2:2d:72:4d:84:d7:c0:
         c2:16:58:00:61:06:cd:c3:8d:ed:1d:7f:a2:db:5e:fe:1f:d0:
         5c:ce:99:f5:d1:fe:28:db:9c:3d:16:09:c0:3b:07:13:5a:6b:
         6f:4f:8a:b9:81:ec:cf:3b:5c:43:9e:96:95:6d:8b:0a:18:c4:
         e6:6e:5a:7e:70:68:5c:82:71:7c:a8:8b:e4:f8:cf:f9:39:af:
         17:a8:1f:84:12:3b:dd:79:5f:4a:9d:4a:bb:37:88:ff:fc:19:
         ea:60:47:4e:39:7e:fe:74:c3:8a:4b:28:21:69:9b:e3:47:3f:
         21:e3:d1:17:2f:50:b6:f1:5f:bf:7d:0a:ee:6f:2f:86:79:f1:
         77:ee:84:43:8c:58:c7:ee:53:06:ba:5d:de:e3:d5:6d:ed:f0:
         b1:e6:0c:b5:64:3e:75:ea:c8:27:d9:d2:58:6d:f9:85:0a:c4:
         6f:2e:9e:5c:61:3c:e4:99:aa:7a:28:aa:07:6c:cd:0f:2e:14:
         ac:4f:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----