Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/3d96dc595ae72c13d720bec366891dacc4fd0adf.roa
File:                     3d96dc595ae72c13d720bec366891dacc4fd0adf.roa (raw, json)
Hash identifier:          lf+aYYH+FqveLLnbZftHWtHEay7Owb8AUwef8JmC8k0=
Subject key identifier:   21:A9:06:47:05:95:C3:E2:88:56:14:86:0A:99:9C:95:A4:99:CA:1A
Certificate issuer:       /CN=c51088545d67fa073263cda959bf704f45a92d2e
Certificate serial:       0ACD
Authority key identifier: 9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/3d96dc595ae72c13d720bec366891dacc4fd0adf.roa
Signing time:             Fri 07 Jan 2022 13:17:16 +0000
ROA not before:           Fri 07 Jan 2022 03:00:00 +0000
ROA not after:            Sun 07 Jan 2024 03:00:00 +0000
asID:                     14664
IP address blocks:        2801:111:2::/48 maxlen: 48
                          2801:111:3::/48 maxlen: 48
                          2801:111:4::/48 maxlen: 48
                          2801:111:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2765 (0xacd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51088545d67fa073263cda959bf704f45a92d2e
        Validity
            Not Before: Jan  7 03:00:00 2022 GMT
            Not After : Jan  7 03:00:00 2024 GMT
        Subject: CN=3d96dc595ae72c13d720bec366891dacc4fd0adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bf:72:80:71:34:8b:37:e5:e9:ca:89:74:12:
                    df:1c:ac:bc:2e:db:e0:d5:67:f9:c1:6e:2e:8c:f7:
                    0f:5e:e5:13:1c:c4:9f:b1:82:4d:ab:98:c7:11:03:
                    cc:4b:e2:5a:f6:72:ec:b5:78:ea:e3:69:5a:dd:57:
                    88:f0:74:29:b4:85:f7:ac:fa:20:2b:44:a5:41:e5:
                    46:fa:e4:4c:62:12:7f:73:5f:c9:6e:5c:38:68:bc:
                    58:8a:b8:c3:2d:5a:3c:50:47:09:4e:8b:62:70:d5:
                    87:20:61:8c:ca:fa:e2:f5:2c:55:79:ff:42:40:48:
                    a8:cb:c5:4c:9a:6f:e1:21:f0:b7:93:b9:54:b7:5e:
                    21:2e:3d:10:5a:e8:d1:ef:91:88:b9:f8:f3:ab:7a:
                    97:68:e9:55:84:6c:9b:ea:80:57:09:8d:3a:bd:63:
                    8d:22:be:dd:7a:40:af:c9:da:3d:8f:f2:43:3e:d9:
                    1b:56:e6:f8:eb:89:74:1e:c3:b1:91:4d:0b:ee:bc:
                    d0:d8:5f:95:69:4a:47:74:14:7d:04:2e:59:50:af:
                    50:5d:33:d8:14:17:0a:1d:ba:f3:1e:41:33:af:31:
                    24:f3:4b:d7:c9:6e:c8:e9:cd:ed:f6:02:ce:f2:07:
                    01:79:ba:61:d2:cf:5c:5a:68:53:36:c7:78:05:1f:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:06:47:05:95:C3:E2:88:56:14:86:0A:99:9C:95:A4:99:CA:1A
            X509v3 Authority Key Identifier:
                keyid:9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/3d96dc595ae72c13d720bec366891dacc4fd0adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c51088545d67fa073263cda959bf704f45a92d2e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:2::-2801:111:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:9c:62:0f:af:55:9e:ae:ba:a4:77:17:5b:91:90:99:ee:
         6c:98:fa:85:33:a8:a2:af:f6:47:9b:72:81:85:b0:76:6f:32:
         4b:66:dc:76:74:09:81:e1:2f:68:00:60:f7:8e:bf:a3:df:ee:
         19:4b:20:aa:a2:54:87:64:6b:19:2e:4b:16:95:36:e8:ea:fc:
         6f:5e:fd:ec:84:94:9c:f7:90:86:1e:86:7f:58:95:3e:5b:01:
         46:17:41:8f:1a:22:d3:e3:3b:23:b8:b2:a1:5f:0f:20:db:e9:
         0e:e0:eb:d8:a5:be:72:42:e9:05:02:3c:2c:56:a9:f5:98:bb:
         21:ee:5b:de:aa:dc:02:2c:81:6e:20:e7:b7:56:03:12:92:62:
         75:66:c4:ff:3e:e4:66:5a:de:af:5a:28:9b:96:71:90:51:1e:
         33:96:80:01:f7:c5:01:70:75:bc:de:8f:c8:a7:de:de:72:73:
         cd:52:b8:d1:47:99:85:b2:be:99:cb:6e:e0:d0:fa:e1:bb:b4:
         b0:75:0a:2f:d9:05:52:f9:0d:e2:93:2f:35:8a:9f:96:15:6b:
         fa:a8:09:46:97:ff:e1:7b:39:7a:ba:b0:a6:29:75:9e:01:c5:
         8b:09:7e:5a:5d:af:55:89:07:26:39:aa:c0:10:ad:63:a1:c1:
         99:b6:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----