Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/31135b38b5b674bcfc26c17801b705ca7389ce2c.roa
File:                     31135b38b5b674bcfc26c17801b705ca7389ce2c.roa (raw, json)
Hash identifier:          Sk+4Sba0Zrpxmb30pEPxrE6ogJv+DHaSxZTs3VQrMo0=
Subject key identifier:   B1:1E:11:E9:C6:71:FA:32:D2:A8:6C:3E:A3:23:76:81:85:22:BC:11
Certificate issuer:       /CN=5acbc1040078c2c220281be4e4aebb06b6460703
Certificate serial:       475E
Authority key identifier: 22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/31135b38b5b674bcfc26c17801b705ca7389ce2c.roa
Signing time:             Wed 28 Apr 2021 14:25:31 +0000
ROA not before:           Sun 25 Apr 2021 03:00:00 +0000
ROA not after:            Tue 25 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        2801:1e:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18270 (0x475e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acbc1040078c2c220281be4e4aebb06b6460703
        Validity
            Not Before: Apr 25 03:00:00 2021 GMT
            Not After : Apr 25 03:00:00 2023 GMT
        Subject: CN=31135b38b5b674bcfc26c17801b705ca7389ce2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:a1:50:51:1f:50:f2:8e:61:60:67:45:f9:
                    12:e2:6d:18:5e:9d:f8:8b:d6:85:28:30:16:0f:a1:
                    a9:8e:36:74:c8:ed:be:18:40:f1:77:cd:4f:74:5c:
                    e6:6c:20:c4:1f:df:01:c7:d2:86:25:f5:ef:55:52:
                    09:90:ce:9d:be:16:07:cf:2f:b8:41:95:22:b5:83:
                    73:1c:76:47:77:2e:ca:a4:b7:ab:a0:90:3c:65:ca:
                    38:80:ed:f0:02:f1:a0:89:47:64:e9:78:53:e9:14:
                    69:cd:19:31:fc:f5:e1:ce:ff:cf:31:16:e3:66:27:
                    1b:08:40:e3:c8:a0:94:8b:fe:88:fd:bf:5a:7e:a1:
                    f7:86:66:01:0e:4a:c4:20:7e:c3:9e:3a:2d:4f:0c:
                    14:a4:a3:31:df:62:77:61:ae:ae:3b:8f:1d:43:63:
                    0c:26:b4:3c:aa:ec:2b:39:cf:fe:2d:dd:45:c9:34:
                    ae:4e:e9:db:14:52:51:2a:7f:d1:05:69:e5:67:ad:
                    c9:b7:1d:e7:48:ce:4d:2e:ce:46:cb:83:59:bc:e8:
                    39:a8:ab:ca:e3:3e:9d:dd:c9:1f:27:61:05:bf:1b:
                    48:18:b6:e9:21:26:56:74:c9:31:66:1e:00:c8:c1:
                    15:17:68:08:32:87:68:46:25:00:c0:c1:1a:57:d2:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:11:E9:C6:71:FA:32:D2:A8:6C:3E:A3:23:76:81:85:22:BC:11
            X509v3 Authority Key Identifier:
                keyid:22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/31135b38b5b674bcfc26c17801b705ca7389ce2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:2f:71:49:9e:a0:e0:0e:ce:fa:12:37:a3:df:2f:27:41:c9:
         1b:a0:51:2b:da:0d:d4:eb:28:a6:fc:c9:5e:5e:07:13:0d:fb:
         f5:cf:f7:e1:05:5d:c4:7e:29:37:ba:89:28:32:2d:12:fc:04:
         c4:06:a8:67:0f:d0:87:b7:58:d0:a3:52:62:6d:8c:e0:cb:4d:
         54:6d:c4:1a:f2:31:1e:c5:a1:31:14:46:86:3c:2f:e7:f9:3f:
         df:1e:c1:f7:f6:4f:d4:3b:9c:da:58:bf:7f:53:59:37:a2:62:
         a5:43:68:3e:26:4d:d4:04:04:23:24:27:17:5e:c5:a0:47:62:
         44:81:f9:4b:ab:f0:77:87:65:64:a2:de:87:83:35:15:f3:86:
         3f:eb:7a:3c:05:16:e0:5d:d8:61:f3:e7:73:d3:fd:54:16:f8:
         69:ce:5a:25:d5:1d:ab:68:46:98:84:cb:be:6b:b9:e9:54:de:
         04:d3:8e:d3:01:90:66:8d:60:7b:2f:bf:02:ae:d3:b2:d3:35:
         d9:09:d9:89:f5:9b:fd:b5:36:25:5e:74:65:ad:53:06:5f:9c:
         32:32:1f:df:0b:9a:49:86:64:2c:89:cd:5c:35:01:45:ca:e3:
         6f:01:ba:69:8e:60:29:f5:07:41:46:41:c5:e1:d8:0c:ca:26:
         8a:f7:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----