Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/332e7c527a6435a0b433bf44ed911a6f4e8b51eb.roa
File:                     332e7c527a6435a0b433bf44ed911a6f4e8b51eb.roa (raw, json)
Hash identifier:          Jn5ZCyfVHHyMjrMPjFnt8Ri2HKWR08SnU6gcm3aMuXA=
Subject key identifier:   F8:74:64:22:B6:24:09:BF:48:DD:EC:E4:29:8F:45:52:D4:EA:BA:22
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E86CA
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/332e7c527a6435a0b433bf44ed911a6f4e8b51eb.roa
Signing time:             Wed 24 Mar 2021 14:38:35 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     28006
IP address blocks:        2800:370::/32 maxlen: 48
                          2800:4f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952010 (0xe86ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=332e7c527a6435a0b433bf44ed911a6f4e8b51eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:2d:7b:4c:47:67:0a:47:92:d7:15:6a:2a:
                    77:87:2a:13:b6:13:cd:65:55:af:1d:2f:71:25:e6:
                    17:30:2a:13:a8:55:59:12:77:27:63:bc:a9:a1:59:
                    71:4e:22:84:22:ae:e3:86:39:bf:a3:bb:6d:67:23:
                    71:8c:d6:a1:fd:7d:24:58:b6:59:13:80:f4:6b:ce:
                    17:22:1f:20:43:d6:7f:bf:8e:32:26:fd:eb:b4:93:
                    da:90:e8:f2:b3:5b:aa:6d:e1:c8:ed:8f:2d:66:34:
                    52:85:d9:69:e0:a6:f2:b8:5f:33:05:45:ee:b6:ac:
                    60:08:92:09:0a:7f:76:87:55:84:b9:c1:ea:48:7a:
                    02:1f:c5:e0:9d:62:d7:c7:53:b4:1c:4b:e5:c7:19:
                    bf:a6:a5:55:d3:3e:dd:a9:c5:4e:d6:27:9a:3b:8e:
                    a0:61:55:ff:9c:dd:8c:26:02:95:40:d4:17:17:8c:
                    f0:ff:eb:01:98:d8:c9:01:58:7b:9f:fa:70:3b:80:
                    48:af:e8:70:57:5e:2d:ef:67:3b:3a:16:2e:e5:d5:
                    ac:cf:be:54:3e:47:75:c8:4d:79:25:4d:0d:d2:4e:
                    0c:59:c5:13:6d:79:8d:85:68:d7:5c:df:86:3f:8c:
                    a4:7b:4e:06:19:9d:e0:de:bb:24:ce:e6:33:46:86:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:74:64:22:B6:24:09:BF:48:DD:EC:E4:29:8F:45:52:D4:EA:BA:22
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/332e7c527a6435a0b433bf44ed911a6f4e8b51eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:370::/32
                  2800:4f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:32:23:82:a5:d8:e8:73:65:5c:85:38:88:2b:ab:60:b1:
         c6:27:ea:f8:9a:1b:4d:b4:e4:af:ab:34:bb:64:82:af:31:9d:
         fe:2d:4d:d4:7e:32:2f:24:c7:a9:a5:47:d0:c7:93:1e:b4:3b:
         76:05:81:0d:7f:ea:ef:fe:9f:b9:cb:44:0b:6d:4c:fc:f2:39:
         87:b9:56:e7:86:ae:fa:46:37:8f:8e:09:46:31:65:92:11:a3:
         c5:d0:fb:37:6a:b5:ac:22:c9:a1:65:0a:df:90:5f:13:32:61:
         a6:a1:48:12:34:31:4e:58:36:1a:d8:a0:b5:83:4d:f7:4a:a1:
         3a:07:23:0f:e2:8e:96:b7:d9:27:87:33:2d:87:d9:07:2c:8b:
         22:8b:4b:1e:33:4b:e6:55:17:bf:0a:df:c0:be:23:4b:78:e5:
         94:2e:8c:6e:a4:ba:09:09:69:b3:4c:5e:1b:6e:27:4f:6b:30:
         38:04:42:ea:7f:c2:ed:6c:09:55:99:08:9e:b8:02:21:bd:08:
         1c:6f:38:29:c9:70:6c:1e:9a:02:7c:54:e6:0b:9d:12:bd:b1:
         53:dd:c6:bb:a3:7f:8f:8e:d5:2d:38:23:4e:e2:47:88:e1:c5:
         4b:8b:eb:93:d6:12:e3:76:2c:5a:5c:e3:ed:db:f5:93:de:18:
         8b:7b:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----