Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/14fc8a8612f1bd4663ac05996bd1348da06edcc1.roa
File:                     14fc8a8612f1bd4663ac05996bd1348da06edcc1.roa (raw, json)
Hash identifier:          tvhctux5enN33fhoHgj/FfbxUcoa/+ATiJFQvLNXn64=
Subject key identifier:   7B:24:9E:84:34:98:D1:E8:5A:5A:D1:20:7B:EE:9A:4C:53:53:22:29
Certificate issuer:       /CN=fdd526d7e7abffb4e5ca5b33105025838990e9a7
Certificate serial:       0D00CE
Authority key identifier: E6:07:43:CA:87:2A:92:14:91:9E:4A:9E:2E:7D:77:B7:0D:3B:B1:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdd526d7e7abffb4e5ca5b33105025838990e9a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/14fc8a8612f1bd4663ac05996bd1348da06edcc1.roa
Signing time:             Wed 24 Mar 2021 14:35:06 +0000
ROA not before:           Wed 24 Mar 2021 14:35:06 +0000
ROA not after:            Tue 24 Mar 2026 14:35:06 +0000
asID:                     61467
IP address blocks:        2803:e580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852174 (0xd00ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd526d7e7abffb4e5ca5b33105025838990e9a7
        Validity
            Not Before: Mar 24 14:35:06 2021 GMT
            Not After : Mar 24 14:35:06 2026 GMT
        Subject: CN=14fc8a8612f1bd4663ac05996bd1348da06edcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:19:b8:d9:3f:b4:1a:b3:e3:fd:ea:bc:7c:
                    f8:b8:da:cd:4e:18:86:bc:5c:08:f0:69:25:46:d6:
                    08:62:ec:e8:8e:64:a0:a8:2c:29:f4:87:e2:8e:77:
                    c1:ee:ef:03:92:14:20:ad:7a:48:f3:76:6d:57:1a:
                    be:1c:13:ad:2c:db:73:3c:65:65:55:ea:32:84:22:
                    17:85:12:86:84:d4:e3:36:e7:c7:68:81:3d:5e:86:
                    5f:3f:f9:09:9a:f7:e4:20:97:ac:07:ee:4f:82:67:
                    34:cd:9b:bf:87:6a:ba:af:f4:ab:3c:22:c7:f1:5d:
                    ed:95:12:dd:66:37:5b:c6:b1:f9:0b:f2:73:8c:d9:
                    4f:98:f4:0f:dd:ec:13:da:46:2d:35:ae:86:fd:29:
                    6e:26:c9:01:3e:cd:13:f7:47:a3:59:8a:95:e0:18:
                    59:4e:d5:55:d7:4f:a1:14:05:13:27:44:13:aa:b1:
                    c8:f0:ae:eb:da:d2:6a:cf:37:6c:1b:5e:0c:0e:a6:
                    d6:69:f5:8d:38:a6:32:4b:1b:6f:fc:ba:3a:4d:2b:
                    48:6d:56:a4:1c:b5:fc:5f:cc:c6:dc:ff:af:c5:4f:
                    f8:e5:5f:b8:0e:5f:38:87:b3:fc:b1:0b:a3:75:81:
                    97:9b:cc:c5:d5:44:04:5e:69:71:98:dc:6b:39:ab:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:9E:84:34:98:D1:E8:5A:5A:D1:20:7B:EE:9A:4C:53:53:22:29
            X509v3 Authority Key Identifier:
                keyid:E6:07:43:CA:87:2A:92:14:91:9E:4A:9E:2E:7D:77:B7:0D:3B:B1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdd526d7e7abffb4e5ca5b33105025838990e9a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/14fc8a8612f1bd4663ac05996bd1348da06edcc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/fdd526d7e7abffb4e5ca5b33105025838990e9a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e580::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:a0:20:1d:f3:23:6d:4a:2a:86:cb:b9:99:24:25:d7:e5:
         0a:28:ce:93:6e:fd:da:be:c8:43:79:c5:a4:47:ea:97:fd:c8:
         25:60:4a:b6:37:78:9f:5f:9b:f5:18:47:64:ee:76:e7:b4:9f:
         10:b3:da:84:28:98:a4:98:ff:16:4a:3d:6c:21:9b:b4:45:12:
         f4:b9:f3:f5:97:d5:2b:ef:15:4f:ce:c2:be:c8:e1:dd:d1:bb:
         3d:b3:5b:8d:ce:f6:9f:e2:cc:54:4a:46:f5:1f:3a:b7:fa:85:
         81:14:5e:1e:4b:23:cb:e5:22:13:af:19:5f:7f:31:6f:fa:ed:
         58:41:c2:68:0c:d6:25:e5:f8:bb:ea:a1:69:f2:a7:fa:3b:76:
         d4:7b:75:26:9d:f4:af:5e:86:d5:ab:31:9e:aa:96:14:da:dd:
         d0:19:ab:5a:a6:a4:6e:4a:d2:68:39:a7:6a:66:f5:d7:0b:bf:
         32:a5:f2:1c:08:87:98:fb:a3:f1:9c:09:77:2f:11:3d:5b:d0:
         5b:a8:d4:c1:50:79:29:06:03:d3:e4:9d:57:0a:e7:12:32:d9:
         65:c3:51:e2:9f:4b:e5:3d:7e:30:19:09:b7:b4:65:9e:bf:2a:
         1e:ab:dd:56:6e:91:60:fa:0e:1f:70:84:41:50:47:18:d8:13:
         06:00:16:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----