Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/2f0f6069e700a4c966ff32c478e4d023a1ddc6db.roa
File:                     2f0f6069e700a4c966ff32c478e4d023a1ddc6db.roa (raw, json)
Hash identifier:          K+VoOp3aXkboA77PEQm1UYuiUUeqaa+N+WejbBk5+BE=
Subject key identifier:   49:A7:F3:53:0B:17:E2:30:E8:FD:D2:2D:05:00:EF:0D:7D:B7:A7:09
Certificate issuer:       /CN=8ba71de6ce7469eb07bdfd6d05a75e6325c7e090
Certificate serial:       0D5037
Authority key identifier: A6:2A:34:1A:3B:C5:1F:EB:3F:27:3B:7B:2F:29:C5:35:8F:67:E7:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ba71de6ce7469eb07bdfd6d05a75e6325c7e090.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/2f0f6069e700a4c966ff32c478e4d023a1ddc6db.roa
Signing time:             Wed 24 Mar 2021 14:32:13 +0000
ROA not before:           Wed 24 Mar 2021 14:32:13 +0000
ROA not after:            Tue 24 Mar 2026 14:32:13 +0000
asID:                     264608
IP address blocks:        2803:4e40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872503 (0xd5037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ba71de6ce7469eb07bdfd6d05a75e6325c7e090
        Validity
            Not Before: Mar 24 14:32:13 2021 GMT
            Not After : Mar 24 14:32:13 2026 GMT
        Subject: CN=2f0f6069e700a4c966ff32c478e4d023a1ddc6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:e2:f2:da:c1:c6:ea:e4:18:4c:0e:d8:5b:
                    f0:ec:d6:52:ae:4b:d4:30:8d:9d:d9:c3:32:22:fb:
                    e4:58:65:6b:c5:e6:6f:76:f1:f9:f9:0a:0a:18:92:
                    2f:d7:5c:6c:0a:a8:fc:25:c2:2c:49:b8:73:77:78:
                    7a:db:34:13:06:b9:07:7c:42:9c:28:a7:a8:a9:2a:
                    a1:10:9b:16:de:b7:0c:fa:b0:37:8d:62:db:7f:e8:
                    b3:2e:65:0b:0f:c8:b3:6c:3c:58:58:59:36:d2:55:
                    2b:84:4c:53:c4:80:0d:97:a7:47:f1:8a:bd:4e:3b:
                    82:6f:df:79:f7:79:fb:5f:04:91:72:cf:45:2b:d9:
                    35:66:81:e1:8b:b1:0c:c5:7e:38:3a:89:ab:27:5c:
                    c3:2f:d6:d9:25:67:3b:8f:61:48:86:b6:67:40:21:
                    b8:c5:fd:74:06:6e:6e:a9:b9:de:95:83:f8:1b:1a:
                    1d:0f:84:14:c7:18:e7:ed:cc:f8:42:24:ff:a8:1f:
                    a2:f4:2d:c7:f4:9c:f1:64:53:d0:59:f9:35:84:95:
                    c8:46:c8:21:1e:56:b3:24:cd:aa:e5:db:f0:c3:d3:
                    51:9f:80:49:d9:06:4b:dc:52:2c:40:c0:96:1d:fd:
                    7a:c3:97:03:3d:d6:c5:eb:f2:5c:a5:b1:df:60:76:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A7:F3:53:0B:17:E2:30:E8:FD:D2:2D:05:00:EF:0D:7D:B7:A7:09
            X509v3 Authority Key Identifier:
                keyid:A6:2A:34:1A:3B:C5:1F:EB:3F:27:3B:7B:2F:29:C5:35:8F:67:E7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ba71de6ce7469eb07bdfd6d05a75e6325c7e090.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/2f0f6069e700a4c966ff32c478e4d023a1ddc6db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127a40ea-1d5d-4ec3-870b-c03a19c9ea9d/8ba71de6ce7469eb07bdfd6d05a75e6325c7e090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:72:57:5d:a1:b7:b7:0b:29:83:bf:8f:99:c0:e2:18:80:21:
         19:5d:b8:7f:31:05:a0:c3:a9:71:5f:85:ce:b7:5d:a0:a3:60:
         64:a6:34:b9:39:d7:37:92:5f:03:77:58:4d:4d:65:dd:95:c7:
         16:de:b7:b4:00:a7:df:5e:5c:65:80:91:97:08:18:68:04:cf:
         59:5a:55:9f:33:9a:cc:b2:7b:83:8a:aa:7f:df:2c:89:3f:c5:
         d5:de:1d:7d:73:5f:9d:9b:e9:f7:e0:b2:58:c0:0f:62:b5:f3:
         7c:4a:6f:6f:a6:0d:19:f3:f9:fe:37:63:ef:da:4a:29:cc:cb:
         aa:c0:19:97:4f:20:37:29:39:74:57:8b:de:c8:61:5d:62:29:
         4d:0f:1a:91:e2:25:84:8d:e3:ea:99:f7:88:8e:3d:76:b6:ec:
         81:70:aa:79:9b:d8:d0:0f:8c:bc:fe:06:e1:de:e8:3e:7a:7c:
         7e:76:b8:14:58:cc:5a:07:cc:2e:45:c3:17:89:23:f4:b8:b1:
         43:3a:5b:89:1c:5d:9d:99:e7:8a:ff:3f:b8:f4:9f:41:d4:03:
         e4:3e:0c:63:67:de:b9:32:4d:6f:1e:52:d5:3d:80:1f:41:95:
         86:28:95:c5:8d:26:49:b5:a2:c2:56:47:15:95:de:9c:f9:35:
         a1:73:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----