Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/56ae8f3ff2c83d2ad69b80d97e52007ba16d841d.roa
File:                     56ae8f3ff2c83d2ad69b80d97e52007ba16d841d.roa (raw, json)
Hash identifier:          rtB6Nt6Jc8dyRxiUr7N//3gwl5Getsy0pDCB8W16FB4=
Subject key identifier:   8F:16:EA:90:8A:E5:4C:87:D2:6C:73:09:4C:C2:FD:F3:87:E4:23:07
Certificate issuer:       /CN=ef640f7ea7a6b188596318dadeffcac5ca26a907
Certificate serial:       0DD11C
Authority key identifier: 38:2B:1B:14:3C:85:03:51:C2:70:92:9B:A3:6D:48:65:F0:31:01:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef640f7ea7a6b188596318dadeffcac5ca26a907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/56ae8f3ff2c83d2ad69b80d97e52007ba16d841d.roa
Signing time:             Wed 24 Mar 2021 14:31:12 +0000
ROA not before:           Wed 24 Mar 2021 14:31:12 +0000
ROA not after:            Tue 24 Mar 2026 14:31:12 +0000
asID:                     264689
IP address blocks:        2803:2340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905500 (0xdd11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef640f7ea7a6b188596318dadeffcac5ca26a907
        Validity
            Not Before: Mar 24 14:31:12 2021 GMT
            Not After : Mar 24 14:31:12 2026 GMT
        Subject: CN=56ae8f3ff2c83d2ad69b80d97e52007ba16d841d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:d3:5a:32:59:2c:a9:1e:1f:26:34:37:76:
                    ee:cd:e0:b7:28:8a:99:cf:c2:7a:ce:cd:ed:a0:88:
                    9c:af:9d:48:ad:62:56:7b:47:da:5f:82:13:eb:e9:
                    ee:6d:cf:1c:3a:3d:21:e2:ce:13:9f:0c:7b:26:56:
                    fb:c9:6c:75:84:ca:c9:bd:2d:88:11:41:c7:72:52:
                    7f:3a:66:87:0e:c6:60:a2:91:1a:0b:33:86:0a:12:
                    c9:65:44:fe:f7:a6:9d:60:1d:c1:37:6c:1e:26:83:
                    31:d8:de:f5:7a:49:94:4c:8d:1d:a9:0a:66:9f:84:
                    f4:35:55:6e:ef:3b:f2:37:7f:f0:d6:c6:6d:57:10:
                    19:5e:d9:7b:0c:c4:e8:57:1b:8b:2b:ed:54:58:03:
                    da:28:e2:e0:8b:e7:a2:de:49:09:56:84:8e:b0:83:
                    6f:6b:7e:bf:b5:5a:6c:b6:89:f7:d4:ad:d4:b0:25:
                    18:00:4d:47:b2:df:6b:98:bb:27:42:93:92:37:3d:
                    e4:69:a8:50:20:f4:60:07:23:cc:e8:31:71:11:54:
                    b0:63:14:72:3a:bf:d3:df:b0:67:5b:c7:40:c4:65:
                    08:21:a7:76:28:58:a4:8e:97:69:2e:0f:fb:ae:d2:
                    0b:f9:fd:25:bb:ab:b6:f8:27:d6:b6:06:3a:d8:4c:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:EA:90:8A:E5:4C:87:D2:6C:73:09:4C:C2:FD:F3:87:E4:23:07
            X509v3 Authority Key Identifier:
                keyid:38:2B:1B:14:3C:85:03:51:C2:70:92:9B:A3:6D:48:65:F0:31:01:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef640f7ea7a6b188596318dadeffcac5ca26a907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/56ae8f3ff2c83d2ad69b80d97e52007ba16d841d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133cc484-8e51-4e59-9897-e4fc3ca3588b/ef640f7ea7a6b188596318dadeffcac5ca26a907.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2340::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:f0:77:c5:21:18:e2:cc:f2:db:08:50:f4:d2:64:6f:c4:
         8e:94:b6:5a:38:7a:1d:a9:9d:d3:2a:d9:14:1f:49:4b:22:d1:
         4e:f4:ae:f0:84:2c:14:c0:a5:b3:5a:58:97:64:90:97:9e:de:
         6b:fc:00:10:55:b5:88:5c:bd:91:f7:a4:a8:1e:63:b2:e0:18:
         13:ec:18:b7:68:c4:69:cf:cc:07:4c:57:b8:95:28:72:a2:78:
         53:85:68:5c:73:78:e4:a1:a6:76:d5:f5:77:de:04:c2:ca:f2:
         1b:f3:f1:ee:12:b4:2b:47:06:7e:c9:3b:01:11:c2:ea:d4:bf:
         84:50:0c:70:3b:fc:d9:5d:7f:65:c7:46:77:c8:96:9f:6d:89:
         e1:a7:ea:08:e4:4e:cc:72:d5:89:58:82:e9:84:56:52:f0:e5:
         ac:43:d8:bf:dc:20:35:9e:64:79:b4:ab:84:e6:f3:11:c1:64:
         be:b8:9b:52:a8:16:8d:a9:e9:20:49:31:b2:ae:d0:0e:aa:76:
         7e:9e:60:23:dd:2f:63:85:89:75:a8:31:76:46:54:99:31:f5:
         e0:66:2e:f9:45:10:20:74:a9:24:f5:17:e6:e8:fe:75:4c:81:
         1a:b1:e8:f7:4f:3b:36:cb:64:ad:46:58:4d:ea:41:08:67:55:
         19:33:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----