Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/b06f01668aaa0debdc51cd926305e01271124634.roa
File:                     b06f01668aaa0debdc51cd926305e01271124634.roa (raw, json)
Hash identifier:          J4Yt60RmQtMwqIUDZuhp5shMANENg0MZV551GnpoQsc=
Subject key identifier:   BB:CF:B7:A0:85:25:4B:97:5D:0A:00:3A:64:4F:8A:7C:BE:37:D9:D3
Certificate issuer:       /CN=9b542116cf9b5c5eac8afc75573b247026d5e7aa
Certificate serial:       0D5C89
Authority key identifier: AE:F8:35:9E:3B:EE:5B:E8:C1:4C:A4:47:0D:17:FA:28:11:10:8B:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b542116cf9b5c5eac8afc75573b247026d5e7aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/b06f01668aaa0debdc51cd926305e01271124634.roa
Signing time:             Wed 24 Mar 2021 14:32:44 +0000
ROA not before:           Wed 24 Mar 2021 14:32:43 +0000
ROA not after:            Tue 24 Mar 2026 14:32:43 +0000
asID:                     263834
IP address blocks:        2803:c640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875657 (0xd5c89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b542116cf9b5c5eac8afc75573b247026d5e7aa
        Validity
            Not Before: Mar 24 14:32:43 2021 GMT
            Not After : Mar 24 14:32:43 2026 GMT
        Subject: CN=b06f01668aaa0debdc51cd926305e01271124634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:bd:1c:5c:f4:62:08:0c:ca:9b:6d:24:1f:
                    4a:9d:db:3c:c7:ba:b9:24:e5:04:cb:9c:0a:83:fb:
                    bb:84:3d:b3:bb:bb:c5:35:f5:8e:5c:e7:1a:1a:f3:
                    1e:a9:26:be:78:6e:89:9d:70:65:1e:06:44:54:b1:
                    bf:e6:29:bc:0e:9f:dd:84:5e:78:31:82:e1:49:a7:
                    d0:f1:50:f5:16:94:79:8d:8e:bb:91:b6:8a:21:9c:
                    3b:91:14:87:9c:2b:31:ea:bd:3d:ba:c7:73:fa:ad:
                    51:00:6b:80:bf:bd:44:27:20:40:e5:61:02:4d:bd:
                    7c:6b:75:4b:93:e2:c4:db:11:ff:51:a4:ea:84:9c:
                    af:74:0f:bd:f1:e9:b7:4c:3d:6f:42:a7:aa:89:e3:
                    ed:f7:89:56:8b:14:e6:95:80:59:85:59:e0:6d:f8:
                    e2:39:99:46:bb:05:de:90:44:b3:c6:6b:c9:81:43:
                    e8:46:e4:a4:45:0a:fe:e2:26:82:b2:67:8d:ed:f7:
                    90:bd:fe:ae:6b:53:3f:4c:f3:52:c2:c7:0a:f7:42:
                    f1:36:b9:93:d7:5a:59:8e:7d:00:af:71:5d:f7:38:
                    b8:c5:f3:03:db:e1:38:5c:96:07:86:8c:48:d3:a7:
                    cb:de:52:57:a2:40:31:47:d5:77:e7:73:e3:cb:b8:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:B7:A0:85:25:4B:97:5D:0A:00:3A:64:4F:8A:7C:BE:37:D9:D3
            X509v3 Authority Key Identifier:
                keyid:AE:F8:35:9E:3B:EE:5B:E8:C1:4C:A4:47:0D:17:FA:28:11:10:8B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b542116cf9b5c5eac8afc75573b247026d5e7aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/b06f01668aaa0debdc51cd926305e01271124634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/9b542116cf9b5c5eac8afc75573b247026d5e7aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c640::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:52:00:04:83:47:27:3a:ee:2f:da:51:f1:de:97:42:fd:b2:
         ef:40:a4:61:63:12:fb:eb:03:61:53:a8:2b:4d:4b:21:99:35:
         5c:57:1e:8d:27:6e:3b:ed:92:c4:da:96:e1:bd:77:2b:55:18:
         52:22:ef:b6:d0:8d:7d:c3:1f:0e:ea:cd:1f:31:86:7e:26:06:
         56:87:eb:61:98:69:88:31:4d:09:37:c5:7e:bf:56:cc:d9:41:
         56:e5:94:cf:f7:b0:1f:99:d8:39:fc:de:04:cd:ec:cc:6e:93:
         33:4e:45:ad:78:9d:9b:f0:06:f8:91:27:8a:79:bc:06:08:4f:
         eb:e5:ef:46:42:e3:74:93:bf:c0:47:15:26:07:d7:de:bb:88:
         e0:ef:f7:78:e6:ef:c3:86:3d:d5:94:8b:d4:b1:a7:3f:5c:73:
         3b:f9:5c:2b:88:4d:89:16:13:6d:bd:01:f0:b7:c5:a3:ee:f9:
         69:7a:dc:0f:e4:09:95:3d:c0:48:35:ca:ee:39:62:9a:95:6f:
         7e:71:dc:52:ed:d1:73:aa:41:6e:b6:8c:b2:9b:d9:74:ec:22:
         5c:bd:79:63:84:51:f8:a0:34:51:f1:2d:28:07:fb:62:84:42:
         cb:42:92:d7:0c:38:c0:c1:87:f5:0a:31:3f:c4:66:52:bf:3e:
         b9:3b:eb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----