Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa
File:                     67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa (raw, json)
Hash identifier:          a1Hk9QoLCtUfUekUyj3UUW+emwY8ouGa8GYRz0cgJhE=
Subject key identifier:   4C:0A:6C:D9:E4:6F:96:C6:51:C4:E2:C0:A3:B7:16:C3:06:B3:D1:CB
Certificate issuer:       /CN=e44b350d3b38d42846292aa361e5c48e7d3371c5
Certificate serial:       07DBAD
Authority key identifier: 4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa
Signing time:             Wed 24 Mar 2021 14:45:07 +0000
ROA not before:           Wed 24 Mar 2021 14:45:06 +0000
ROA not after:            Tue 24 Mar 2026 14:45:06 +0000
asID:                     42388
IP address blocks:        2803:ad80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514989 (0x7dbad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44b350d3b38d42846292aa361e5c48e7d3371c5
        Validity
            Not Before: Mar 24 14:45:06 2021 GMT
            Not After : Mar 24 14:45:06 2026 GMT
        Subject: CN=67fdf246a28c72f01d0a325318ddc3a6911c2f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:09:16:c8:3a:8f:b1:dc:db:11:54:46:db:
                    83:95:fa:41:e5:83:3f:b0:0a:6a:1a:d5:f1:60:8f:
                    b2:c6:81:8f:91:44:09:64:0f:15:cc:98:9d:98:10:
                    7f:78:40:47:4e:79:9e:6c:4a:15:fd:73:ec:f5:13:
                    1a:9c:57:27:1b:8d:ca:a1:89:81:dd:58:75:03:ae:
                    52:ff:d3:08:51:b5:cc:89:44:a8:aa:00:71:5b:1d:
                    e0:d6:fd:68:db:d1:16:d7:26:34:6a:f4:88:bf:36:
                    de:dd:bc:17:bb:3a:b6:b9:86:e5:5e:40:49:41:60:
                    b1:91:2c:2f:e4:d5:a8:84:8f:14:22:ea:3e:9f:80:
                    fa:90:3a:f2:68:2a:c7:8c:f7:0c:bc:c0:06:a4:7a:
                    f1:2a:bb:93:f6:89:8b:20:17:6d:36:80:f7:dd:27:
                    c6:23:a6:0a:46:75:19:83:33:e9:93:42:2f:af:40:
                    8c:db:dc:88:fe:65:9e:cb:12:08:57:ea:39:6a:98:
                    58:1d:f7:08:8d:e4:6b:41:c0:73:aa:d1:17:51:0b:
                    ea:50:97:de:2b:fc:74:84:9e:36:f8:9c:df:38:98:
                    ac:17:d9:9a:bd:a4:3a:aa:c1:c3:38:77:47:5d:35:
                    23:af:50:35:c7:d6:fc:50:79:1e:e4:24:89:3e:7d:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0A:6C:D9:E4:6F:96:C6:51:C4:E2:C0:A3:B7:16:C3:06:B3:D1:CB
            X509v3 Authority Key Identifier:
                keyid:4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/67fdf246a28c72f01d0a325318ddc3a6911c2f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad80::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:ea:a4:cb:5f:6d:53:be:17:b3:c4:cc:5c:18:4f:df:69:
         0a:c5:3a:0c:f3:ae:a9:fd:7c:b4:19:70:9f:0d:cd:52:ad:84:
         79:25:a1:ed:4e:f2:c4:c2:f1:77:43:1a:f1:d1:1e:bc:a9:cc:
         f5:96:6b:da:be:63:8c:68:a5:e0:73:66:7c:1e:24:7e:3b:be:
         8c:f8:c4:30:13:3d:a9:ae:a9:57:59:4e:04:52:39:b1:b2:e1:
         3a:bb:be:33:68:ed:10:8e:da:61:8e:de:7a:25:b0:98:8c:5a:
         5e:3d:4c:87:c7:54:a9:30:34:44:0f:3b:b6:93:8b:6c:e2:73:
         18:fc:77:c2:45:52:1c:b9:e1:bc:f2:97:cf:ef:4f:d1:eb:d9:
         62:4c:e3:15:94:aa:2f:c0:1d:ff:da:ee:69:2c:01:b0:cd:77:
         fe:0b:ed:68:59:7a:8a:95:05:a1:4b:b1:32:09:c6:0c:8c:8f:
         fe:fb:21:58:a4:a3:51:1e:f3:33:46:4c:e7:88:75:b9:43:13:
         5c:e7:cd:bb:2f:e8:40:80:4c:f1:8f:e1:94:22:d3:b4:c9:64:
         32:cb:da:4c:6f:63:04:30:43:20:2b:9e:23:3b:c8:b8:c1:84:
         43:ba:6a:34:28:53:6c:e6:8b:2f:84:86:cb:e9:3c:c3:25:1d:
         0e:53:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----