Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/cfdfb19c2e7550293c3daddf7ac888bf9e6991fe.roa
File:                     cfdfb19c2e7550293c3daddf7ac888bf9e6991fe.roa (raw, json)
Hash identifier:          AKxP8MbNNHgxtHN5FhxigMTLaC5FSMqDV5uh3dbULtc=
Subject key identifier:   F1:E9:E1:25:1E:53:08:89:29:A5:74:22:DC:83:AB:59:94:07:AF:E2
Certificate issuer:       /CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
Certificate serial:       029A91
Authority key identifier: D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/cfdfb19c2e7550293c3daddf7ac888bf9e6991fe.roa
Signing time:             Wed 24 Mar 2021 14:36:56 +0000
ROA not before:           Wed 24 Mar 2021 14:36:55 +0000
ROA not after:            Tue 24 Mar 2026 14:36:55 +0000
asID:                     267832
IP address blocks:        2803:c460::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170641 (0x29a91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
        Validity
            Not Before: Mar 24 14:36:55 2021 GMT
            Not After : Mar 24 14:36:55 2026 GMT
        Subject: CN=cfdfb19c2e7550293c3daddf7ac888bf9e6991fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:78:4e:2a:c1:5e:ac:65:c2:d4:f4:7b:80:
                    b7:06:ac:54:7b:05:54:a4:0a:6b:6c:8f:b3:a3:ba:
                    d6:5b:a3:3b:17:37:12:b8:03:77:82:1c:f0:9f:15:
                    b8:7d:61:9f:44:c2:31:48:11:cd:47:82:7b:3f:66:
                    30:5d:0d:13:06:03:53:be:f4:4e:fa:5c:26:40:a3:
                    a7:9e:3a:76:87:ec:df:d2:d7:ed:9e:06:1a:01:42:
                    34:6c:de:57:37:a5:04:f2:a0:1b:64:45:22:ff:8d:
                    f2:e3:98:5e:fc:d1:67:2c:a3:4d:4c:04:02:ed:8b:
                    31:6d:b4:7b:63:de:ed:66:2a:f4:2e:7e:79:69:f5:
                    ae:54:a4:1f:2f:b0:e5:db:2f:be:22:fa:7b:04:1a:
                    73:c9:fa:1e:f4:be:f1:94:a1:7c:12:a4:ac:87:44:
                    a1:8d:a7:fc:32:cd:6f:b6:ab:cf:43:37:88:05:95:
                    ca:02:ed:fc:f7:86:e9:64:9c:b8:c5:53:5c:69:89:
                    84:8e:e1:3e:7f:53:1c:9c:60:28:58:bf:8a:a8:66:
                    bc:50:99:e1:9a:59:88:ef:cc:93:23:4a:7c:d9:cc:
                    c7:f5:ed:c2:22:ab:f0:d5:02:82:66:df:d3:34:8f:
                    d7:31:89:73:f0:be:8b:73:24:5e:44:98:7e:27:d6:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E9:E1:25:1E:53:08:89:29:A5:74:22:DC:83:AB:59:94:07:AF:E2
            X509v3 Authority Key Identifier:
                keyid:D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/cfdfb19c2e7550293c3daddf7ac888bf9e6991fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c460::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:5b:a3:8f:c9:72:9c:61:81:21:56:de:51:8f:2b:75:7f:66:
         19:1f:1a:35:2d:3b:d2:03:3b:a8:7f:96:02:7c:5f:cb:93:60:
         99:eb:4d:ab:50:47:3a:89:e5:2e:e2:41:91:fd:be:2e:09:05:
         ca:fd:f8:74:a9:3e:1d:15:12:de:7b:e9:72:f8:e7:a9:ab:00:
         a0:3a:6e:04:d9:0a:71:3b:83:2c:35:07:ed:62:a5:49:f8:df:
         fb:59:77:52:4e:f2:93:83:db:20:af:88:89:9f:d9:ba:f8:84:
         aa:e3:5d:4d:ff:f7:c7:21:20:1e:5b:d6:50:72:c4:58:0e:50:
         65:ba:a3:4c:36:b1:8d:b6:1b:3a:21:c4:93:ee:1f:57:f8:5d:
         fa:aa:58:b4:13:2b:f9:e6:d6:18:02:58:54:ef:5d:e0:e8:1c:
         2f:99:bd:95:83:8e:36:2d:dd:22:ee:75:dd:1b:5b:4e:a2:68:
         a3:c2:0d:ab:58:e7:44:c3:e2:d7:fa:ce:77:5b:df:8c:2f:12:
         8d:bc:a5:ea:95:77:90:c4:ef:96:7e:0d:07:f8:2d:1e:9c:9c:
         6b:c2:00:3d:2c:87:e2:8d:69:5c:5a:b5:55:14:cb:02:d8:30:
         b4:58:50:97:89:8e:50:b3:26:c1:b9:d6:0c:b6:c8:7a:65:97:
         2d:24:69:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----