Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/e41e074b1ab0b7e7bc97c5d5e14f1b55b9fac90d.roa
File:                     e41e074b1ab0b7e7bc97c5d5e14f1b55b9fac90d.roa (raw, json)
Hash identifier:          4JTxjLmkIlPAodt/5yE4690Ijsw/4N0Iy6iD/tHuxaQ=
Subject key identifier:   C9:F1:DA:E8:2C:C5:CA:E7:51:50:B3:F9:AE:85:4C:4D:06:CA:8E:5C
Certificate issuer:       /CN=a0c214130f740bba205b8de452fb57587e3b6e3c
Certificate serial:       0D23A9
Authority key identifier: 79:C0:6A:9B:66:1C:80:5F:D1:C3:A8:B1:D2:C6:C8:DA:F6:95:B8:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0c214130f740bba205b8de452fb57587e3b6e3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/e41e074b1ab0b7e7bc97c5d5e14f1b55b9fac90d.roa
Signing time:             Wed 24 Mar 2021 14:45:01 +0000
ROA not before:           Wed 24 Mar 2021 14:45:01 +0000
ROA not after:            Tue 24 Mar 2026 14:45:01 +0000
asID:                     27742
IP address blocks:        2803:b780::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861097 (0xd23a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0c214130f740bba205b8de452fb57587e3b6e3c
        Validity
            Not Before: Mar 24 14:45:01 2021 GMT
            Not After : Mar 24 14:45:01 2026 GMT
        Subject: CN=e41e074b1ab0b7e7bc97c5d5e14f1b55b9fac90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:d1:48:72:a3:46:11:ce:a6:ea:70:f6:08:
                    c5:78:1d:28:8a:46:f7:5c:c6:a1:c2:56:96:72:65:
                    72:c6:50:69:82:1e:ae:2f:d6:a5:d8:f2:3f:6b:5d:
                    d3:18:77:9b:86:c0:10:ff:a4:2a:1c:e7:49:59:ff:
                    e0:43:24:ca:52:4a:e1:6f:ec:d1:e3:cf:2b:48:56:
                    bd:f6:50:03:1b:d3:47:7f:a9:27:4d:b4:ce:f1:58:
                    23:00:09:59:e1:3c:13:9e:c1:1c:4b:38:96:62:0c:
                    ea:90:87:cc:c2:8e:9a:5c:be:2b:6e:3a:6a:59:49:
                    44:b5:91:d7:51:49:39:4c:8f:ec:d0:87:67:24:48:
                    af:3e:82:b3:fe:d5:4d:2a:95:b4:0e:7b:85:8c:74:
                    46:29:59:b7:5c:a1:26:49:89:e6:e5:17:a9:b4:57:
                    b6:8f:cd:64:b2:f4:10:a5:86:2b:55:f8:11:ac:c1:
                    54:80:77:c1:51:54:04:11:32:e1:5a:e4:9f:fa:b4:
                    fa:ee:bf:66:dc:f0:7b:47:53:23:0f:cd:1a:d1:77:
                    d0:0e:8b:c9:c6:2c:d5:17:77:9e:3c:e6:6f:4c:a5:
                    72:39:62:4a:8f:90:b2:09:81:51:8b:23:40:65:7b:
                    59:12:56:7c:3d:72:21:25:d7:07:23:1a:b8:3d:c5:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:DA:E8:2C:C5:CA:E7:51:50:B3:F9:AE:85:4C:4D:06:CA:8E:5C
            X509v3 Authority Key Identifier:
                keyid:79:C0:6A:9B:66:1C:80:5F:D1:C3:A8:B1:D2:C6:C8:DA:F6:95:B8:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0c214130f740bba205b8de452fb57587e3b6e3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/e41e074b1ab0b7e7bc97c5d5e14f1b55b9fac90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19ce83be-8da5-432e-a492-f8f13bad448a/a0c214130f740bba205b8de452fb57587e3b6e3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b780::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:43:b7:39:2b:bf:0e:77:91:fe:c7:38:57:4a:45:9e:99:05:
         96:a8:53:b4:b1:3f:f6:25:15:93:7b:d3:6e:67:ce:fe:1c:67:
         fb:1b:6c:03:a7:28:b4:89:65:0c:3e:93:3b:5b:a6:a3:6f:9f:
         07:d2:5b:69:b2:21:bf:95:1d:f5:38:ad:fb:60:92:cd:94:64:
         c6:f3:90:2b:56:5d:7f:4a:17:b6:2a:cf:a9:95:91:20:35:60:
         d2:8f:96:6e:05:72:a2:3c:64:16:d4:aa:12:9a:5f:65:a3:ad:
         1d:04:26:30:4e:17:fa:16:fb:b9:d5:e0:8b:8c:be:80:ab:7e:
         a5:24:2b:60:dd:99:4b:e0:92:d5:5e:f2:b4:b1:d6:bd:60:69:
         ca:fe:df:0e:ec:12:46:63:7a:3d:26:fd:69:c1:f8:c5:e3:b3:
         b0:c4:71:8e:cc:15:0c:38:9e:78:0b:a8:40:23:ce:89:9f:5d:
         02:19:e3:24:bd:63:9d:c9:af:2a:b9:e5:02:d3:24:22:c0:62:
         f4:d3:52:7b:bf:2c:d8:c6:7d:30:27:b9:4b:b3:eb:57:67:7d:
         d1:52:00:5c:ee:30:55:5b:0e:42:e1:96:dd:be:be:55:12:52:
         a0:c1:45:f4:2e:d6:59:7f:ba:cc:fa:17:18:c0:16:b3:39:4a:
         ed:50:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----