Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/8775262dddfeebd22b883699e947ed9a82ab2f74.roa
File:                     8775262dddfeebd22b883699e947ed9a82ab2f74.roa (raw, json)
Hash identifier:          JxUgWsUtZ1BO/G8Foe/UDfp+b6U5CTFbxfb3P5SNgIU=
Subject key identifier:   D6:C4:EB:6D:E0:39:81:07:81:47:3F:BF:6D:A2:8F:11:9A:7F:8F:7E
Certificate issuer:       /CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
Certificate serial:       0D6B62
Authority key identifier: 81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/8775262dddfeebd22b883699e947ed9a82ab2f74.roa
Signing time:             Wed 24 Mar 2021 14:48:14 +0000
ROA not before:           Wed 24 Mar 2021 14:48:13 +0000
ROA not after:            Tue 24 Mar 2026 14:48:13 +0000
asID:                     265641
IP address blocks:        2803:6f40:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879458 (0xd6b62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0336e51f59b3eb4c8fdcd66973da9eaefcef446
        Validity
            Not Before: Mar 24 14:48:13 2021 GMT
            Not After : Mar 24 14:48:13 2026 GMT
        Subject: CN=8775262dddfeebd22b883699e947ed9a82ab2f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:96:49:82:60:54:63:a1:0b:f5:24:44:1e:
                    54:98:37:78:f7:e6:94:aa:48:04:27:20:cc:ff:1a:
                    04:f8:31:4a:c6:38:b3:c6:15:13:72:ef:da:c6:2e:
                    5d:28:94:d6:2c:06:cf:42:0f:8d:69:3c:f3:a7:cd:
                    02:46:a6:8c:e0:3a:30:c6:de:b6:71:fa:ab:09:38:
                    34:b4:ce:fe:b0:1c:13:0e:fa:ba:a4:9d:c2:31:ca:
                    02:38:c1:98:69:30:4f:88:61:36:ca:fd:25:02:99:
                    1b:cc:86:f2:1f:04:7d:3e:10:74:c0:d7:08:62:7c:
                    5f:b9:4e:bb:0b:2b:02:6a:1b:d8:11:75:d8:d5:c5:
                    35:94:53:3b:48:7e:69:ba:59:a2:a2:5d:b6:79:fc:
                    c2:a6:57:d4:64:24:2e:30:30:ae:1f:1b:c8:ca:5d:
                    89:ec:27:24:a8:fe:af:f1:a8:00:d9:17:e9:06:cf:
                    ee:dd:9b:25:a0:79:8c:33:32:a0:43:5a:d1:fb:14:
                    ca:08:f4:59:b3:10:2a:15:fb:82:59:42:42:1d:b6:
                    32:e2:30:43:44:5f:82:cb:e0:7c:57:0f:e4:da:7c:
                    5e:2b:bd:42:e6:e4:d9:8d:f5:07:60:9b:9a:f5:ad:
                    a2:c9:d3:20:c6:0f:9a:37:4e:9e:30:3e:83:28:2e:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C4:EB:6D:E0:39:81:07:81:47:3F:BF:6D:A2:8F:11:9A:7F:8F:7E
            X509v3 Authority Key Identifier:
                keyid:81:A2:5A:1C:E5:AB:54:EE:7D:9E:62:06:92:CC:C7:B9:8A:4F:EA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/8775262dddfeebd22b883699e947ed9a82ab2f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b0bb939-fc7f-4653-91cc-033691f7717e/c0336e51f59b3eb4c8fdcd66973da9eaefcef446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:cf:0d:95:82:b0:c2:7c:c3:01:cc:18:1b:4c:1b:8d:25:5e:
         53:c7:b2:9a:e2:b6:7e:03:1d:67:d9:2e:85:8d:15:a0:67:99:
         e4:51:f7:c7:c6:25:15:87:d8:24:a5:7b:c5:21:27:f9:31:85:
         41:51:03:d5:64:79:b0:95:30:16:e5:78:f0:02:bd:9e:97:f0:
         68:99:0b:1d:68:6a:54:4d:be:e7:68:8f:25:1e:5d:05:40:5b:
         f1:2b:5a:c0:58:78:34:86:a9:85:17:ee:4f:2a:19:45:d7:67:
         45:bb:14:c6:20:1d:b3:3d:d0:89:93:f3:29:58:6c:de:f6:a5:
         1a:2c:cc:a0:dd:0b:1e:52:b4:18:3d:16:8f:03:32:70:60:2e:
         01:cb:c3:84:cd:88:77:a0:07:16:af:da:63:8d:82:0b:ea:8a:
         d5:85:35:a4:0f:e8:d1:eb:28:37:35:54:1e:c9:45:80:82:80:
         43:99:df:2c:7a:3e:23:9a:ee:8c:cc:95:a8:3f:7c:74:ae:97:
         e9:7b:c0:c4:0f:04:6f:d3:80:63:6e:9e:20:cb:88:3a:d8:56:
         ee:7f:10:bd:08:fa:89:02:91:4c:56:f9:d5:4d:a0:1a:5d:d8:
         ea:4a:a9:48:95:65:4f:d4:4b:17:29:17:fa:c0:8f:49:31:dc:
         49:83:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----