Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/3bdbe6204859cde867df0b2fd97a4899ed0ec350.roa
File:                     3bdbe6204859cde867df0b2fd97a4899ed0ec350.roa (raw, json)
Hash identifier:          AuPMx9ztcBbACDxdXM40MaTDPXjZLmCqSlw43Jknr+0=
Subject key identifier:   95:3B:A2:56:1E:98:4B:91:00:FC:68:3D:8B:7D:E1:00:A4:55:96:92
Certificate issuer:       /CN=5f89fa4fc43e783372b14c8fc33ac921186ae859
Certificate serial:       0D4B02
Authority key identifier: 15:41:72:1B:1A:96:86:8A:5D:C9:07:39:C4:B8:F8:36:39:F5:77:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f89fa4fc43e783372b14c8fc33ac921186ae859.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/3bdbe6204859cde867df0b2fd97a4899ed0ec350.roa
Signing time:             Wed 24 Mar 2021 14:42:32 +0000
ROA not before:           Wed 24 Mar 2021 14:42:32 +0000
ROA not after:            Tue 24 Mar 2026 14:42:32 +0000
asID:                     14754
IP address blocks:        2803:4600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871170 (0xd4b02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f89fa4fc43e783372b14c8fc33ac921186ae859
        Validity
            Not Before: Mar 24 14:42:32 2021 GMT
            Not After : Mar 24 14:42:32 2026 GMT
        Subject: CN=3bdbe6204859cde867df0b2fd97a4899ed0ec350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:ce:ff:e8:26:b3:a6:43:0a:e6:02:58:c4:
                    86:6d:33:9b:b6:ba:04:54:b0:38:31:09:d8:54:5a:
                    f9:56:0e:93:03:1e:36:8b:e4:0b:7c:90:ec:2a:31:
                    cc:50:68:8b:77:c8:b9:d0:b3:d7:25:e8:4a:1c:1c:
                    ff:2a:bc:c4:74:8b:3a:ad:b4:69:b6:0a:86:86:81:
                    0c:73:2d:6e:02:6b:7e:83:e7:54:bf:92:e9:72:f0:
                    41:71:7a:f7:47:c4:da:2c:32:f9:04:f1:55:48:c0:
                    c1:cf:7c:07:fd:d6:bf:1c:de:c1:33:0b:3c:2e:a4:
                    5f:37:3e:3a:b1:19:4f:2f:68:48:1a:af:4e:cc:49:
                    cf:b2:c8:4a:e7:21:a3:7e:51:1b:56:b3:2b:e9:3e:
                    36:e0:45:99:af:41:f6:e9:40:e0:d0:8a:b6:e2:58:
                    29:80:6d:c2:a8:4b:c9:fd:a2:bd:8a:e9:7b:4a:02:
                    98:b9:63:2b:17:84:e4:77:a1:c8:dc:09:77:9c:96:
                    41:1c:4e:ac:a4:2b:7d:f5:ed:04:12:f8:f8:4a:44:
                    46:b4:18:1d:3d:15:42:d0:76:42:d7:4a:b1:28:44:
                    f8:0c:36:cb:19:4d:71:07:11:38:d8:f7:14:2f:17:
                    2e:45:b1:3e:2a:ef:38:43:88:7a:d5:cc:ac:e8:6b:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3B:A2:56:1E:98:4B:91:00:FC:68:3D:8B:7D:E1:00:A4:55:96:92
            X509v3 Authority Key Identifier:
                keyid:15:41:72:1B:1A:96:86:8A:5D:C9:07:39:C4:B8:F8:36:39:F5:77:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f89fa4fc43e783372b14c8fc33ac921186ae859.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/3bdbe6204859cde867df0b2fd97a4899ed0ec350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/5f89fa4fc43e783372b14c8fc33ac921186ae859.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:46:3e:8d:20:e8:cc:b7:6c:5e:06:91:0d:61:56:65:1c:0c:
         df:32:f2:cb:87:f3:eb:20:c4:90:ab:86:86:ab:ff:52:74:48:
         cf:6a:1b:b8:b7:47:78:3f:4a:b7:35:e6:a4:55:03:15:e4:a1:
         b8:d4:73:df:d3:46:10:8a:3a:49:ea:1d:ec:98:d8:46:a0:7d:
         89:7a:9e:90:d4:ea:80:3e:b3:de:f6:69:16:a4:68:7a:8d:4a:
         16:d5:ec:a1:86:04:7d:22:ef:e1:8e:ce:40:3e:d9:ce:e0:e9:
         a2:3e:89:72:53:fc:46:3b:80:7e:34:52:d9:37:d5:59:a0:01:
         f2:06:2c:33:14:45:36:00:cc:3c:90:b7:5f:62:bf:e1:c0:65:
         73:dd:32:cb:66:25:a4:b6:25:61:df:72:c1:a1:dd:27:7a:80:
         6b:39:93:fb:3a:24:66:c6:79:2d:f9:db:73:c0:e8:46:c9:66:
         0b:a2:26:bb:13:fe:8f:7e:ef:2e:bf:46:03:0b:b0:d5:ae:51:
         3c:9b:33:97:e1:81:39:37:2e:c1:6a:43:39:6e:0e:26:5b:57:
         29:e1:d8:79:8a:ad:f2:af:07:96:33:48:26:05:ab:90:43:06:
         75:d4:c8:4f:5b:8d:59:95:d5:dc:34:7f:87:a6:af:b9:0d:59:
         de:42:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----