Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/84de94348fe52e02f89354a7d6d1038736a024a0.roa
File:                     84de94348fe52e02f89354a7d6d1038736a024a0.roa (raw, json)
Hash identifier:          7Dhjki5rQg1THvCF0WUhZYhNjqdD97ZRCKVDvJHXqNM=
Subject key identifier:   F8:DE:80:E6:44:28:76:B3:15:65:40:5A:01:53:AC:3D:2B:5B:41:6A
Certificate issuer:       /CN=41fdade6fa28cbe8bc8b37b44f50fb9818152d49
Certificate serial:       0D5A96
Authority key identifier: 58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/84de94348fe52e02f89354a7d6d1038736a024a0.roa
Signing time:             Wed 24 Mar 2021 14:36:09 +0000
ROA not before:           Wed 24 Mar 2021 14:36:09 +0000
ROA not after:            Tue 24 Mar 2026 14:36:09 +0000
asID:                     269980
IP address blocks:        2803:f840::/46 maxlen: 48
                          2803:f840:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875158 (0xd5a96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fdade6fa28cbe8bc8b37b44f50fb9818152d49
        Validity
            Not Before: Mar 24 14:36:09 2021 GMT
            Not After : Mar 24 14:36:09 2026 GMT
        Subject: CN=84de94348fe52e02f89354a7d6d1038736a024a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:04:e8:09:f2:bf:e3:7e:31:5e:33:1f:f6:
                    b8:8b:77:21:c5:86:16:09:5e:32:58:a9:84:74:99:
                    81:ac:81:51:82:f8:00:e0:06:dc:1b:0b:b8:00:a4:
                    a0:ec:35:fa:06:39:0e:a2:83:d8:67:d0:b8:80:c1:
                    7e:e3:fd:a3:bb:a6:aa:3e:aa:cd:d2:41:cc:4f:bc:
                    4e:79:a3:fc:67:3d:8c:83:5b:67:64:d3:45:80:74:
                    e9:b8:76:f9:b3:e9:56:b3:01:b6:88:b9:ba:8b:31:
                    ed:5b:8d:25:3e:e0:51:2d:77:03:3b:4d:04:2d:a4:
                    4e:5e:f6:b1:a0:8e:8d:81:20:ce:7a:1e:e5:7c:65:
                    a6:a8:6e:22:ea:ec:9b:1a:af:16:ea:78:83:45:8a:
                    80:81:cf:96:d1:36:b6:0b:63:d9:6d:d3:e9:83:9b:
                    a6:f0:21:bb:7b:dd:18:a3:e5:64:cb:c4:3c:45:ad:
                    c5:f0:c1:5c:4f:bc:4f:f1:c0:02:17:08:b2:d0:9a:
                    a1:b2:fa:95:6e:db:76:17:ff:da:15:c4:d6:54:75:
                    49:c0:d9:60:3c:e9:47:61:07:eb:a9:f7:57:29:1f:
                    a5:37:fb:e8:9c:7f:75:6d:8b:04:b1:70:c7:a8:38:
                    97:8d:ff:2a:d0:0f:6e:aa:b5:64:42:22:b5:7b:f8:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:80:E6:44:28:76:B3:15:65:40:5A:01:53:AC:3D:2B:5B:41:6A
            X509v3 Authority Key Identifier:
                keyid:58:3D:38:CA:36:4B:D5:E2:1D:6A:DB:7D:93:B4:6F:37:00:B0:74:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/84de94348fe52e02f89354a7d6d1038736a024a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c50a542-8fb8-4588-84ea-93f140223e89/41fdade6fa28cbe8bc8b37b44f50fb9818152d49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f840::-2803:f840:4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8c:a4:c1:16:b7:c5:18:2b:73:2e:6d:bb:04:09:ee:1b:3d:b6:
         7b:c8:f5:5d:0a:2f:33:6d:d3:d9:17:3c:f6:17:51:09:ef:a4:
         3b:93:19:4d:9e:22:4a:c0:95:bc:3a:94:8e:28:f1:05:e4:2f:
         96:34:13:a8:df:8f:63:33:d4:31:41:ba:90:43:3a:4e:e1:5e:
         d2:2e:c9:d0:b1:43:1e:bd:9d:37:f9:eb:d0:3e:38:28:c8:94:
         fa:80:6f:69:72:2d:63:99:55:4d:2a:a5:8d:85:bf:40:fc:3a:
         97:b5:ba:bb:12:40:cc:25:f0:d2:39:ca:ff:b8:74:b8:d5:ea:
         8f:47:6a:d6:50:27:df:77:b5:f3:d5:53:f2:d1:2c:d4:c5:eb:
         0a:da:14:6e:c7:d6:9b:97:dc:af:a1:d6:bf:ef:61:b7:ef:d8:
         a6:60:9d:35:6f:b2:b6:5b:f0:c9:cd:9a:96:af:15:ce:e9:72:
         7a:41:94:c6:81:d5:0e:00:3a:ca:8a:2d:e1:4a:f0:94:88:d8:
         d3:cb:a7:07:c4:02:2e:0d:98:4f:8d:65:ad:c5:48:81:17:b5:
         2b:52:85:d3:8b:88:f6:ec:ff:d1:e7:8e:72:57:46:82:b2:cc:
         87:42:53:e3:28:37:f2:4f:1e:da:87:52:c6:8a:4d:93:ca:8e:
         6d:ea:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----