Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa
File:                     a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa (raw, json)
Hash identifier:          hzKNDletW700t57MKanprKafvf5Q8LbUYGYn+5E8jhs=
Subject key identifier:   2C:AA:7C:14:FD:78:6E:18:AC:A2:23:D7:2A:DC:7B:A0:08:93:81:D4
Certificate issuer:       /CN=c3d85f03580e6350cae3b1665689b40bfef21165
Certificate serial:       0BB1A7
Authority key identifier: 1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa
Signing time:             Wed 24 Mar 2021 14:40:10 +0000
ROA not before:           Wed 24 Mar 2021 14:40:10 +0000
ROA not after:            Tue 24 Mar 2026 14:40:10 +0000
asID:                     267778
IP address blocks:        2803:97a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766375 (0xbb1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3d85f03580e6350cae3b1665689b40bfef21165
        Validity
            Not Before: Mar 24 14:40:10 2021 GMT
            Not After : Mar 24 14:40:10 2026 GMT
        Subject: CN=a1e419bf95e3706a3f60c647de1bd72aedfc83cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:06:a8:cf:3c:25:79:8e:85:ec:e6:09:64:
                    73:67:3e:0d:2b:24:bf:19:9e:c9:d9:45:ac:97:5c:
                    ac:55:e5:36:37:92:db:af:aa:08:3d:b8:d7:b8:0b:
                    ef:92:57:bf:60:e6:19:b7:ae:fd:7e:50:08:7c:3e:
                    24:fc:b6:dc:2d:50:d8:b3:50:54:26:79:f5:e9:9f:
                    98:c7:e4:36:b1:ae:cc:42:08:c0:95:bb:09:bc:27:
                    48:32:42:ea:3a:69:ab:06:a1:c9:25:87:be:70:93:
                    48:ec:ff:88:7a:34:22:a5:a8:30:64:cd:ca:f0:16:
                    ca:b7:75:10:13:d9:ef:0d:14:f0:b0:a5:c3:be:67:
                    d0:65:f2:ad:89:d1:18:67:29:b8:86:19:b9:e8:45:
                    82:d6:63:ef:4f:2a:a3:34:c7:d7:a2:e3:2d:1e:10:
                    da:f3:57:b7:cb:8f:05:e2:6d:64:58:49:24:96:e5:
                    9e:c8:4c:3f:56:b4:aa:4d:b5:27:f7:63:9e:ef:8d:
                    ae:e0:92:62:ae:39:d6:ff:7c:15:66:48:64:58:c4:
                    cc:6f:2a:42:b2:63:82:ca:71:a4:2e:53:f3:2a:ca:
                    1e:09:9c:7e:10:52:fa:6d:85:46:a4:5a:eb:82:95:
                    3c:9b:a8:43:63:b7:b9:05:3b:04:6e:5b:df:98:17:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:7C:14:FD:78:6E:18:AC:A2:23:D7:2A:DC:7B:A0:08:93:81:D4
            X509v3 Authority Key Identifier:
                keyid:1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/a1e419bf95e3706a3f60c647de1bd72aedfc83cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:97a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:39:e3:e2:98:b3:63:9f:2f:0d:46:69:1a:d7:4a:90:15:58:
         2c:ca:14:c4:69:3a:7a:d8:64:15:53:91:01:d2:af:5b:56:ed:
         fb:6f:40:d1:34:28:da:d8:8a:6a:74:c6:ad:5e:e1:5f:b0:d6:
         48:4c:ac:0d:aa:a6:62:27:1d:96:e6:b9:1f:86:67:5d:5e:da:
         93:0e:93:7c:f8:99:cf:a1:e7:5c:f5:7b:79:70:f3:28:90:ac:
         f5:bf:86:5f:96:0d:1b:5c:0b:c1:92:54:2c:a0:e8:78:6a:4a:
         66:ac:2f:08:fe:d5:20:ae:a1:cf:c5:8b:2e:b2:4e:18:bb:bf:
         7a:e2:c6:d3:b1:af:8e:65:29:45:af:df:d0:59:38:1e:33:69:
         f2:e1:f8:e4:9c:61:2d:c6:4f:ad:f4:f1:59:80:99:e0:db:c3:
         a2:b7:54:44:da:32:82:90:a8:f0:79:e3:b8:e5:c8:45:98:b0:
         26:a2:e9:6a:be:5b:81:5d:9f:98:fd:4a:3e:2a:b6:14:69:aa:
         89:8d:5f:b3:77:ec:ee:5f:ad:50:83:a3:32:bc:ee:d9:92:08:
         4b:f0:97:63:e0:db:52:db:c3:ed:56:6d:c3:01:9c:2e:4b:1f:
         89:50:b4:0b:ab:b6:eb:76:f5:18:df:67:b1:5d:eb:33:d4:bd:
         02:c7:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----