Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/5d5b252b7a4f40033d72c613ce7057c8cc6d45dd.roa
File:                     5d5b252b7a4f40033d72c613ce7057c8cc6d45dd.roa (raw, json)
Hash identifier:          /rZrO89rmAQWKisIEql7gDib6mPIw3/k/0NGE2/Ttsw=
Subject key identifier:   B8:E4:20:83:62:AD:98:CC:6C:AB:DF:E6:9A:8A:36:39:C5:91:12:59
Certificate issuer:       /CN=997d13ec4a0ba912be13c21e8b300d59802938d4
Certificate serial:       0A8F34
Authority key identifier: B4:3B:03:63:60:EA:BC:A0:CD:5E:70:34:80:A2:0D:0A:BE:A4:8A:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/997d13ec4a0ba912be13c21e8b300d59802938d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/5d5b252b7a4f40033d72c613ce7057c8cc6d45dd.roa
Signing time:             Wed 24 Mar 2021 14:34:24 +0000
ROA not before:           Wed 24 Mar 2021 14:34:24 +0000
ROA not after:            Tue 24 Mar 2026 14:34:24 +0000
asID:                     262213
IP address blocks:        2803:4e0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692020 (0xa8f34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d13ec4a0ba912be13c21e8b300d59802938d4
        Validity
            Not Before: Mar 24 14:34:24 2021 GMT
            Not After : Mar 24 14:34:24 2026 GMT
        Subject: CN=5d5b252b7a4f40033d72c613ce7057c8cc6d45dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:b6:89:45:cf:65:64:a6:81:43:18:c5:27:
                    7a:11:e7:84:c7:3a:2e:57:26:e8:d2:6a:ba:30:f8:
                    6b:74:4f:ee:7b:43:74:8b:2f:a4:2b:01:65:4e:3c:
                    19:be:78:d5:73:97:5c:96:af:89:7d:f8:b8:6d:9b:
                    0c:5c:ea:a7:03:16:fd:3c:ba:cd:c4:08:21:e5:bc:
                    5c:55:f1:ac:a6:d5:1a:c8:5a:b9:77:79:cb:da:3c:
                    b7:33:84:ff:76:7e:87:70:31:bb:02:ae:b0:11:cc:
                    18:2d:eb:3b:1a:58:53:14:1b:d6:c8:13:f9:20:3f:
                    99:21:ba:20:78:e1:dd:d9:63:97:4d:70:34:21:6e:
                    2a:37:8c:99:b3:74:70:a4:a8:68:e7:e5:5a:ef:90:
                    02:af:44:93:44:01:f3:e7:df:82:f6:92:58:a4:c7:
                    9a:b7:6c:3e:ea:ce:72:b7:2b:bf:81:30:88:fb:cc:
                    49:37:8c:37:77:20:35:d8:8d:d3:bf:76:05:c0:67:
                    ee:9e:9b:eb:4d:ff:4a:eb:1b:98:4a:7a:32:db:78:
                    e3:c0:35:6b:d9:60:af:29:27:e2:e7:9f:97:53:fc:
                    27:bb:9e:7a:70:0d:b5:92:bb:71:5f:43:91:25:af:
                    cd:7f:29:0e:68:aa:9a:f3:25:fb:c8:08:bb:bb:ab:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E4:20:83:62:AD:98:CC:6C:AB:DF:E6:9A:8A:36:39:C5:91:12:59
            X509v3 Authority Key Identifier:
                keyid:B4:3B:03:63:60:EA:BC:A0:CD:5E:70:34:80:A2:0D:0A:BE:A4:8A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/997d13ec4a0ba912be13c21e8b300d59802938d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/5d5b252b7a4f40033d72c613ce7057c8cc6d45dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e125878-8e0c-4c0d-ba7c-0bec4648feda/997d13ec4a0ba912be13c21e8b300d59802938d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:65:29:f1:b9:35:6f:db:17:c9:11:22:ec:23:51:ac:e9:93:
         38:4d:d6:c7:3d:7a:b7:c7:b4:8e:c0:a7:de:93:c0:3f:59:04:
         95:65:04:e0:bf:e8:a9:43:83:8e:85:9f:3d:aa:c6:d8:b3:a4:
         2f:79:5c:f5:62:f0:06:89:1d:52:1d:bf:4e:6c:c2:35:1a:1f:
         c4:95:df:2d:7a:da:5f:64:20:91:bc:71:bd:66:04:5b:1c:1f:
         0a:3c:5d:93:16:05:72:08:7f:be:8e:cc:f3:ff:e3:56:0a:4e:
         67:d3:fa:04:96:21:15:7a:c1:07:47:f5:ea:9a:6f:87:4a:56:
         41:e2:a7:f1:d4:05:bf:7d:79:59:02:37:36:38:ce:06:a4:45:
         8a:98:22:49:b5:f2:b9:82:fa:20:94:1b:11:a8:8b:9c:e9:42:
         1f:37:75:2c:3b:bc:dd:89:2e:8d:ab:21:9b:15:2f:43:ef:c8:
         56:7f:6a:b4:84:a7:23:cf:94:14:4f:22:98:0f:64:74:81:94:
         3a:1f:a7:e7:3b:ee:11:51:47:a5:09:af:8c:cb:41:6f:0e:9f:
         59:26:a0:fa:d8:b1:0a:7a:a2:9d:92:69:77:e2:2c:d8:ae:b0:
         f0:46:c5:ad:79:c0:38:4b:71:93:2f:3e:32:20:8e:16:ec:1c:
         b6:0a:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----