Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/d0562d436c1c4d5cb7776b404bf35afefad75d73.roa
File:                     d0562d436c1c4d5cb7776b404bf35afefad75d73.roa (raw, json)
Hash identifier:          MyJIk9SdwClHajM+SIyCRjaMVchPkCgKD7DCv9ED1AM=
Subject key identifier:   F1:4D:BA:18:9B:C3:1E:8B:3F:89:DB:97:1A:D0:45:5A:BC:69:AD:79
Certificate issuer:       /CN=f77ab90cbd16229b500c705ad494b563882e5d72
Certificate serial:       039798
Authority key identifier: 04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/d0562d436c1c4d5cb7776b404bf35afefad75d73.roa
Signing time:             Wed 24 Mar 2021 14:30:35 +0000
ROA not before:           Wed 24 Mar 2021 14:30:35 +0000
ROA not after:            Tue 24 Mar 2026 14:30:35 +0000
asID:                     270089
IP address blocks:        2803:6be0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235416 (0x39798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77ab90cbd16229b500c705ad494b563882e5d72
        Validity
            Not Before: Mar 24 14:30:35 2021 GMT
            Not After : Mar 24 14:30:35 2026 GMT
        Subject: CN=d0562d436c1c4d5cb7776b404bf35afefad75d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:31:5d:7f:b1:02:90:78:ab:78:5a:0a:e0:
                    e5:a4:54:7b:3e:14:b9:fd:d7:d1:38:ff:61:c4:56:
                    64:5f:5e:09:17:08:6c:5e:78:8a:ff:eb:08:50:d3:
                    b4:c0:89:1d:1f:83:aa:eb:b9:88:54:00:4e:b3:00:
                    ce:a5:d3:96:f0:4d:aa:1f:ec:52:8d:64:14:b4:c8:
                    37:ff:a7:c8:d8:9d:71:b4:b3:c7:11:be:75:72:6a:
                    b8:ed:62:2a:bb:20:a0:53:79:18:a0:69:05:f2:ee:
                    e7:e6:c3:e8:a8:7e:5a:7e:d7:11:a9:79:62:60:34:
                    8e:34:a3:c4:74:64:00:55:32:21:5f:f8:6e:fa:e4:
                    e3:ae:d3:16:44:b3:f3:ea:50:2e:e0:b2:69:60:f6:
                    da:cd:33:9f:f6:02:33:b4:b0:be:92:fb:15:44:69:
                    51:2e:58:0e:4f:3d:9d:a2:46:61:d6:cc:f4:e7:9a:
                    98:cc:ba:cc:7d:80:19:f4:1f:02:ac:fb:9c:1a:87:
                    95:27:da:ae:59:9b:7d:1d:e3:a9:7c:63:8f:e0:24:
                    ea:fc:4c:41:57:dd:d7:aa:da:79:72:02:a2:aa:b9:
                    a5:e3:49:ea:75:27:dd:13:38:2f:e4:92:3c:08:5a:
                    21:c0:ba:29:20:dc:19:3d:c1:7c:aa:6f:e0:30:69:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4D:BA:18:9B:C3:1E:8B:3F:89:DB:97:1A:D0:45:5A:BC:69:AD:79
            X509v3 Authority Key Identifier:
                keyid:04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/d0562d436c1c4d5cb7776b404bf35afefad75d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/f77ab90cbd16229b500c705ad494b563882e5d72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:17:26:0c:87:4d:41:95:4a:4c:e6:00:68:46:1e:12:5d:d4:
         5a:32:af:84:df:14:61:72:4e:a5:32:03:f9:42:40:1c:66:c7:
         87:ed:93:32:e1:bd:af:49:21:73:34:b5:e5:91:2f:83:f5:4a:
         f9:8d:d7:3b:26:48:66:53:ad:91:46:e8:e6:f9:d5:eb:36:85:
         79:70:64:03:8a:56:47:57:b3:d9:7d:8d:01:e7:7b:d0:84:48:
         ba:fd:c3:eb:83:d8:8f:0b:ad:37:fb:8e:11:19:ef:21:1e:30:
         13:54:69:0a:23:ae:7a:ea:28:c2:d3:4f:24:01:6e:3d:f3:72:
         36:da:d1:89:a0:71:86:a1:51:d6:16:f9:d4:ec:9a:e9:f7:da:
         38:5e:3d:d7:3a:55:2d:a0:66:58:a6:af:79:5b:5f:73:5b:e1:
         4f:38:a0:49:12:06:d0:5c:87:94:fb:b7:60:56:79:20:89:cf:
         18:2e:11:f3:15:24:0b:ae:a2:ab:30:07:dd:aa:0d:71:2e:b5:
         98:d2:8a:f3:b2:9d:5c:96:18:29:d3:2d:21:e0:91:54:3d:6d:
         3d:a4:7e:83:b6:06:f0:a0:35:5d:da:12:d2:e3:d0:38:55:9d:
         ce:c4:38:17:d2:74:d0:5d:06:67:8f:26:18:f4:58:d8:df:34:
         b1:95:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----