Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/06d8948b8fb7db1e18093c012fd9c7219ff7ba4d.roa
File:                     06d8948b8fb7db1e18093c012fd9c7219ff7ba4d.roa (raw, json)
Hash identifier:          dPaGbG5JKc3wXzIGy5/znMZkjlb78ypCsTCmkzE8pXk=
Subject key identifier:   30:5A:91:93:E1:9C:20:46:84:E6:68:33:76:CA:24:5E:26:3A:65:1B
Certificate issuer:       /CN=f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99
Certificate serial:       0D938C
Authority key identifier: 35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/06d8948b8fb7db1e18093c012fd9c7219ff7ba4d.roa
Signing time:             Wed 24 Mar 2021 14:38:29 +0000
ROA not before:           Wed 24 Mar 2021 14:38:29 +0000
ROA not after:            Tue 24 Mar 2026 14:38:29 +0000
asID:                     270016
IP address blocks:        2803:67c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889740 (0xd938c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99
        Validity
            Not Before: Mar 24 14:38:29 2021 GMT
            Not After : Mar 24 14:38:29 2026 GMT
        Subject: CN=06d8948b8fb7db1e18093c012fd9c7219ff7ba4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:6d:1d:fe:e6:e7:e1:61:ea:2b:9b:9c:ca:
                    b3:d2:f6:7a:ef:b0:bc:7b:83:ea:71:e0:9f:af:7e:
                    2e:f3:81:a6:0c:85:ae:d8:9a:8b:31:dc:3b:68:64:
                    04:7e:17:60:aa:a1:0f:b7:20:dc:09:1e:e7:b2:d5:
                    4d:bb:f8:ec:c9:0a:8d:c1:31:cb:f7:27:fb:18:89:
                    f5:40:71:11:cd:d4:da:1b:39:6e:52:e4:27:be:c2:
                    0d:60:68:5a:63:19:c4:9c:b3:7f:b0:a2:c2:c9:c2:
                    f6:9e:0c:c9:c7:37:9b:be:6d:ae:a9:f1:97:ce:47:
                    25:42:7d:96:64:ad:a4:d3:f1:95:f6:87:8e:cf:d8:
                    bf:fd:f7:34:e4:f4:b2:e2:a1:2f:46:40:5c:64:5c:
                    19:8e:44:e4:75:00:7c:81:29:a5:06:88:58:16:61:
                    c0:aa:5e:15:e3:61:2e:7c:43:46:fb:69:f2:c0:9c:
                    b9:1a:26:57:d9:c6:78:38:58:b6:f3:d7:02:d3:93:
                    81:88:0a:4d:ca:3e:19:0a:b9:31:74:8f:5c:d5:76:
                    07:c4:25:4c:21:b2:2b:e6:8e:64:8f:38:a0:8b:23:
                    64:7f:5d:a9:34:d1:2c:91:9c:11:79:c1:1f:a3:4c:
                    7e:8a:b3:97:5c:b9:5c:32:2b:70:75:fc:7d:aa:53:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5A:91:93:E1:9C:20:46:84:E6:68:33:76:CA:24:5E:26:3A:65:1B
            X509v3 Authority Key Identifier:
                keyid:35:B1:6D:7A:72:65:78:D7:94:68:40:DA:52:E6:EF:EA:FF:C5:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/06d8948b8fb7db1e18093c012fd9c7219ff7ba4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/391af2aa-2011-4375-a6b3-e51072c4b69b/f4f1d06d98d37a8025b7f2ef8d4d921ff64f4e99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:11:69:ae:d9:ea:f9:dd:14:07:7e:c6:5d:6f:f2:b9:1f:71:
         72:10:3f:7a:62:ca:29:ed:f4:d6:ec:2b:ff:d9:5c:f8:a4:2f:
         c7:5a:28:a5:c4:7e:42:13:d7:4f:02:24:a9:35:b2:cf:d2:fe:
         d0:42:a2:26:76:c9:a1:32:8e:90:0c:26:cb:90:ca:b1:3b:b3:
         30:84:c9:ac:2a:92:ac:a4:ad:24:4b:7e:d7:e5:db:dc:72:76:
         23:de:e2:41:30:54:91:02:37:59:18:95:1f:93:09:00:eb:de:
         5c:ad:28:1a:42:4a:42:50:00:8f:8c:17:92:04:9d:bb:fd:9f:
         8d:7d:0c:90:18:f6:2c:8d:98:d0:89:b5:8d:c9:32:2e:8b:31:
         22:8a:38:bf:15:c9:5b:84:63:2c:ca:2a:1d:59:16:3d:66:0e:
         64:cf:b6:31:91:9c:f5:b9:88:1a:b3:c5:f2:f1:52:51:60:8b:
         22:f6:db:4d:93:40:68:3e:30:90:5d:14:e0:a3:5f:67:f8:1c:
         54:ff:b1:c5:eb:1d:f3:fa:c0:bb:15:b9:bf:63:bc:24:67:34:
         34:f8:5a:97:6c:df:c1:83:15:c2:36:6b:86:16:20:b6:b6:d3:
         14:be:af:0a:f5:c7:6d:12:d0:d9:eb:c3:7d:81:14:d2:97:d7:
         51:a0:e0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----