Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/41b289de78790b7b231571ff06ac756769a262bf.roa
File:                     41b289de78790b7b231571ff06ac756769a262bf.roa (raw, json)
Hash identifier:          Xf8CpNUJ+AXczVluNx99fdMndaBa99hz5Q00nmA/dL4=
Subject key identifier:   C8:8C:4F:7B:2B:CF:77:F2:65:5A:E9:35:FF:62:66:A6:23:72:22:D7
Certificate issuer:       /CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
Certificate serial:       A861
Authority key identifier: A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/41b289de78790b7b231571ff06ac756769a262bf.roa
Signing time:             Fri 26 Mar 2021 13:38:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269905
IP address blocks:        2803:4ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43105 (0xa861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=41b289de78790b7b231571ff06ac756769a262bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:e6:e6:de:0e:ef:69:87:72:e3:a5:17:04:
                    4f:8f:90:a9:aa:06:06:f8:77:ad:9a:c4:e1:1c:c2:
                    d8:a6:32:69:24:7e:28:11:a4:28:d1:bf:62:11:12:
                    9c:e8:60:07:00:d6:f4:ed:a2:21:98:19:53:93:d0:
                    e9:a1:af:1a:32:3c:87:2b:e1:ae:86:58:cb:29:7d:
                    0f:99:47:8e:88:a7:9d:61:e3:fd:84:61:c0:ec:82:
                    59:46:50:8a:ca:2c:07:8f:d0:1e:aa:db:69:33:f8:
                    ce:ff:41:9a:dc:1a:5f:ff:90:7d:2a:aa:5f:03:0e:
                    ff:41:77:60:5f:11:f4:b4:ee:99:ab:db:6b:4a:cd:
                    b5:aa:49:ba:84:84:0d:ee:cf:2e:98:c2:14:f6:cf:
                    cc:2f:56:bc:98:03:eb:e4:97:ac:0a:9b:93:8d:9a:
                    9e:6a:91:bb:37:d6:b7:1e:ea:f2:46:04:c5:27:07:
                    82:c3:3a:29:3c:fc:df:57:9d:bc:b1:f4:8d:c4:07:
                    c6:c5:7a:65:e6:e7:76:5d:f6:01:cf:43:81:98:2d:
                    d5:e1:8d:c4:4a:3e:9b:3a:87:3f:07:85:2f:b8:94:
                    1f:32:8c:67:16:6c:9b:ae:ab:1e:bf:aa:0e:9d:73:
                    b4:56:b3:0c:d8:9d:b0:3c:76:88:10:b0:3a:58:5e:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8C:4F:7B:2B:CF:77:F2:65:5A:E9:35:FF:62:66:A6:23:72:22:D7
            X509v3 Authority Key Identifier:
                keyid:A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/41b289de78790b7b231571ff06ac756769a262bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:e2:6d:5a:18:17:53:48:66:5a:38:81:4b:d0:ad:20:04:
         19:ca:dc:c6:85:8a:0d:ba:eb:b0:d2:fd:16:b3:c3:d1:c1:15:
         35:e5:22:cf:16:27:8d:f2:c7:9f:50:7e:6d:4f:2b:27:31:9c:
         b4:3a:57:35:05:b9:c8:66:7f:f4:35:f8:23:4e:97:31:d1:1d:
         0d:e0:5e:e7:15:99:c8:6f:00:ff:d1:63:f5:2d:aa:55:e0:24:
         ea:36:c3:a6:b4:c2:d2:8a:d5:a5:a9:0a:dc:da:e8:12:71:ea:
         aa:b9:c3:59:d8:2e:fa:da:6a:c3:da:9f:af:db:5e:c7:eb:99:
         33:41:81:4c:95:e3:fe:8b:b2:0a:71:07:ff:fd:7f:7b:2c:1f:
         9e:a0:db:7b:61:55:11:22:c4:2b:d7:4b:78:f2:57:3c:59:e3:
         b2:68:8b:fd:de:78:2b:20:22:9e:ed:58:e3:13:17:47:e0:22:
         5c:a6:b9:2e:53:11:b4:a0:95:4d:df:1e:0c:82:22:c7:c9:87:
         77:c9:29:ec:dd:46:43:d7:aa:ec:d4:78:f8:e3:c0:db:0b:42:
         83:87:16:db:d6:a4:e3:9f:c4:71:10:72:78:06:c0:97:8f:64:
         0a:d6:6d:a0:9f:6d:fb:f7:ec:4d:21:c4:be:dc:58:b4:2e:6a:
         fb:8f:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----