Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/0ddf4dad2ba6bbe3dfc64fa27cfb18abd1e57264.roa
File:                     0ddf4dad2ba6bbe3dfc64fa27cfb18abd1e57264.roa (raw, json)
Hash identifier:          JzMyDXTB8ihlBc34d8vEcSq1xgM1PK1qu1RTSLT6Ppo=
Subject key identifier:   BB:7A:2E:49:E6:30:5C:97:A8:0C:D2:F4:01:4E:C4:F5:07:F1:6C:1D
Certificate issuer:       /CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
Certificate serial:       096B0A
Authority key identifier: D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/0ddf4dad2ba6bbe3dfc64fa27cfb18abd1e57264.roa
Signing time:             Wed 24 Mar 2021 14:46:24 +0000
ROA not before:           Wed 24 Mar 2021 14:46:24 +0000
ROA not after:            Tue 24 Mar 2026 14:46:24 +0000
asID:                     27895
IP address blocks:        2803:2a00::/32 maxlen: 48
                          2803:2a01::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617226 (0x96b0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
        Validity
            Not Before: Mar 24 14:46:24 2021 GMT
            Not After : Mar 24 14:46:24 2026 GMT
        Subject: CN=0ddf4dad2ba6bbe3dfc64fa27cfb18abd1e57264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:af:ab:00:50:fc:65:9f:fb:62:e9:30:eb:
                    61:73:7a:fd:6c:52:7f:83:c9:f7:d7:1d:a5:b7:85:
                    73:c3:82:76:6f:7d:49:7d:c4:fb:a4:8f:b7:5f:81:
                    0f:43:36:3e:ab:97:54:58:f6:7b:ec:b9:ac:32:85:
                    16:42:e2:4d:3c:5f:62:68:14:d6:30:a5:12:1c:e5:
                    05:8a:22:ad:72:35:59:bf:0b:cb:b9:14:1c:6c:37:
                    3c:55:14:aa:59:bf:83:55:f6:83:28:f0:4d:36:47:
                    85:47:e2:a7:07:79:ee:30:15:c8:df:b8:aa:cc:56:
                    d0:0f:04:30:2e:d6:92:4d:25:f6:b3:bd:02:35:80:
                    26:23:3d:a2:b5:9f:9b:59:82:b7:a1:a0:dd:2d:27:
                    f5:d5:46:1d:84:90:1a:a0:39:1e:2e:b5:0e:d7:c4:
                    8e:fa:dc:89:86:d8:bf:18:26:c5:e8:ce:37:db:ed:
                    b6:f9:f8:01:2f:11:60:f0:f6:02:46:5b:a7:78:b9:
                    01:19:67:08:a5:fd:a5:23:55:7a:09:3b:ce:84:50:
                    cf:03:cb:d1:39:cc:87:d2:7f:1e:04:46:09:29:d7:
                    2b:87:ee:7a:18:4a:9b:75:53:c9:ff:a6:c2:93:39:
                    82:bd:70:34:ae:8a:0f:48:4e:30:af:0c:4e:31:e1:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:2E:49:E6:30:5C:97:A8:0C:D2:F4:01:4E:C4:F5:07:F1:6C:1D
            X509v3 Authority Key Identifier:
                keyid:D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/0ddf4dad2ba6bbe3dfc64fa27cfb18abd1e57264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a00::/31

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:74:06:8f:21:1b:db:1e:3d:16:e6:6d:55:93:6c:37:c1:
         24:d9:b3:b9:25:0f:16:df:b7:6e:d2:07:21:ee:9d:42:f4:8b:
         8f:12:35:d1:dc:a7:cd:14:b9:1b:dd:7e:aa:f8:c9:50:cf:c5:
         77:cd:76:9a:90:98:5e:e8:d6:b1:cf:71:d0:a8:e9:9b:fa:45:
         ec:81:1c:51:9f:42:6e:f8:83:50:bc:4f:97:20:91:f3:7c:ff:
         6a:53:28:da:02:59:2d:cd:8f:10:8f:bc:f8:f3:f5:d6:ad:44:
         e2:52:17:f9:e2:e7:a7:cd:9f:04:a0:a3:4e:84:b2:10:9f:24:
         46:ce:f4:cb:87:95:59:28:02:7b:61:01:b6:d8:d1:07:a2:b5:
         40:af:71:07:0f:4c:60:4e:36:6c:d4:68:bc:b9:51:36:99:9c:
         29:4d:00:78:6a:7e:da:17:d7:92:87:bc:45:aa:81:2f:d6:a2:
         bf:b2:1f:6e:a8:c6:fe:73:dd:fa:7c:2d:5e:4d:aa:c3:80:be:
         3f:93:b5:df:94:49:a1:d3:7d:61:90:52:fd:ce:ad:a4:0c:63:
         dc:89:3c:2f:22:6e:3f:1a:a0:c2:0a:9b:86:58:ad:7e:8c:cb:
         cf:fc:4f:02:e7:f4:2d:84:c1:7c:d3:1d:64:04:5c:9a:a6:c6:
         be:cb:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----