Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/330c89556f340bedeac3fabc55472b42a593fe92.roa
File:                     330c89556f340bedeac3fabc55472b42a593fe92.roa (raw, json)
Hash identifier:          2hYYfW+jSqWX/6Dych5RqVph/mujP47uDp1Tdcw7iQk=
Subject key identifier:   AD:82:5C:6D:82:11:4E:B9:74:7C:B7:7F:CB:4B:B1:81:2F:AF:0A:46
Certificate issuer:       /CN=22a6df4fd40e763407bcafdfe5fa708cef91df5a
Certificate serial:       0BAA6E
Authority key identifier: B0:3D:51:76:39:FA:02:2E:8D:BC:CC:49:85:6F:8D:4A:0E:30:1B:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a6df4fd40e763407bcafdfe5fa708cef91df5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/330c89556f340bedeac3fabc55472b42a593fe92.roa
Signing time:             Wed 24 Mar 2021 14:41:02 +0000
ROA not before:           Wed 24 Mar 2021 14:41:01 +0000
ROA not after:            Tue 24 Mar 2026 14:41:01 +0000
asID:                     269831
IP address blocks:        2803:f760::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764526 (0xbaa6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a6df4fd40e763407bcafdfe5fa708cef91df5a
        Validity
            Not Before: Mar 24 14:41:01 2021 GMT
            Not After : Mar 24 14:41:01 2026 GMT
        Subject: CN=330c89556f340bedeac3fabc55472b42a593fe92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:85:cc:1a:21:5e:7c:75:dd:9c:52:d0:35:
                    b2:85:53:58:a0:c6:20:17:60:4f:5f:f4:a2:89:ae:
                    48:8a:c2:1e:53:5b:f3:28:b9:37:13:bb:45:ef:e9:
                    2a:6f:80:dd:61:14:50:4f:d9:39:02:97:93:b5:b1:
                    bb:bb:01:17:5d:f4:c7:64:7f:9c:de:51:22:b8:9a:
                    da:b0:f5:9f:96:7b:3f:2b:64:1e:57:c8:0b:f2:81:
                    6c:5b:85:8b:92:b6:95:cf:da:df:e8:b1:7e:65:f8:
                    bf:d7:f2:ac:a9:da:4e:a1:3a:35:13:46:77:19:a3:
                    f5:fb:14:67:a3:1e:40:3c:0b:f1:cb:19:04:3e:1b:
                    c6:0a:e8:13:77:eb:5a:ec:11:51:b7:02:e3:8d:6e:
                    52:9e:76:5b:17:18:d6:04:62:6d:2c:69:0c:c6:28:
                    8f:c7:a0:54:46:c8:9d:c9:ec:4f:e6:13:c0:b5:7e:
                    33:fa:c2:89:1d:70:d9:22:16:36:0d:d1:92:a6:92:
                    77:9d:79:c9:c4:69:fc:64:45:7c:cb:d8:7f:55:f1:
                    72:ab:ad:d3:15:0e:20:12:4a:e0:86:c3:3e:7d:1f:
                    a1:62:8b:d8:bf:85:41:23:83:26:3f:0a:e7:7d:4e:
                    5b:cd:ad:4d:30:41:57:9a:20:96:20:37:94:54:00:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:5C:6D:82:11:4E:B9:74:7C:B7:7F:CB:4B:B1:81:2F:AF:0A:46
            X509v3 Authority Key Identifier:
                keyid:B0:3D:51:76:39:FA:02:2E:8D:BC:CC:49:85:6F:8D:4A:0E:30:1B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a6df4fd40e763407bcafdfe5fa708cef91df5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/330c89556f340bedeac3fabc55472b42a593fe92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41f1dc3b-841f-44da-ba5d-0a3437bbea8e/22a6df4fd40e763407bcafdfe5fa708cef91df5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f760::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:25:38:78:9e:78:08:ad:8b:f6:ab:b8:16:22:bc:20:ce:
         a0:b3:af:2f:e3:d5:58:7a:47:ef:73:e4:eb:7e:0e:c2:95:f8:
         74:3c:94:79:bb:17:94:e8:d1:63:6d:c7:8e:f6:55:61:f1:4d:
         b5:68:1c:fe:a6:96:47:41:4d:30:6d:b1:49:ef:51:68:87:ef:
         30:0a:20:d1:17:c0:ef:66:77:c7:e4:8c:d6:bc:57:79:03:9e:
         cf:4e:d0:dc:b6:c7:5a:db:27:25:4c:ef:a2:04:4b:3b:61:92:
         f4:42:bc:c4:24:c2:20:e8:55:fa:6f:44:13:c9:ce:b6:be:88:
         f7:69:ea:23:48:8a:ef:04:ae:d8:0d:7f:4f:0f:7b:2b:98:6f:
         17:9d:71:8f:71:a9:3d:ea:65:27:b0:1c:e6:79:3d:3e:e8:2e:
         48:4d:f7:74:94:3f:72:1e:7a:d5:b5:cc:91:32:01:11:3c:a2:
         d6:17:3c:79:a9:34:6e:36:3f:c5:7b:34:e2:a5:c3:07:9b:23:
         aa:89:e8:8e:73:ef:51:07:a9:54:6a:48:0b:0d:a4:a9:cf:6b:
         55:66:d7:86:5d:31:b9:34:ab:04:54:2b:08:3a:01:98:3d:b6:
         5a:af:a9:01:c9:d6:20:a1:3c:46:99:fa:fe:77:2f:3c:40:33:
         e8:6e:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----