Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/d5ed553cf3c3a80df2e03d284374f2114d87352b.roa
File:                     d5ed553cf3c3a80df2e03d284374f2114d87352b.roa (raw, json)
Hash identifier:          wjeaj0CVhqMYiZzvqm38ef/aL/q84FEzHm9PauZdfxk=
Subject key identifier:   D5:A1:25:D6:96:17:4E:38:0C:31:6C:34:E7:F1:A3:C7:32:03:85:AD
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       0D93B3
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/d5ed553cf3c3a80df2e03d284374f2114d87352b.roa
Signing time:             Wed 24 Mar 2021 14:40:08 +0000
ROA not before:           Wed 24 Mar 2021 14:40:08 +0000
ROA not after:            Tue 24 Mar 2026 14:40:08 +0000
asID:                     264668
IP address blocks:        2803:9ac0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889779 (0xd93b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Mar 24 14:40:08 2021 GMT
            Not After : Mar 24 14:40:08 2026 GMT
        Subject: CN=d5ed553cf3c3a80df2e03d284374f2114d87352b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:a9:2e:b5:e1:02:fd:11:6b:58:88:4d:59:
                    9b:1c:90:74:d9:e3:01:b5:12:60:2f:fa:62:40:39:
                    a7:66:8e:b1:31:6c:70:14:09:57:79:a5:31:57:e6:
                    59:85:a8:9d:5b:c9:d9:d2:4f:2b:aa:0e:44:ec:e0:
                    93:a6:3d:e7:72:80:fb:f7:24:b7:8c:05:0f:d0:24:
                    8a:18:7e:a9:3e:9a:ec:98:9f:1d:fd:b7:b0:67:36:
                    0d:cb:2b:ec:bf:79:e0:d5:f8:9a:b9:e9:17:76:6e:
                    60:dc:91:62:11:36:6c:21:53:ef:34:e8:72:a7:4b:
                    32:89:8f:f4:ee:23:d9:2d:18:7f:9e:f4:24:28:f6:
                    25:66:a1:33:2e:84:4f:e9:47:9a:3a:53:37:50:b1:
                    a6:86:38:0f:13:c4:e8:f5:18:5a:8f:49:92:fd:08:
                    be:dc:2a:0f:01:13:34:ff:a7:26:86:aa:81:2f:60:
                    c3:b2:df:1e:8a:08:b0:0e:51:07:27:f4:49:99:02:
                    b7:1d:31:e1:d5:76:0a:b4:a0:69:a9:57:cb:af:54:
                    75:48:c3:f2:0d:6e:57:53:64:b4:37:7c:f1:1b:48:
                    c9:28:37:5b:81:f8:13:9e:f9:ae:20:9b:05:30:34:
                    6c:7b:f4:36:b7:d1:d8:a7:a9:c6:28:60:a0:a1:8b:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A1:25:D6:96:17:4E:38:0C:31:6C:34:E7:F1:A3:C7:32:03:85:AD
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/d5ed553cf3c3a80df2e03d284374f2114d87352b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:79:27:bd:68:a7:52:b7:4b:8b:83:50:c2:ab:71:38:bf:00:
         10:fe:e8:3a:76:83:22:42:b5:53:c0:5f:6e:69:a3:e9:2c:62:
         8e:5d:93:27:99:91:0b:d1:aa:55:81:13:ea:9e:04:96:43:a7:
         46:de:af:8f:50:ae:4b:eb:ce:0f:e3:3e:a7:28:07:3e:c3:2d:
         d5:b5:05:e1:fb:12:5f:c2:55:bd:e9:c3:17:1a:37:91:dc:d6:
         5f:b2:f8:13:9d:33:d7:04:71:54:0b:3b:35:88:92:20:f4:72:
         47:c0:03:d5:f0:45:12:18:bb:0d:fb:44:f2:79:3a:11:ef:16:
         8e:5a:06:f8:ae:5b:f5:12:cf:a0:ec:08:3f:cb:ae:8f:44:64:
         14:11:cc:ed:2e:5b:0f:ed:8e:d6:bc:2d:8f:fd:11:ce:0f:80:
         fa:b0:29:71:5a:db:2d:20:60:33:64:85:ff:6f:3f:52:d4:ae:
         8e:f2:f1:17:6a:2c:52:f2:5c:5b:c8:f8:02:b4:81:20:09:de:
         88:ef:b3:3e:1f:ba:4e:f0:41:43:f7:de:ae:85:2c:52:7f:b5:
         76:06:da:f3:b1:cd:bb:05:5b:17:49:f7:c3:58:74:86:3f:e6:
         69:b9:e6:eb:90:21:1b:c1:34:76:35:e5:8d:88:a2:43:a4:8b:
         b2:0f:57:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----