Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/1c60226d49421d8bc7a5215113c688da8cb21692.roa
File:                     1c60226d49421d8bc7a5215113c688da8cb21692.roa (raw, json)
Hash identifier:          njsPSzBFx+hiYug4qhDY6lNyljxoaF4jmGlHRwZesH8=
Subject key identifier:   4C:02:C6:E4:0F:1B:5A:4D:A0:7C:32:33:6A:11:64:0D:2A:57:59:6A
Certificate issuer:       /CN=a17e16a16dcad72b297e376ab8c89b4770e59c66
Certificate serial:       0D903B
Authority key identifier: BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a17e16a16dcad72b297e376ab8c89b4770e59c66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/1c60226d49421d8bc7a5215113c688da8cb21692.roa
Signing time:             Wed 24 Mar 2021 14:31:48 +0000
ROA not before:           Wed 24 Mar 2021 14:31:48 +0000
ROA not after:            Tue 24 Mar 2026 14:31:48 +0000
asID:                     265689
IP address blocks:        2803:35c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888891 (0xd903b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a17e16a16dcad72b297e376ab8c89b4770e59c66
        Validity
            Not Before: Mar 24 14:31:48 2021 GMT
            Not After : Mar 24 14:31:48 2026 GMT
        Subject: CN=1c60226d49421d8bc7a5215113c688da8cb21692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:5c:14:3a:76:74:bc:33:02:39:88:40:d9:
                    a6:13:97:be:66:1b:a1:14:15:c5:3f:83:94:b1:6a:
                    f4:a2:ba:97:91:8c:4b:ac:92:43:ab:2d:f3:14:5f:
                    fa:33:77:42:17:31:8d:77:ac:fc:46:0a:5d:b5:de:
                    0c:97:87:03:8e:53:97:e4:a9:0e:8b:11:dc:33:92:
                    59:7e:84:64:f2:39:dc:56:c6:4b:56:95:5c:f3:93:
                    aa:50:cd:03:13:04:bc:1c:27:c8:7d:8b:b7:4b:30:
                    f2:a8:ba:55:f7:4f:15:64:c3:9c:fb:2d:97:01:32:
                    f8:d1:45:2b:74:3b:f5:cc:b6:94:65:b9:38:64:12:
                    74:8b:97:8f:a9:5a:d6:b8:f1:bc:10:c7:46:2e:1d:
                    5d:09:a6:90:28:17:1d:2f:c2:d2:f6:5f:1d:03:b2:
                    6c:88:dd:bb:a7:8e:22:39:91:6d:56:a9:e0:d8:18:
                    58:4b:96:4c:99:65:63:fd:2f:01:a6:9d:03:c2:a0:
                    a8:e7:47:fe:1b:e3:cf:3d:1c:0e:88:2c:f3:66:3f:
                    4a:7a:62:89:32:1b:79:be:40:03:b6:69:c5:00:a2:
                    d3:c6:0e:99:fc:44:31:90:03:87:e2:ee:c3:7a:a3:
                    87:85:cc:d2:08:88:19:4c:df:bb:2e:c9:84:0f:64:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:C6:E4:0F:1B:5A:4D:A0:7C:32:33:6A:11:64:0D:2A:57:59:6A
            X509v3 Authority Key Identifier:
                keyid:BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a17e16a16dcad72b297e376ab8c89b4770e59c66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/1c60226d49421d8bc7a5215113c688da8cb21692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a17e16a16dcad72b297e376ab8c89b4770e59c66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:3c:e7:39:1f:e2:9d:d3:a5:70:68:35:f6:8f:5b:e7:02:
         17:2d:ee:79:e7:80:60:82:7a:ff:48:4a:4c:51:63:98:da:08:
         d9:fb:79:2e:7a:2b:f4:ba:c0:3b:73:e5:ac:6e:c3:33:7d:76:
         f6:af:d7:a9:23:b8:e5:19:76:88:9b:1d:fc:b4:15:5b:96:ff:
         af:70:b7:a8:b6:4a:1c:43:7e:ed:6a:18:e1:f7:ee:29:7e:dc:
         42:ea:9c:18:4a:53:8e:43:9c:c3:6e:29:9a:ec:43:d2:af:93:
         ce:5e:00:b3:1e:8f:ae:58:57:98:6c:51:9f:4f:0f:a2:4d:54:
         9f:da:a6:e3:81:30:80:46:59:3d:64:21:d4:1e:60:5b:97:6f:
         ab:67:44:24:d2:16:1e:c3:6d:d3:3f:3d:7b:59:08:61:85:b6:
         d5:5e:28:ec:4d:96:4c:ed:47:4f:cc:fc:51:8c:62:49:27:17:
         0e:be:8e:30:bf:c4:7e:3a:55:ca:16:a5:ae:09:9a:fb:15:d7:
         6c:f3:5f:b1:7c:1d:5a:a5:d0:10:a0:6e:57:2d:75:36:54:e6:
         01:f2:c8:2e:d5:a7:6a:f3:4d:28:9e:69:59:8b:91:74:36:9d:
         50:78:0c:05:33:2a:d6:77:8d:48:b9:3f:9d:47:76:a1:bc:5c:
         99:80:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----