Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/742ebc6816c96bb3570554d10b51f96025d430e0.roa
File:                     742ebc6816c96bb3570554d10b51f96025d430e0.roa (raw, json)
Hash identifier:          QXVIcLVs/r2kX+e+eJWR7A9REXCxSx2ph+xS7FGWrrA=
Subject key identifier:   32:B1:95:5F:96:34:48:9F:D8:57:06:92:82:68:DE:D3:70:97:FD:70
Certificate issuer:       /CN=cef9aa9384c1285b595d5d1c9bba5d693217df5c
Certificate serial:       0D6EF4
Authority key identifier: D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/742ebc6816c96bb3570554d10b51f96025d430e0.roa
Signing time:             Wed 24 Mar 2021 14:38:21 +0000
ROA not before:           Wed 24 Mar 2021 14:38:21 +0000
ROA not after:            Tue 24 Mar 2026 14:38:21 +0000
asID:                     264605
IP address blocks:        2803:9640::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880372 (0xd6ef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef9aa9384c1285b595d5d1c9bba5d693217df5c
        Validity
            Not Before: Mar 24 14:38:21 2021 GMT
            Not After : Mar 24 14:38:21 2026 GMT
        Subject: CN=742ebc6816c96bb3570554d10b51f96025d430e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:54:72:aa:9f:ba:e6:00:59:50:2c:25:0c:
                    21:9b:7f:3a:88:fb:84:ad:27:21:3c:1c:29:25:1f:
                    bd:54:7a:58:e7:3b:b0:a5:44:d2:99:7e:75:fe:b3:
                    1e:e9:26:e6:ae:8e:b3:85:f0:76:ec:02:68:86:b9:
                    a9:8d:7f:18:3b:26:b8:90:e4:e3:7b:31:83:a2:a3:
                    07:72:2c:5f:27:1e:2d:4c:5d:b5:55:e6:c4:b5:ff:
                    ab:ec:42:c3:5d:69:41:5d:42:09:1c:a4:d5:77:ff:
                    ce:8c:f6:84:a3:dd:2e:a6:9a:2d:e2:9d:e3:43:20:
                    ba:0f:86:ae:97:dc:cd:92:05:de:5a:1a:0a:d1:b8:
                    45:08:3d:95:8f:c3:52:19:f6:19:e9:69:b7:49:0e:
                    79:6c:fc:a5:d6:f1:2a:33:b6:e5:05:c6:57:3b:71:
                    f7:64:9c:87:a2:48:49:c0:ea:49:5d:8e:10:a7:a4:
                    90:a7:91:68:b6:83:cf:1f:cf:7e:6d:9c:72:9f:46:
                    0d:01:c6:e1:fa:72:56:71:d7:b8:4b:0d:21:f6:0d:
                    2d:d3:2e:9c:23:ab:03:09:51:0d:f4:d9:19:68:c6:
                    17:71:5c:e8:15:f6:af:d8:0f:e4:45:9d:33:58:f7:
                    29:74:d7:b9:ff:81:18:fa:a0:ef:07:b1:6f:f2:dc:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:95:5F:96:34:48:9F:D8:57:06:92:82:68:DE:D3:70:97:FD:70
            X509v3 Authority Key Identifier:
                keyid:D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/742ebc6816c96bb3570554d10b51f96025d430e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9640::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:ce:f2:97:79:29:5e:0c:e9:f1:b6:9f:a9:af:a3:02:18:
         e7:54:1b:f0:9d:58:1a:08:23:53:48:4a:57:92:a5:8b:42:33:
         4b:bf:75:81:3d:20:71:91:a8:49:eb:a4:64:ca:ce:fa:a4:b4:
         86:c6:2c:46:42:dc:41:1c:00:4d:c9:49:e3:2c:b0:ce:07:e0:
         6f:fb:3e:fc:ae:f9:ed:6a:6d:05:aa:e9:66:46:3e:d0:6d:e5:
         a6:70:20:4f:6a:34:eb:56:20:e4:26:51:ed:5f:50:87:0d:9a:
         55:b4:c0:ad:85:ce:53:c3:bc:63:0f:02:e4:61:61:54:c2:18:
         4e:38:cc:d6:36:ce:c8:77:aa:a4:8a:a1:29:1d:25:35:b5:07:
         ae:c0:0f:2e:56:0f:9e:71:08:70:2c:9e:e2:41:ee:51:23:c4:
         d2:c0:27:df:c0:4d:46:a7:2d:c0:ed:02:93:ed:0c:0f:fc:69:
         f7:27:59:0f:44:70:a1:ef:c7:ea:7e:a6:14:a6:11:56:9f:66:
         16:50:79:3b:41:82:bc:e8:90:c5:a1:00:40:92:d7:d5:e9:68:
         12:b1:76:21:64:5d:0e:8e:95:b5:59:b7:52:a8:5b:83:27:a3:
         37:e2:6d:e4:0f:0a:66:ee:b4:09:8e:9a:a8:a2:f0:7e:c2:b9:
         5b:4b:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----