Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa
File:                     66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa (raw, json)
Hash identifier:          1MsriiZlAGOqgkd7Eu+XJ/VKqorudeMpKTHjIatZ+34=
Subject key identifier:   65:3D:5E:ED:F4:04:E3:32:F8:94:81:43:4D:0A:32:EF:01:BB:A8:E2
Certificate issuer:       /CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Certificate serial:       0D7F1D
Authority key identifier: 44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa
Signing time:             Wed 24 Mar 2021 14:40:45 +0000
ROA not before:           Wed 24 Mar 2021 14:40:44 +0000
ROA not after:            Tue 24 Mar 2026 14:40:44 +0000
asID:                     265657
IP address blocks:        2803:46c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884509 (0xd7f1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
        Validity
            Not Before: Mar 24 14:40:44 2021 GMT
            Not After : Mar 24 14:40:44 2026 GMT
        Subject: CN=66d8a4d902ace35e86090ea8ae5c0de9ec217b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:44:d8:a1:7b:1f:11:96:af:11:e6:26:af:
                    dc:4e:20:2a:9e:8b:f1:7b:f9:b0:fc:8d:87:8a:cd:
                    9b:84:6b:01:ba:c3:5b:17:29:45:b2:f3:d8:75:5c:
                    c3:2f:13:b7:4c:55:5a:48:58:44:a5:83:48:c4:06:
                    9e:8e:36:3d:9f:e2:df:cc:ae:ef:c4:f1:94:97:86:
                    ec:51:4e:18:36:10:ef:d0:d6:90:a3:b7:a0:a3:32:
                    c7:4a:ad:b3:53:d8:a9:2b:6d:9d:ae:84:7f:44:66:
                    32:02:56:56:a0:b9:4d:ec:57:ad:30:23:4d:ed:2e:
                    fb:19:cd:b9:04:97:d7:d6:7c:ae:1f:dc:59:ab:8c:
                    19:07:be:16:cb:93:e9:b4:4e:b5:6c:cc:c6:b6:7a:
                    40:c8:bf:27:1e:24:31:92:c1:0b:c3:83:ad:a1:aa:
                    fa:d9:55:5f:cb:99:79:f6:55:7c:4f:80:a8:ec:c4:
                    9c:5c:e2:54:5a:e6:4b:27:93:ab:fa:cf:da:80:70:
                    62:b1:89:63:65:e0:3c:8e:81:89:b7:38:c3:d9:fe:
                    ce:e4:4f:1b:83:a0:6a:cc:eb:86:85:d5:ce:85:b3:
                    f7:dd:27:cc:bf:7b:67:d0:ae:1a:1f:98:c6:ab:53:
                    da:d7:d4:90:f0:8c:b6:0d:d7:0b:66:2d:cd:82:75:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3D:5E:ED:F4:04:E3:32:F8:94:81:43:4D:0A:32:EF:01:BB:A8:E2
            X509v3 Authority Key Identifier:
                keyid:44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:46c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:d3:a4:90:06:53:27:90:55:79:7c:e3:fa:b4:34:a4:74:
         c2:e8:d3:33:c7:63:5c:11:25:ee:76:8f:8c:73:e9:65:35:94:
         6b:53:a6:c0:0c:b9:4e:a3:84:02:fc:a5:c1:f6:74:ca:e5:a9:
         4a:1a:e7:12:1d:dd:39:2e:37:6b:aa:3b:31:15:48:e3:e7:91:
         09:b2:98:11:83:31:60:4d:ff:72:ca:d2:37:92:48:70:e8:d2:
         37:63:7e:4d:12:d0:e7:96:1b:12:7d:e2:a1:54:f8:ff:00:72:
         b6:c1:f1:e2:49:87:f5:94:b4:2b:55:37:fe:ba:16:d1:2f:02:
         6b:b8:e9:45:d7:ed:24:75:a5:98:ac:30:26:de:ea:ab:38:bf:
         fb:59:69:95:ff:34:8e:85:3a:c1:17:79:76:ec:09:03:0d:76:
         53:e8:ad:2e:ab:79:b2:49:c6:b6:fc:e9:16:57:3b:82:2f:73:
         6a:f9:fb:19:32:91:0a:b0:61:d8:8b:12:6f:36:9c:3a:01:48:
         43:47:0b:fc:c1:24:8f:93:3b:b9:6b:b6:91:e6:fc:d0:72:66:
         4e:0d:80:c0:2d:1f:c9:cc:99:bf:13:08:1a:34:2c:0b:61:d1:
         81:03:95:47:96:2e:45:6c:e1:e9:63:61:ad:66:29:fe:07:51:
         8c:81:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----