Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/678d888acf1eba35827b303815281b95d19a385b.roa
File:                     678d888acf1eba35827b303815281b95d19a385b.roa (raw, json)
Hash identifier:          Lods2I5bMdxeOafq7wVkh2uBb6H8WsUk2OAtU39mrrM=
Subject key identifier:   9A:42:38:2B:01:73:1C:1F:56:4B:F5:B2:5A:15:A7:00:73:2B:2B:DB
Certificate issuer:       /CN=a77db4a4e3f57449d87d4445aa15303ad472c017
Certificate serial:       0332F7
Authority key identifier: 81:5D:BC:55:F6:CA:7B:01:59:A8:44:71:B6:06:79:99:01:8A:42:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77db4a4e3f57449d87d4445aa15303ad472c017.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/678d888acf1eba35827b303815281b95d19a385b.roa
Signing time:             Wed 24 Mar 2021 14:31:06 +0000
ROA not before:           Wed 24 Mar 2021 14:31:06 +0000
ROA not after:            Tue 24 Mar 2026 14:31:06 +0000
asID:                     52317
IP address blocks:        2803:720::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209655 (0x332f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77db4a4e3f57449d87d4445aa15303ad472c017
        Validity
            Not Before: Mar 24 14:31:06 2021 GMT
            Not After : Mar 24 14:31:06 2026 GMT
        Subject: CN=678d888acf1eba35827b303815281b95d19a385b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:a1:4f:b4:ce:11:1d:f7:29:b3:c0:ef:6c:
                    52:56:2e:1f:1c:e7:d6:74:dc:96:a3:f5:60:8d:68:
                    41:5f:89:f0:57:8b:cb:2b:48:04:d9:b2:95:45:4e:
                    35:37:16:66:3b:46:b1:8a:48:dc:3b:42:00:ab:4e:
                    c1:69:7b:ae:62:c0:60:0d:8c:09:73:ac:c4:d4:58:
                    79:1f:66:5f:77:87:aa:6e:da:20:80:af:28:17:fa:
                    ed:c6:13:d6:30:ad:90:7d:b0:2c:f5:04:76:ad:a1:
                    83:a4:e6:90:d9:4c:05:ea:08:f0:f7:88:06:2c:84:
                    a0:f8:da:02:0c:60:a6:99:ac:d2:e3:88:d5:00:e2:
                    75:bc:25:88:bc:8b:5a:58:f9:5a:18:57:1d:b5:e8:
                    af:37:1f:1a:0f:ad:52:ae:17:2e:f7:2d:02:22:10:
                    10:69:4b:31:7c:ec:29:19:c4:c8:08:37:56:ff:f6:
                    a8:d8:f0:ef:e9:bb:2e:81:01:96:2c:4a:c2:d9:35:
                    92:d4:c0:7e:e4:91:58:09:e5:aa:c5:23:96:f0:43:
                    00:37:b4:43:b3:55:a0:86:c6:1d:6f:24:ec:fe:2a:
                    d3:1b:4e:12:19:3c:28:4c:c8:b9:1b:f6:fd:ee:7d:
                    60:e6:97:be:c8:eb:3d:14:27:13:3f:de:0d:09:db:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:42:38:2B:01:73:1C:1F:56:4B:F5:B2:5A:15:A7:00:73:2B:2B:DB
            X509v3 Authority Key Identifier:
                keyid:81:5D:BC:55:F6:CA:7B:01:59:A8:44:71:B6:06:79:99:01:8A:42:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77db4a4e3f57449d87d4445aa15303ad472c017.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/678d888acf1eba35827b303815281b95d19a385b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/a77db4a4e3f57449d87d4445aa15303ad472c017.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:720::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:86:ad:24:d5:c5:54:e7:45:3a:a1:58:a6:d0:c0:7a:a5:44:
         b8:c6:f4:c6:4a:97:d5:4c:cb:c7:0a:0b:da:ae:8d:64:a1:a3:
         90:f8:63:79:35:c6:64:6b:9f:8e:26:14:30:cb:93:b9:cc:29:
         43:34:fe:a3:be:b0:87:90:44:bf:65:94:3f:2a:1a:02:19:0c:
         09:53:80:c9:4c:2e:2f:8c:06:55:6a:51:e9:dd:c9:0a:51:e0:
         45:f5:15:cc:e1:61:4d:a4:d5:8a:7d:bb:dc:f0:a1:01:77:6f:
         0d:5b:b2:17:64:15:ee:90:24:cf:fe:c0:9a:f1:e3:b3:d9:0c:
         09:36:4d:84:c9:01:46:80:85:76:b5:41:3d:45:6a:5a:0b:20:
         d7:2e:22:88:36:f4:a5:b5:84:e1:0a:3e:33:f7:4a:35:a7:e7:
         48:c9:b3:d5:a5:5f:94:62:b7:7d:52:a6:7a:f5:13:c0:ec:83:
         ea:35:0e:94:8a:62:eb:0d:18:aa:b5:79:d3:fb:51:6e:1b:6b:
         40:32:08:ee:21:de:89:80:47:e9:c3:26:9f:4a:ac:a4:89:b2:
         8e:48:a9:48:3b:e4:4d:f4:eb:e0:de:bc:ec:32:5e:56:70:f6:
         5b:49:76:a8:c0:14:ff:05:ef:16:28:b4:4f:5a:29:65:4e:78:
         af:0d:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----