Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/243236c1ad4f0ad817609687eb5f3b71bafe9f22.roa
File:                     243236c1ad4f0ad817609687eb5f3b71bafe9f22.roa (raw, json)
Hash identifier:          KbsCB5BSSk7bOmEH6txReXQchfDy3DLBll8OdKlpeYc=
Subject key identifier:   E5:80:B7:9B:DB:8E:57:40:9F:B7:C9:8B:0E:FB:91:73:9A:CF:72:0E
Certificate issuer:       /CN=60661bffa767018bfc2cf77453cdffb78a624ff6
Certificate serial:       0D1790
Authority key identifier: 41:66:04:AB:4E:B7:7F:62:1D:47:0D:99:F3:F5:F0:04:2A:C2:91:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60661bffa767018bfc2cf77453cdffb78a624ff6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/243236c1ad4f0ad817609687eb5f3b71bafe9f22.roa
Signing time:             Wed 24 Mar 2021 14:46:18 +0000
ROA not before:           Wed 24 Mar 2021 14:46:18 +0000
ROA not after:            Tue 24 Mar 2026 14:46:18 +0000
asID:                     265759
IP address blocks:        2803:3bc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858000 (0xd1790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661bffa767018bfc2cf77453cdffb78a624ff6
        Validity
            Not Before: Mar 24 14:46:18 2021 GMT
            Not After : Mar 24 14:46:18 2026 GMT
        Subject: CN=243236c1ad4f0ad817609687eb5f3b71bafe9f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:3f:74:66:9c:c1:2f:fc:7f:3e:7f:af:a5:
                    11:af:30:5a:cf:d3:e8:b6:87:fb:a0:33:07:ac:70:
                    36:1b:de:53:7a:6e:0b:f7:a5:84:f9:9d:8e:34:d2:
                    8f:1c:09:f0:3a:8a:4e:4f:dc:b3:6e:ce:30:d1:53:
                    17:e3:de:2e:fc:ec:32:3e:68:c2:b4:34:c8:f6:ec:
                    4d:ac:d0:35:98:fd:b0:33:27:ad:40:eb:1c:b2:49:
                    02:8b:2c:0d:60:40:65:b7:03:b9:5a:8f:c5:0d:b5:
                    c0:c9:c2:68:8f:5a:21:10:bf:a8:0b:19:86:5c:12:
                    b0:52:09:a5:78:df:6c:e5:f6:c0:da:f9:f3:2f:5d:
                    23:80:9f:c5:79:b7:ce:fd:18:02:cc:db:f1:87:ae:
                    59:a6:49:14:8f:20:22:43:33:4c:e7:58:4f:21:5c:
                    48:fe:a0:11:26:bd:42:1d:c0:ba:00:a2:67:0c:11:
                    e9:7f:f9:64:a3:47:e8:32:52:74:66:eb:75:c9:cf:
                    fb:ca:e4:af:2f:47:5a:3d:ac:11:f2:c7:c7:58:b4:
                    24:ee:05:92:56:77:b7:99:77:14:0e:60:06:53:90:
                    f1:64:d6:d4:b9:bf:64:a5:bb:f7:61:f9:2e:25:b2:
                    0c:c5:2e:6f:b1:52:aa:aa:4d:76:22:b1:89:78:7d:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:80:B7:9B:DB:8E:57:40:9F:B7:C9:8B:0E:FB:91:73:9A:CF:72:0E
            X509v3 Authority Key Identifier:
                keyid:41:66:04:AB:4E:B7:7F:62:1D:47:0D:99:F3:F5:F0:04:2A:C2:91:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60661bffa767018bfc2cf77453cdffb78a624ff6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/243236c1ad4f0ad817609687eb5f3b71bafe9f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e6d2efa-b731-423b-87e5-d9ee5affe096/60661bffa767018bfc2cf77453cdffb78a624ff6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:d8:9b:4b:f3:c8:94:a6:27:b4:9f:3d:ff:89:fc:8f:81:
         2b:4f:f7:0a:a0:db:b1:b1:17:c3:34:5d:3b:38:81:c7:26:9b:
         ef:8e:26:8c:a1:0a:c4:ab:2b:67:e7:82:bd:6e:72:9b:c6:d1:
         fc:98:c0:d1:3f:78:46:3e:bb:b3:45:c2:1f:0a:58:75:ff:8c:
         26:4d:d4:03:dc:6b:48:27:6b:02:3d:c7:42:39:a4:70:46:89:
         ac:ee:fd:78:1d:d0:d1:1b:a2:dc:b1:0e:f4:0a:e7:ca:d0:90:
         ac:45:58:88:41:34:11:f4:28:fc:12:8e:66:a1:3c:89:ad:02:
         28:7d:c5:79:7a:f5:f6:ee:cb:f9:98:ad:4a:83:da:c9:d2:b7:
         b6:fe:ec:8d:c1:99:52:cf:65:2e:41:58:8a:1b:57:1c:f7:ff:
         ef:89:bb:42:5b:77:82:68:5c:de:b8:65:0e:50:4b:ca:75:c7:
         75:3b:fb:a4:9e:d8:39:bf:97:ea:27:12:1c:63:39:23:43:dd:
         bc:10:52:bf:33:00:3d:16:12:32:3d:de:5b:0e:1b:23:24:36:
         d2:21:8f:bc:b8:07:53:29:37:0f:cf:a6:91:19:14:42:46:1f:
         db:cb:99:7a:43:a9:ca:d8:6e:11:44:ef:1e:a5:b2:13:15:7b:
         b9:84:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----