Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/c55dd54f77d1ee86feb891e0cb593073fb74b209.roa
File:                     c55dd54f77d1ee86feb891e0cb593073fb74b209.roa (raw, json)
Hash identifier:          uaOxjVb9GOLjtIVNkvzPY9Yl3zSIkGteYSdxdpJOXE8=
Subject key identifier:   12:FC:FE:9C:17:50:9A:8C:89:E7:69:A9:6C:EF:CF:A8:BD:77:21:94
Certificate issuer:       /CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
Certificate serial:       0D4CAE
Authority key identifier: CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/c55dd54f77d1ee86feb891e0cb593073fb74b209.roa
Signing time:             Wed 24 Mar 2021 14:46:16 +0000
ROA not before:           Wed 24 Mar 2021 14:46:16 +0000
ROA not after:            Tue 24 Mar 2026 14:46:16 +0000
asID:                     265728
IP address blocks:        2803:3c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871598 (0xd4cae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
        Validity
            Not Before: Mar 24 14:46:16 2021 GMT
            Not After : Mar 24 14:46:16 2026 GMT
        Subject: CN=c55dd54f77d1ee86feb891e0cb593073fb74b209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8d:19:04:96:24:b4:6d:4d:10:6d:f3:f7:bd:
                    63:88:3c:36:d4:a6:b4:ac:f9:02:34:e8:76:fe:ea:
                    d4:54:2f:f0:dc:34:d6:60:e3:84:3a:00:67:2f:f3:
                    6a:82:9e:59:24:c0:b5:56:c2:a8:20:20:41:53:52:
                    99:7f:24:58:32:d0:42:c0:5a:f0:03:07:ec:ad:13:
                    bc:cf:26:f4:04:b9:e2:71:d8:bb:1a:12:eb:65:f4:
                    94:9b:c6:66:22:bf:d3:6b:22:30:60:74:f5:fc:bf:
                    b9:a2:3a:4c:69:57:3d:52:8e:04:9a:8d:94:8a:a9:
                    ce:88:f7:42:51:93:b2:9b:5d:5b:1a:4e:83:f8:d6:
                    96:03:71:34:8a:05:b4:e6:01:0a:4a:dc:4a:19:8c:
                    33:ae:c9:a9:90:e5:68:03:b7:f5:e3:95:88:e5:fb:
                    1b:86:0a:d5:bb:33:41:65:6f:37:9b:9f:a8:ae:69:
                    64:03:95:67:ca:56:81:35:60:96:6a:86:d0:20:c4:
                    cd:d7:b4:4c:13:15:96:80:15:56:72:10:2f:1b:5e:
                    9a:fb:b0:4e:d0:b1:a3:85:5d:6a:49:d7:c1:dc:8e:
                    87:a1:ea:98:f1:b3:c4:70:32:77:95:6c:cb:76:b3:
                    c6:73:83:d9:0f:45:dd:0f:3c:51:0e:8d:73:04:0e:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FC:FE:9C:17:50:9A:8C:89:E7:69:A9:6C:EF:CF:A8:BD:77:21:94
            X509v3 Authority Key Identifier:
                keyid:CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/c55dd54f77d1ee86feb891e0cb593073fb74b209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/42479c80014a47a7803e1ff86f78d4c83197ce2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:31:cf:d5:9d:5e:e4:7e:53:fe:0a:09:67:4c:46:d0:67:
         82:42:9c:c0:79:61:db:2d:e3:d7:65:c9:f3:93:04:84:0e:74:
         4a:c2:28:41:29:01:75:d3:62:ea:2c:e6:d0:2e:62:b6:a8:99:
         d7:23:c4:72:e0:de:3d:88:82:f0:f4:91:a0:c5:62:6b:7e:91:
         8c:e6:59:12:1f:8f:5f:a3:19:3b:aa:44:de:fc:59:bc:06:4c:
         34:0d:14:f0:9c:de:50:b0:4e:e9:49:c8:ec:ce:d3:06:b2:7f:
         51:51:4b:ac:cf:2b:a4:85:2b:4d:d0:c1:07:9e:20:46:22:0c:
         7c:9c:10:b3:95:ee:8c:b9:fd:73:56:00:56:cd:16:5d:79:23:
         66:91:52:33:3a:2a:cc:2f:f6:c3:ac:7c:77:76:2a:a3:4d:06:
         83:8b:29:6c:48:1c:fa:e2:fb:f3:4d:a6:37:60:10:a5:10:7a:
         79:af:47:13:d2:38:25:02:b8:2b:44:8f:3e:a6:02:10:d6:01:
         44:25:51:50:12:29:02:76:84:e6:25:70:df:30:e8:0b:fc:24:
         8c:13:50:e1:01:26:a2:09:32:12:da:9c:b7:c9:85:3e:b9:39:
         97:97:8e:f8:b4:3f:21:04:96:21:2b:e6:86:49:3b:f7:82:55:
         51:47:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----