Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/cab987cffeb1db0ff712574268f24f32b5631d08.roa
File:                     cab987cffeb1db0ff712574268f24f32b5631d08.roa (raw, json)
Hash identifier:          Pl24Vnc2qfs7Xjbd9LBxdCGPB6jmr//v/Vn1hk2ONFQ=
Subject key identifier:   0C:EE:B3:40:02:E0:75:95:48:07:28:A0:31:13:E0:24:50:42:96:E1
Certificate issuer:       /CN=5d3796838d771f93080603caee0f79e836838277
Certificate serial:       07954A
Authority key identifier: AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/cab987cffeb1db0ff712574268f24f32b5631d08.roa
Signing time:             Wed 24 Mar 2021 14:46:31 +0000
ROA not before:           Wed 24 Mar 2021 14:46:30 +0000
ROA not after:            Tue 24 Mar 2026 14:46:30 +0000
asID:                     269976
IP address blocks:        2803:f6e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496970 (0x7954a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3796838d771f93080603caee0f79e836838277
        Validity
            Not Before: Mar 24 14:46:30 2021 GMT
            Not After : Mar 24 14:46:30 2026 GMT
        Subject: CN=cab987cffeb1db0ff712574268f24f32b5631d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:2c:a3:0f:86:b4:f0:84:8b:bd:9b:71:58:
                    76:31:97:37:8f:97:0a:ad:79:b4:cb:2b:fb:f7:af:
                    e6:e9:cc:cb:14:77:1f:7b:40:64:df:6b:92:1a:5e:
                    b0:e9:d1:eb:fd:e2:2a:58:df:2c:db:8c:37:fc:66:
                    01:82:e0:ac:64:c4:5c:c2:49:a6:21:38:29:ef:9a:
                    13:cf:d1:ad:df:b0:3f:42:13:58:6c:52:f3:73:5f:
                    24:60:e1:d6:ba:6e:01:e5:35:76:c3:92:3d:13:aa:
                    58:62:c8:b6:82:20:49:6d:24:b7:2e:46:bf:fc:69:
                    b8:db:e5:c6:80:b1:ec:d8:48:2d:5d:00:26:01:ee:
                    ce:a3:fa:f9:5e:18:3f:b1:94:2e:a2:57:f2:c3:fd:
                    8c:17:48:3e:5e:2f:1e:33:8f:e9:5c:b5:24:27:63:
                    1e:39:c7:3b:e0:0c:0a:81:2f:26:e5:9a:61:65:21:
                    5a:14:72:bc:49:5a:b6:0c:4f:2c:a6:3d:e8:89:a6:
                    a7:b2:0f:32:7d:95:60:41:23:99:8d:6b:83:7f:5e:
                    53:0c:09:d5:28:80:f3:14:ab:c4:0b:2d:76:a9:76:
                    9c:5d:f8:43:d4:31:bd:6b:b9:67:20:1b:6e:fb:dd:
                    b0:40:9a:2e:51:0b:2f:c8:ae:7c:50:89:06:a1:03:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:B3:40:02:E0:75:95:48:07:28:A0:31:13:E0:24:50:42:96:E1
            X509v3 Authority Key Identifier:
                keyid:AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/cab987cffeb1db0ff712574268f24f32b5631d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/5d3796838d771f93080603caee0f79e836838277.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:29:a5:a9:6f:e7:0e:2d:9d:06:da:62:18:68:e9:1f:92:
         d2:ae:3f:3f:ca:d0:f1:b8:7f:b3:1c:e4:bd:93:51:f3:f7:89:
         f2:19:b9:e6:36:21:69:85:89:aa:76:5a:1c:2d:bb:72:1d:6d:
         4d:b5:fd:58:cd:1f:d8:18:f3:b6:5c:de:07:84:fa:d4:72:9e:
         61:ea:ae:92:e7:42:1d:53:02:04:a9:7e:3d:98:0c:fb:f8:95:
         dd:11:80:a5:a6:c8:42:0e:fa:9b:85:78:4a:48:54:d5:f1:8b:
         34:5b:0a:ef:2a:5d:6b:87:60:5a:05:d7:ad:66:6a:3c:31:8c:
         09:ed:3e:36:93:bd:1d:9e:f4:d2:f8:49:63:6e:06:5f:4d:f5:
         7a:80:bc:07:0c:9a:38:17:86:a4:23:d1:85:1e:38:00:40:ef:
         ff:a8:87:20:63:98:63:28:9a:62:2c:d6:97:bd:52:c2:f4:48:
         4c:2a:1c:31:4f:2b:e9:06:e4:63:1b:ba:4e:c0:9b:8c:12:9e:
         c9:ae:41:84:a9:47:a4:22:fc:70:d9:1c:1e:0a:35:f1:c5:82:
         85:42:a6:c3:1d:7a:68:1e:10:f0:28:81:b2:d1:22:47:1b:a3:
         c3:ef:5d:0b:c5:b6:e1:4c:14:7b:a1:71:8e:20:51:60:a6:aa:
         6b:e6:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----