Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/e412e7b5fda22b7315ae6332b3ace95d7b0e06ad.roa
File:                     e412e7b5fda22b7315ae6332b3ace95d7b0e06ad.roa (raw, json)
Hash identifier:          B02FqcINvEXvpN6AFZ/5NZ0vBWD1ofG3cPw6neI+eu4=
Subject key identifier:   E6:7E:3F:7C:E9:1C:F2:F6:B6:BB:4A:FF:3A:67:4D:AC:4D:33:58:4E
Certificate issuer:       /CN=3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1
Certificate serial:       0D244C
Authority key identifier: 3A:3F:3B:1C:9A:82:51:F4:86:AC:4E:16:74:89:FB:FD:83:03:0A:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/e412e7b5fda22b7315ae6332b3ace95d7b0e06ad.roa
Signing time:             Wed 24 Mar 2021 14:38:21 +0000
ROA not before:           Wed 24 Mar 2021 14:38:21 +0000
ROA not after:            Tue 24 Mar 2026 14:38:21 +0000
asID:                     264605
IP address blocks:        2803:19c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861260 (0xd244c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1
        Validity
            Not Before: Mar 24 14:38:21 2021 GMT
            Not After : Mar 24 14:38:21 2026 GMT
        Subject: CN=e412e7b5fda22b7315ae6332b3ace95d7b0e06ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:ec:e3:17:da:93:dd:f9:4b:d6:24:35:56:
                    fe:13:2f:85:c6:75:a7:17:5d:f6:07:87:0f:c1:89:
                    07:1d:ab:20:bf:c1:43:d4:86:8d:f0:8a:41:bd:57:
                    23:b9:1e:21:c1:a0:77:f4:49:19:49:f9:8d:9b:0c:
                    fc:d9:4c:5e:e2:56:e5:32:63:f4:64:27:3e:28:6e:
                    a5:16:56:1d:cb:ec:a2:c7:16:ca:2f:9d:ed:69:98:
                    76:8d:40:23:62:72:79:07:4d:36:ac:ca:a2:dd:f2:
                    2b:a6:d6:15:ad:7a:82:96:d1:d2:b7:8e:2d:37:8d:
                    d4:d5:0e:50:3b:55:81:ad:26:ec:6d:f5:eb:26:3c:
                    32:fa:01:00:db:22:2e:e9:0c:09:53:16:f1:1e:ab:
                    c4:5f:bd:7b:5e:a2:dd:96:d2:e8:86:ee:a2:8e:b3:
                    59:49:0d:88:61:c3:f5:03:9b:28:ce:d4:95:d9:b0:
                    99:71:04:c0:d1:b6:b5:d5:01:3b:f8:09:6b:a8:7b:
                    72:cd:11:35:06:76:ca:1b:dc:92:08:3d:4e:3f:a3:
                    ba:85:de:1d:af:8e:a9:bd:d7:8d:72:9f:1f:b8:03:
                    ba:27:04:ed:6b:bb:91:f4:07:63:b5:49:27:1a:f5:
                    a5:f4:4f:08:23:97:b9:8e:04:5e:3d:90:a8:47:eb:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7E:3F:7C:E9:1C:F2:F6:B6:BB:4A:FF:3A:67:4D:AC:4D:33:58:4E
            X509v3 Authority Key Identifier:
                keyid:3A:3F:3B:1C:9A:82:51:F4:86:AC:4E:16:74:89:FB:FD:83:03:0A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/e412e7b5fda22b7315ae6332b3ace95d7b0e06ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/628e6b5b-eff0-41b8-97fc-f1c3dff31e0a/3f7f695b8b2fdcaf2c4db8956347f5ba574d44b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:19c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:25:87:09:d6:2b:eb:9a:14:37:f2:5e:6e:c9:da:38:94:0c:
         f7:88:e5:f0:74:40:88:57:a1:a4:14:b9:35:c5:7c:f8:76:58:
         b9:26:c7:d5:f6:c7:bf:7b:55:a6:6b:94:8a:13:6c:d5:e7:e9:
         85:64:ad:4a:99:84:e5:28:c9:9a:b4:86:14:08:1f:e9:85:27:
         a0:24:54:1b:3a:df:28:b3:3b:be:58:38:08:96:a4:2f:24:d2:
         ed:94:fc:e1:75:13:b9:37:c1:26:52:1e:db:43:01:fa:d8:d3:
         4a:48:14:fa:46:12:77:1d:bd:c5:ea:67:5d:79:75:0b:2c:a7:
         ae:14:ee:0e:19:0f:1e:db:fb:e8:83:5d:03:34:7f:74:16:69:
         1b:74:09:a5:22:b9:e3:5c:f4:99:3a:72:c8:79:83:1f:63:7a:
         d5:67:a6:d2:f8:d2:87:61:1a:cb:b9:8b:bf:3f:85:c9:f3:c8:
         5e:a9:71:cf:03:06:b1:99:b5:e3:3c:71:7c:ea:ce:bd:e6:20:
         42:93:3c:75:45:f6:7d:c8:bf:f3:86:6b:cb:e4:79:83:44:48:
         18:91:b7:dd:8d:39:34:44:48:96:db:1f:72:5e:33:3d:3d:8a:
         23:c5:fe:c2:a6:1d:16:a7:ce:08:76:3f:81:7a:e8:ae:38:58:
         99:e6:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----