Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/65db6e640d8fedd549f6870aeedf89407b24bfac.roa
File:                     65db6e640d8fedd549f6870aeedf89407b24bfac.roa (raw, json)
Hash identifier:          aeW07tHUpOFZI5/LjqhTUU0+KrrSc+XQJhy8JFExo6c=
Subject key identifier:   76:BC:A0:BF:12:6E:33:16:9B:9F:37:3E:CE:5E:D1:0E:5E:89:6F:12
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       046D70
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/65db6e640d8fedd549f6870aeedf89407b24bfac.roa
Signing time:             Wed 24 Mar 2021 14:34:47 +0000
ROA not before:           Wed 24 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        2803:e5e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290160 (0x46d70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 24 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=65db6e640d8fedd549f6870aeedf89407b24bfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:df:dd:6c:11:58:6b:74:ce:00:63:5c:07:
                    e4:fa:c3:3b:f8:bc:ff:d3:f7:9b:bb:91:d9:bf:13:
                    09:c5:b2:eb:4c:87:9e:68:f9:de:0d:b9:2e:f6:20:
                    fb:c6:a9:b9:3d:fd:b0:a2:82:74:97:cb:30:1c:60:
                    38:b3:b6:5c:f2:8e:1b:71:00:5d:30:71:8c:53:58:
                    a1:47:0e:aa:9c:ac:4b:a3:ff:6f:24:8b:79:12:48:
                    00:2e:67:93:c0:80:68:47:6b:45:b8:86:1d:97:95:
                    0f:a3:d3:67:5e:88:7f:ed:82:49:5e:73:38:4f:91:
                    e1:77:05:98:6f:96:8f:05:bb:1b:f9:c3:cf:93:14:
                    52:85:16:12:27:2c:d2:9f:ce:85:db:ac:b3:fd:a9:
                    5d:cd:57:49:bd:e3:fa:e5:cf:f5:30:5e:a4:d0:c7:
                    92:11:a1:4b:96:46:33:79:67:2a:95:d6:46:53:7c:
                    f9:63:f9:97:9b:80:84:5f:5a:96:de:c2:1f:cd:de:
                    d9:b2:e2:7c:71:51:ba:5b:df:df:08:cc:40:07:d6:
                    2e:bd:a9:d6:16:ae:e2:87:fe:96:da:d2:c7:c7:a4:
                    3a:d1:fd:8e:d1:2f:87:61:bf:55:7c:49:95:09:fe:
                    47:c3:d7:a3:f7:93:ae:9d:1b:ab:a6:69:b6:2d:d2:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:A0:BF:12:6E:33:16:9B:9F:37:3E:CE:5E:D1:0E:5E:89:6F:12
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/65db6e640d8fedd549f6870aeedf89407b24bfac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:89:60:34:68:00:f9:10:80:8a:60:d7:e2:68:0f:49:2a:
         0e:3b:f5:2e:a3:01:a9:1b:b5:29:2d:2b:71:b4:e3:90:4e:b5:
         5e:9e:f3:e6:ac:b4:ce:b3:bc:13:e0:8a:63:74:64:35:cf:51:
         ff:7d:b5:56:fe:f3:dd:37:cd:37:9c:52:96:93:17:58:6c:14:
         e9:a8:20:b8:74:63:0e:91:1a:4e:8a:6c:d2:96:1e:c7:77:0d:
         4b:80:96:61:fd:68:41:5b:ea:97:ca:75:3e:68:74:b2:00:f1:
         c0:d7:31:b2:96:de:1c:1c:cb:43:42:20:73:90:d5:e1:cd:47:
         c6:64:53:c5:9c:fd:77:bc:04:59:22:57:e2:3b:9c:5a:22:51:
         3c:68:9e:a2:72:0c:6a:a9:1a:cc:c4:7e:33:d6:21:48:fa:07:
         8b:06:63:26:46:00:ea:76:8c:d3:56:a7:aa:05:42:b2:fd:5d:
         0a:56:fc:b1:78:b9:8e:41:06:fb:8d:2d:17:e1:5e:d6:4f:7e:
         06:e8:21:d6:4d:cc:18:46:ad:aa:97:43:0b:a8:ed:30:2c:0c:
         48:7b:79:4e:0f:70:f2:f9:3a:c8:00:26:79:9e:89:45:ef:87:
         84:24:70:2b:89:cb:bc:c7:92:4f:80:52:3e:7f:b7:95:29:ec:
         df:4e:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----