Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/c38027d00f60a4d406f2426c9859499e5300a9f4.roa
File:                     c38027d00f60a4d406f2426c9859499e5300a9f4.roa (raw, json)
Hash identifier:          S2KJ5+9p9VKUdOL1Cpl/m+f4xvcDT7yoY7HKJ4eSiJQ=
Subject key identifier:   2F:D0:3E:B3:7E:B2:E1:29:33:64:1E:2D:3F:97:E7:CB:45:DA:BD:E3
Certificate issuer:       /CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
Certificate serial:       0D1F88
Authority key identifier: 21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/c38027d00f60a4d406f2426c9859499e5300a9f4.roa
Signing time:             Wed 24 Mar 2021 14:33:43 +0000
ROA not before:           Wed 24 Mar 2021 14:33:42 +0000
ROA not after:            Tue 24 Mar 2026 14:33:42 +0000
asID:                     16629
IP address blocks:        2803:ffc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860040 (0xd1f88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
        Validity
            Not Before: Mar 24 14:33:42 2021 GMT
            Not After : Mar 24 14:33:42 2026 GMT
        Subject: CN=c38027d00f60a4d406f2426c9859499e5300a9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:76:4b:f6:df:16:7b:b3:bd:1a:5d:fe:01:
                    f7:ee:52:c5:68:af:38:22:f0:73:ae:a7:58:e0:61:
                    80:a4:2c:c0:4f:5d:e2:e8:a9:66:bb:87:24:76:75:
                    98:c0:23:e0:c7:5d:16:e9:82:81:91:66:a0:74:15:
                    c4:bb:97:73:16:4a:03:d2:2f:1a:57:28:e1:98:97:
                    1c:e1:45:b4:bd:85:51:25:36:c5:47:d6:bb:9a:98:
                    b5:c9:ad:f9:9d:d5:f1:d1:09:35:72:33:97:a4:26:
                    24:13:42:43:a9:06:6b:80:a2:cc:ba:63:71:a8:b6:
                    99:a6:f7:17:3c:c1:41:6f:93:b6:fb:d3:59:44:88:
                    45:93:35:6a:5a:34:b7:c3:a7:36:52:9b:3f:49:88:
                    02:8f:3e:fb:92:89:07:ef:4f:34:c6:00:76:44:f8:
                    34:7a:e4:49:b2:9c:69:2d:41:dd:b7:29:40:82:1c:
                    af:7f:ac:99:f4:0c:ee:c9:36:9e:0d:85:6a:2f:9a:
                    8e:cb:5f:85:0d:c9:73:9f:20:29:7e:98:2f:32:ba:
                    9a:b0:85:f5:3e:80:c4:89:a8:b1:81:3e:a5:9c:95:
                    01:65:8e:b0:7d:6b:14:26:83:53:de:fe:cb:e3:3d:
                    f8:f0:11:0a:78:7c:2d:53:c7:cf:9e:2d:9a:31:c6:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D0:3E:B3:7E:B2:E1:29:33:64:1E:2D:3F:97:E7:CB:45:DA:BD:E3
            X509v3 Authority Key Identifier:
                keyid:21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/c38027d00f60a4d406f2426c9859499e5300a9f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ffc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:05:52:c2:73:5b:d3:f9:78:c1:7e:e1:8c:a2:b9:70:05:18:
         06:b4:54:3e:db:b1:2e:ea:f6:5f:36:07:2b:60:4e:38:5d:7f:
         30:33:a1:d7:09:bb:91:a2:bb:56:3e:e9:c5:0b:85:d8:8c:c5:
         49:a1:c0:4f:8c:4a:7b:c6:a6:e8:c9:bf:8c:71:18:c7:17:23:
         50:a2:40:b7:26:45:12:be:3e:a4:76:0d:67:06:95:3e:e5:73:
         81:7d:10:a5:24:00:b2:0f:53:e3:93:fd:f5:82:dc:e6:e3:ae:
         4b:18:b7:e8:83:42:67:47:5c:91:09:c9:e5:d3:da:17:af:99:
         52:a0:f3:03:10:30:82:b7:1b:82:11:ae:e5:ce:65:b1:b2:74:
         21:26:53:3e:7c:f7:07:de:85:cb:0c:54:9d:7b:4c:3d:54:e7:
         bc:6a:45:1f:9a:04:20:f2:a8:ff:ba:17:0e:04:a4:37:48:64:
         5c:2e:7b:66:ae:8e:9b:f3:0d:46:44:7d:f0:ab:14:d6:13:53:
         d8:a2:e5:3d:cc:25:35:36:4e:75:b6:62:db:0e:b7:e3:5b:a3:
         4a:1a:40:dd:68:bc:0a:8d:40:14:f4:09:7d:66:e8:76:54:76:
         6f:4b:eb:7b:9e:08:e5:5a:81:aa:78:b2:85:3e:7e:16:4f:a1:
         b2:90:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----