Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e321a46d19ccb9f7dd73a174a1a315aa8ce76da3.roa
File:                     e321a46d19ccb9f7dd73a174a1a315aa8ce76da3.roa (raw, json)
Hash identifier:          dMYv/woKCniZQlstV+WTd1850HigiT8nl9Ds2t52ll4=
Subject key identifier:   85:5E:A8:90:8A:C6:79:47:FA:84:8A:A3:62:2A:2D:CD:7B:15:6B:F7
Certificate issuer:       /CN=e3ee958557d9fde5dde89b420e2e9fd8b429156e
Certificate serial:       0C087D
Authority key identifier: B3:DE:AC:50:CD:BB:0A:A5:54:35:16:4D:90:F7:9C:8D:2B:28:EF:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3ee958557d9fde5dde89b420e2e9fd8b429156e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e321a46d19ccb9f7dd73a174a1a315aa8ce76da3.roa
Signing time:             Wed 24 Mar 2021 14:38:19 +0000
ROA not before:           Wed 24 Mar 2021 14:38:19 +0000
ROA not after:            Tue 24 Mar 2026 14:38:19 +0000
asID:                     267853
IP address blocks:        2803:3700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788605 (0xc087d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ee958557d9fde5dde89b420e2e9fd8b429156e
        Validity
            Not Before: Mar 24 14:38:19 2021 GMT
            Not After : Mar 24 14:38:19 2026 GMT
        Subject: CN=e321a46d19ccb9f7dd73a174a1a315aa8ce76da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:60:67:ae:0f:77:24:d4:66:6a:c6:5a:27:4c:
                    ce:48:90:fb:92:97:63:65:1f:9c:f2:63:8c:aa:d3:
                    ab:7c:d3:cd:f7:4c:2b:43:8b:12:7d:75:bb:99:1d:
                    bc:d6:1d:e3:fa:06:bd:94:0c:34:87:91:4a:50:f9:
                    5b:82:09:84:a7:21:44:0e:62:94:7f:c6:4f:1f:54:
                    7f:0a:6f:ac:42:0c:e9:59:18:1b:3b:09:d0:8b:53:
                    ae:21:6f:24:19:26:d9:bf:27:fb:61:05:b7:b0:9c:
                    31:55:fa:84:f7:7f:cb:b6:fd:ec:2a:9d:b1:d2:c1:
                    7e:a2:96:a3:11:1c:80:dc:a3:ce:d3:c7:e1:66:c8:
                    f2:cc:91:f4:5d:24:2b:f9:eb:e8:06:9c:da:2d:4d:
                    d8:ab:d2:f0:1c:e4:48:29:51:25:4e:25:73:07:f2:
                    09:9e:87:96:a0:a1:ee:86:fb:f3:6c:d6:fd:60:c5:
                    07:cd:0d:fa:de:94:f7:fc:5d:08:59:66:65:95:a1:
                    27:27:b8:c3:6b:f1:8a:4c:3b:77:7e:1b:41:71:28:
                    c9:c6:a6:15:75:07:37:34:0c:00:bf:43:82:03:fb:
                    29:00:17:24:22:b9:36:95:34:9b:57:5e:24:aa:9f:
                    64:44:cb:ac:da:74:53:10:d3:fd:85:8b:64:84:79:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5E:A8:90:8A:C6:79:47:FA:84:8A:A3:62:2A:2D:CD:7B:15:6B:F7
            X509v3 Authority Key Identifier:
                keyid:B3:DE:AC:50:CD:BB:0A:A5:54:35:16:4D:90:F7:9C:8D:2B:28:EF:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3ee958557d9fde5dde89b420e2e9fd8b429156e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e321a46d19ccb9f7dd73a174a1a315aa8ce76da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6773f2c7-a58e-4c5a-847a-f78cf4ace1f9/e3ee958557d9fde5dde89b420e2e9fd8b429156e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3700::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:c7:ee:35:99:88:27:1c:c0:d7:37:6e:a2:16:2a:2c:d8:
         fd:d4:31:cb:0d:f7:9a:20:e9:aa:bc:dd:5a:0a:b8:83:43:47:
         dd:b9:92:a0:54:50:db:b6:1b:7d:a0:fe:26:75:55:f7:0f:fa:
         be:04:76:d9:8d:21:34:b8:76:2d:81:f0:5d:3a:a2:71:70:be:
         22:fe:d2:78:b9:a1:a2:67:b4:a4:80:79:e5:f7:e3:76:0d:f3:
         23:09:69:27:67:e8:99:5a:f9:50:79:f7:f4:a7:88:a2:89:8b:
         da:b6:8a:85:f1:4c:eb:5a:a5:d8:85:79:ce:91:b1:ef:52:41:
         c8:fc:5b:51:b0:cf:b7:64:e6:74:21:95:7d:89:6d:01:c4:74:
         b5:7e:a5:c0:4a:33:0b:fe:47:21:f1:d5:27:ac:f9:00:d1:eb:
         a7:a7:c6:ca:19:4a:c2:a7:bd:f3:97:de:60:b3:f8:46:d2:65:
         ab:ed:5e:b3:f1:be:30:54:95:5a:e0:a1:98:08:31:d4:65:84:
         20:d5:23:b5:2e:5f:2f:de:00:de:1b:79:f2:49:86:ec:15:02:
         a3:1d:46:6c:34:04:ff:16:9d:9c:95:42:ca:9b:03:fc:ba:1c:
         ad:fc:e5:1c:f3:c9:06:51:ee:51:1e:af:77:ed:f2:33:ae:eb:
         68:ca:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----