Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6edad857-8291-4107-a7e7-7d889b818210/d2d345e25d3b7987662a71bd1ba8477df64799a8.roa
File:                     d2d345e25d3b7987662a71bd1ba8477df64799a8.roa (raw, json)
Hash identifier:          EAdgZwmUH3j0+nqIHinwWIfN+xCcbiTkWTZiV1/QgtE=
Subject key identifier:   0C:B9:3E:91:8B:86:F9:61:01:F2:9E:0F:5F:58:B1:FD:F3:EE:9A:E2
Certificate issuer:       /CN=89c7cab9663727ed6be20ff9c1e225ab7dec158f
Certificate serial:       0C6416
Authority key identifier: 25:1F:F3:BA:B0:0F:A8:8B:DD:26:30:82:B5:AB:B9:D2:B0:F3:8F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89c7cab9663727ed6be20ff9c1e225ab7dec158f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6edad857-8291-4107-a7e7-7d889b818210/d2d345e25d3b7987662a71bd1ba8477df64799a8.roa
Signing time:             Wed 24 Mar 2021 14:35:07 +0000
ROA not before:           Wed 24 Mar 2021 14:35:07 +0000
ROA not after:            Tue 24 Mar 2026 14:35:07 +0000
asID:                     266849
IP address blocks:        2803:2a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812054 (0xc6416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c7cab9663727ed6be20ff9c1e225ab7dec158f
        Validity
            Not Before: Mar 24 14:35:07 2021 GMT
            Not After : Mar 24 14:35:07 2026 GMT
        Subject: CN=d2d345e25d3b7987662a71bd1ba8477df64799a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:8a:98:32:35:70:89:99:83:55:1d:a5:b9:
                    26:39:6f:4c:c6:80:ff:63:67:16:2a:ec:93:d0:08:
                    6c:e6:eb:c4:36:a9:1d:43:f2:a6:d8:11:37:66:3e:
                    6a:98:8f:a5:e7:d3:70:29:2c:81:69:72:0c:e7:02:
                    9d:cc:97:3a:0f:68:9e:cf:c7:6d:88:7f:8f:6a:c6:
                    6e:e0:f4:3c:86:cf:c6:1f:24:e5:70:d0:05:7d:a2:
                    13:a6:8f:47:6f:e9:54:a0:e4:fe:67:d7:d2:20:75:
                    ef:d6:29:df:49:52:79:b4:3c:e2:05:a9:7e:51:41:
                    57:d8:dd:36:51:40:28:7c:e9:43:69:62:66:42:5a:
                    50:32:a6:a2:b2:22:5d:5c:f0:c3:e6:4d:60:77:86:
                    d7:2d:2f:39:08:07:28:41:7e:3e:7a:92:7e:bd:a9:
                    24:34:77:62:9c:36:54:e5:d8:61:22:57:41:d0:e0:
                    d5:ed:8b:79:5c:bf:c1:74:7a:94:58:75:41:9f:b5:
                    9b:98:01:68:c5:91:04:95:c0:66:09:04:43:1b:5f:
                    8f:2b:bb:0b:f7:51:ff:8a:9e:68:5f:32:50:e3:54:
                    7d:32:de:4e:2b:b1:60:76:76:b9:da:09:b0:9c:4b:
                    74:ad:6a:8a:51:4f:51:f2:65:61:d3:13:c1:02:e1:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B9:3E:91:8B:86:F9:61:01:F2:9E:0F:5F:58:B1:FD:F3:EE:9A:E2
            X509v3 Authority Key Identifier:
                keyid:25:1F:F3:BA:B0:0F:A8:8B:DD:26:30:82:B5:AB:B9:D2:B0:F3:8F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89c7cab9663727ed6be20ff9c1e225ab7dec158f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6edad857-8291-4107-a7e7-7d889b818210/d2d345e25d3b7987662a71bd1ba8477df64799a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6edad857-8291-4107-a7e7-7d889b818210/89c7cab9663727ed6be20ff9c1e225ab7dec158f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:ad:83:b2:68:56:74:cc:ab:5e:b7:f8:e6:81:04:e5:5b:
         d8:3c:59:e6:b9:73:b0:9f:1d:a1:95:76:af:cc:72:36:1f:d8:
         47:68:92:d5:a6:5e:87:51:33:ca:ab:4e:45:c7:44:c6:46:f6:
         02:52:d0:9d:6c:c0:93:51:55:f9:14:ac:27:69:b1:fb:15:08:
         3f:01:c4:69:14:53:54:88:d0:8c:53:6e:1d:79:25:b7:08:56:
         13:fc:c5:b3:65:c9:3d:54:75:a5:c2:2b:ee:be:22:8a:9f:c3:
         2c:da:64:2a:a5:dd:65:fc:7e:0c:bb:47:af:86:e9:9e:a7:74:
         07:67:08:a8:5f:bf:9c:ca:61:6e:21:5c:5e:4f:95:b1:7c:fd:
         6f:3e:4d:51:6b:05:f1:8d:e7:ed:a5:28:2c:7d:61:d4:24:76:
         12:7a:57:70:f6:c4:20:78:21:0d:dc:a4:46:6c:92:c6:f8:55:
         df:1b:21:e1:5c:a8:47:f8:58:ab:b9:f5:a0:a4:1a:90:73:c6:
         a3:25:62:01:d4:de:e0:5e:b3:35:82:f1:b6:d7:f8:e2:2a:6c:
         37:cf:1e:d7:53:63:2d:ae:4b:d3:7e:00:fa:f9:30:5b:c0:a9:
         15:3a:7a:16:55:81:10:24:4f:8d:5f:fa:1e:25:eb:59:e3:52:
         ff:8e:90:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----