Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/17a4e33c05dc36eff8289b021e73882ced0b3196.roa
File:                     17a4e33c05dc36eff8289b021e73882ced0b3196.roa (raw, json)
Hash identifier:          CKsuqGOy4do/lZVKre8mdKrMpmWQyMM2pq5cHfCPJvg=
Subject key identifier:   B6:39:64:0C:41:DD:E5:C5:19:E5:80:E8:E2:19:42:7E:F7:FA:AD:85
Certificate issuer:       /CN=faba226494c1bd7cbd91007cecff2afa9c4283ff
Certificate serial:       0D761B
Authority key identifier: DF:EC:B7:B6:3A:18:C7:F2:43:DA:76:97:49:30:44:5E:DB:51:EB:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faba226494c1bd7cbd91007cecff2afa9c4283ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/17a4e33c05dc36eff8289b021e73882ced0b3196.roa
Signing time:             Wed 24 Mar 2021 14:45:35 +0000
ROA not before:           Wed 24 Mar 2021 14:45:35 +0000
ROA not after:            Tue 24 Mar 2026 14:45:35 +0000
asID:                     263692
IP address blocks:        2803:7b80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882203 (0xd761b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faba226494c1bd7cbd91007cecff2afa9c4283ff
        Validity
            Not Before: Mar 24 14:45:35 2021 GMT
            Not After : Mar 24 14:45:35 2026 GMT
        Subject: CN=17a4e33c05dc36eff8289b021e73882ced0b3196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:7c:8d:2d:90:f7:8c:6b:b6:e2:36:c6:f0:
                    dd:9c:5a:7a:22:0c:a4:e1:1d:c8:e4:fb:3a:b6:22:
                    9f:1c:72:56:42:88:3a:dd:a5:57:f6:d0:67:8e:81:
                    cd:94:67:fa:45:57:b0:4b:05:81:0c:5f:69:d8:dc:
                    96:5b:67:5d:69:53:a1:a4:08:a1:e3:20:b5:2a:ae:
                    bb:a1:2f:dc:6b:08:23:e3:5f:1b:4d:48:77:06:9c:
                    cd:6a:8b:72:bc:87:f2:50:ef:c2:dc:ff:d9:cd:11:
                    fe:c7:a5:89:e5:1c:9f:ca:3d:00:9a:8f:a9:1e:dc:
                    62:4b:b4:85:bf:e5:fc:1d:da:b6:07:f8:2c:73:f1:
                    96:1b:f3:c5:f5:60:0d:9a:48:2b:a0:a3:b4:d0:8c:
                    f9:fe:91:2b:8c:1f:84:f0:50:cc:5f:0b:93:9e:41:
                    6f:a5:3f:9a:e7:65:39:76:49:36:a3:53:e2:9f:c2:
                    70:93:cc:04:9f:0c:ed:04:1a:38:7d:ef:1b:d2:cf:
                    3e:a9:25:40:b7:1b:82:d9:fe:bf:e9:67:d5:5b:57:
                    7e:26:11:2d:ae:fb:07:77:de:30:e5:87:55:ec:b0:
                    f3:7d:4c:d5:95:c5:2b:80:52:a9:84:c1:0e:2c:e1:
                    89:2a:d6:90:1f:21:b5:a4:1e:4f:54:ab:82:7b:ae:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:39:64:0C:41:DD:E5:C5:19:E5:80:E8:E2:19:42:7E:F7:FA:AD:85
            X509v3 Authority Key Identifier:
                keyid:DF:EC:B7:B6:3A:18:C7:F2:43:DA:76:97:49:30:44:5E:DB:51:EB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faba226494c1bd7cbd91007cecff2afa9c4283ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/17a4e33c05dc36eff8289b021e73882ced0b3196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/772b8fe2-5046-4a2a-bc7c-79a2f449b696/faba226494c1bd7cbd91007cecff2afa9c4283ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:16:a4:11:6d:ae:c8:15:04:77:09:ea:ff:6a:80:c6:a3:92:
         0e:2a:0e:76:ae:1d:ad:d4:9a:67:f7:a5:57:6d:68:09:ae:7f:
         51:3e:d1:38:50:c2:66:a4:b1:a0:8f:f7:b2:4f:c2:e2:8b:5d:
         ea:14:f2:57:ef:c7:2e:52:bb:eb:e8:f3:a9:b8:da:f5:12:67:
         b0:40:b7:66:9f:d5:fd:29:05:46:35:7d:de:21:cc:bb:2a:82:
         9b:9b:8e:fa:18:42:00:41:e4:9e:0e:8e:9b:3a:b7:71:c1:59:
         75:02:d3:77:fe:f1:1d:45:be:8f:c7:0c:e2:9e:8e:c8:47:48:
         a7:33:fd:45:14:3b:07:57:81:88:1b:9a:4f:f3:1a:df:e5:c9:
         49:83:2c:51:bf:2a:dd:26:39:2d:62:3e:59:3d:96:a1:53:67:
         0d:aa:80:79:58:b9:b6:3b:03:f2:81:f8:bd:bd:fc:6a:4c:54:
         4c:0e:40:eb:c6:62:85:7c:0a:e2:73:e1:8d:a3:14:c1:04:36:
         20:24:4c:d7:2e:8d:2a:d2:f8:84:3f:b2:d2:2a:03:94:25:b7:
         b4:12:25:7e:e8:a3:89:00:47:a4:9b:4e:63:11:d6:74:2a:45:
         d5:5b:73:1a:7a:0d:7c:4f:e6:0e:7e:3a:7a:85:50:61:92:da:
         99:a5:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----