Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/82af5f0d49da754591baccaa9925dd991450a712.roa
File:                     82af5f0d49da754591baccaa9925dd991450a712.roa (raw, json)
Hash identifier:          Vu4/HNHQxquluArPkwB3LcFUqmvazhap7r6KBEU6ul8=
Subject key identifier:   A0:A0:3D:16:11:36:12:6E:8E:DB:11:1D:F9:ED:AC:20:C2:8E:5B:0C
Certificate issuer:       /CN=a142b246def171452a54ef8b8244c598c34ccff0
Certificate serial:       08DCBD
Authority key identifier: ED:5F:4A:84:5C:88:A9:FD:FF:09:3E:84:FB:FF:7D:42:2A:25:9F:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a142b246def171452a54ef8b8244c598c34ccff0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/82af5f0d49da754591baccaa9925dd991450a712.roa
Signing time:             Wed 24 Mar 2021 14:39:32 +0000
ROA not before:           Wed 24 Mar 2021 14:39:31 +0000
ROA not after:            Tue 24 Mar 2026 14:39:31 +0000
asID:                     264668
IP address blocks:        2803:2ae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580797 (0x8dcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a142b246def171452a54ef8b8244c598c34ccff0
        Validity
            Not Before: Mar 24 14:39:31 2021 GMT
            Not After : Mar 24 14:39:31 2026 GMT
        Subject: CN=82af5f0d49da754591baccaa9925dd991450a712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:c2:39:10:ff:be:65:c1:b4:e4:a1:ac:1d:
                    ae:14:58:b6:9b:77:d5:c8:89:b5:c3:94:fb:fb:97:
                    12:4f:1d:66:eb:52:fd:05:ba:1c:4d:5a:69:6b:b6:
                    51:55:d7:c2:fb:12:43:b6:80:f7:00:bc:31:73:e4:
                    f9:12:6a:42:c0:04:4d:d4:3f:a1:fd:e7:33:63:e6:
                    44:d5:e6:5c:2d:82:b6:63:6f:56:d7:e0:ed:d9:0b:
                    1e:64:03:45:9d:ef:03:1d:66:0f:42:4a:51:b3:5a:
                    1a:4f:27:5d:8e:1a:c7:e7:85:c7:2c:55:5a:53:0b:
                    bd:7a:a5:56:07:9a:74:e9:a7:16:40:cf:e7:85:79:
                    90:a2:a3:37:6f:19:75:33:dd:73:da:50:fd:35:ca:
                    59:a1:b5:60:b3:99:52:ca:76:25:7f:a4:89:27:6a:
                    f5:3e:15:ce:68:9e:82:53:98:57:4a:93:d2:90:d2:
                    66:e9:1f:e4:e5:97:4d:56:30:9e:bf:b8:4b:cd:f8:
                    a9:15:13:33:02:18:b1:2e:3f:85:d3:f6:8e:f3:2e:
                    e6:ce:7f:33:80:dd:7f:4c:ee:43:19:a1:b9:67:d9:
                    a5:25:d8:b2:d6:a9:a5:96:ca:4f:6e:91:e5:c8:f3:
                    1a:15:9e:65:ab:83:b4:50:6c:cb:df:35:1e:1a:7c:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A0:3D:16:11:36:12:6E:8E:DB:11:1D:F9:ED:AC:20:C2:8E:5B:0C
            X509v3 Authority Key Identifier:
                keyid:ED:5F:4A:84:5C:88:A9:FD:FF:09:3E:84:FB:FF:7D:42:2A:25:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a142b246def171452a54ef8b8244c598c34ccff0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/82af5f0d49da754591baccaa9925dd991450a712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eef83c3-8e97-4b54-a597-1036cb1dffae/a142b246def171452a54ef8b8244c598c34ccff0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:c9:d4:38:1a:3a:4e:62:c6:87:d1:19:af:7d:3f:d0:69:
         cd:35:4e:49:8f:4d:5e:02:28:92:01:61:85:43:a0:bd:8f:0c:
         1f:e8:8f:12:6d:d6:5a:99:00:85:e3:b0:72:ee:4d:ac:7a:24:
         57:4c:a3:0c:01:9d:cf:b8:24:01:54:db:95:dc:bd:6a:65:88:
         98:e2:b6:7f:31:cc:59:f2:dd:c3:10:1d:4c:27:4c:0a:42:8e:
         a1:84:92:d0:0f:78:de:5c:25:89:e0:36:e1:76:43:b9:82:ee:
         81:c7:51:93:4f:b1:43:dd:25:d3:73:84:be:2e:d8:3b:17:ff:
         d5:98:4f:b0:8f:35:84:44:dd:9b:58:3b:c6:32:15:63:b4:ec:
         84:c2:f9:26:59:2b:cb:8d:d7:77:bf:a5:49:ee:63:2c:5d:df:
         7c:f5:f8:8b:c4:55:8d:26:d0:55:12:de:16:e9:2a:53:0e:05:
         0f:1a:4b:d9:d7:1d:47:14:80:79:fe:02:67:7e:73:e2:6b:45:
         ca:ac:5d:6b:1b:41:11:9f:4e:4e:89:97:69:47:3f:4f:a8:0f:
         81:bb:fa:7c:ac:a4:b6:ef:09:28:84:79:9e:36:6d:47:ca:86:
         49:20:ec:44:c5:aa:50:5c:10:e5:24:61:30:f4:cc:cf:50:7b:
         92:3d:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----