Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2143c80dffd9cb582896824ba283c0006956737d.roa
File:                     2143c80dffd9cb582896824ba283c0006956737d.roa (raw, json)
Hash identifier:          wDDtJO6JtiVeN82yA3OkTfj4ScdNAEdmdxZjvHfIH0g=
Subject key identifier:   6B:8D:E6:A8:26:3A:2E:50:4A:C0:66:2E:19:42:91:51:34:F9:AA:C3
Certificate issuer:       /CN=2b939ded2e75718e5bbc83d14b5856c5338fc629
Certificate serial:       0B9B56
Authority key identifier: D9:32:86:8B:61:3F:75:BE:31:5D:59:C4:26:23:5D:AD:AF:C3:61:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b939ded2e75718e5bbc83d14b5856c5338fc629.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2143c80dffd9cb582896824ba283c0006956737d.roa
Signing time:             Wed 24 Mar 2021 14:47:23 +0000
ROA not before:           Wed 24 Mar 2021 14:47:23 +0000
ROA not after:            Tue 24 Mar 2026 14:47:23 +0000
asID:                     269738
IP address blocks:        2803:e960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760662 (0xb9b56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b939ded2e75718e5bbc83d14b5856c5338fc629
        Validity
            Not Before: Mar 24 14:47:23 2021 GMT
            Not After : Mar 24 14:47:23 2026 GMT
        Subject: CN=2143c80dffd9cb582896824ba283c0006956737d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:fa:e5:dd:1b:08:52:7e:55:ac:fe:31:38:
                    99:d3:1b:c4:ae:62:e5:0c:9a:c4:99:74:ec:d1:38:
                    97:31:f1:07:31:82:06:76:76:87:81:ea:97:60:70:
                    2c:a1:2b:d7:89:f5:30:b7:49:bc:5d:a8:1e:92:14:
                    57:4f:75:43:37:b3:a2:58:c5:d4:fd:38:4a:5f:45:
                    b1:e3:5f:c1:bd:e5:c3:be:e5:83:43:61:ed:88:27:
                    83:44:4e:4b:a2:17:9d:fc:10:29:d3:46:4d:9a:16:
                    ab:58:69:72:22:cf:61:cd:1c:af:cf:fd:ab:81:40:
                    df:08:a5:6c:f1:54:a6:d7:86:34:61:41:b0:d2:f8:
                    2e:ec:43:a9:9d:65:75:9b:32:cc:fd:30:25:e0:f8:
                    d9:13:22:bc:df:cc:d2:79:e4:56:48:fd:6c:30:98:
                    45:d5:3d:ce:be:31:d5:58:63:bf:31:b5:b5:e8:f4:
                    a4:81:7f:2a:63:cc:3d:2d:da:37:38:cb:aa:4f:bc:
                    ce:8d:c0:5d:e7:07:85:a3:d5:d8:a3:17:06:ff:f8:
                    e2:e5:ef:01:11:3f:2d:9e:a2:7c:ea:35:1b:f0:6f:
                    05:2c:74:80:62:9d:0f:66:97:41:66:ba:a7:4c:4e:
                    12:20:92:d8:cf:20:0b:9a:84:0c:6c:12:e2:0e:bb:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8D:E6:A8:26:3A:2E:50:4A:C0:66:2E:19:42:91:51:34:F9:AA:C3
            X509v3 Authority Key Identifier:
                keyid:D9:32:86:8B:61:3F:75:BE:31:5D:59:C4:26:23:5D:AD:AF:C3:61:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b939ded2e75718e5bbc83d14b5856c5338fc629.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2143c80dffd9cb582896824ba283c0006956737d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8737d1e9-fd24-4216-8d4e-39dc6145452c/2b939ded2e75718e5bbc83d14b5856c5338fc629.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e960::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:91:7d:23:91:c6:ae:45:28:00:ee:1d:c5:e8:e0:64:d6:
         e5:ff:7f:07:87:1f:76:08:31:20:7c:1d:bd:3a:88:90:9d:0e:
         3a:2d:ab:a8:7b:df:bb:3e:af:64:e7:76:30:f9:18:5a:76:89:
         a4:a8:d4:d7:37:dd:f6:1e:30:dd:37:f0:15:d9:61:0f:61:cb:
         e4:ad:28:8c:d3:ed:d0:5a:6e:a9:cd:95:92:9f:c6:ce:9e:fe:
         84:1c:41:3d:4f:d7:93:47:bf:a7:82:6c:2c:e6:a6:1b:f8:72:
         4d:26:9f:a4:d7:be:8e:da:26:72:e1:5f:05:2a:93:01:ca:4e:
         02:bf:9a:97:fe:bb:1b:c0:0e:8a:a7:01:c0:fe:05:1b:fa:a5:
         81:76:bc:0d:b6:76:b8:5f:1a:f0:62:07:3f:25:d5:69:06:ec:
         34:ab:48:08:42:c5:12:ce:cd:51:38:03:6e:c9:4d:e2:bc:ec:
         9d:57:7c:30:d3:55:6a:82:f8:03:1d:48:0d:b6:ac:ff:64:af:
         b1:79:2c:b3:89:d8:15:62:a0:19:82:f8:47:94:97:3e:8b:e9:
         62:74:29:7d:70:3d:db:bc:40:ce:fb:0c:b9:a0:f8:24:de:cd:
         98:77:0e:b5:5a:8e:a1:35:9f:57:9d:0e:19:21:d8:1f:db:05:
         10:32:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----