Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/2554381cba9c6a7091642085bf31c573c6e324ea.roa
File:                     2554381cba9c6a7091642085bf31c573c6e324ea.roa (raw, json)
Hash identifier:          uzE9cjdUF2f0yraC6fHzE58ywyVlmAD1iaTcKXWHaHE=
Subject key identifier:   4F:FF:0F:FA:52:D0:2C:59:E2:5B:A6:CD:C6:71:17:C4:B7:14:CA:B8
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       0DC9D3
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/2554381cba9c6a7091642085bf31c573c6e324ea.roa
Signing time:             Wed 24 Mar 2021 14:36:27 +0000
ROA not before:           Wed 24 Mar 2021 14:36:26 +0000
ROA not after:            Tue 24 Mar 2026 14:36:26 +0000
asID:                     52468
IP address blocks:        2803:bc40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903635 (0xdc9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Mar 24 14:36:26 2021 GMT
            Not After : Mar 24 14:36:26 2026 GMT
        Subject: CN=2554381cba9c6a7091642085bf31c573c6e324ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:f7:b2:1a:ae:6d:64:18:47:a3:9c:b5:4c:
                    84:c4:fc:59:14:f4:d9:46:3b:01:fb:fd:af:b7:ba:
                    e2:76:54:f6:6e:c1:45:7f:8b:01:f2:a1:40:95:d8:
                    a3:f1:76:ff:11:b6:00:be:1f:bb:f6:09:51:47:be:
                    50:39:2e:66:46:70:3f:82:42:a5:9b:31:cd:11:32:
                    b4:97:c1:9c:6b:6c:fc:5c:8e:ba:d0:f1:60:1d:46:
                    a4:dc:bf:d0:27:8e:63:07:d1:f1:17:a3:e4:f8:54:
                    a8:22:d0:dc:bd:32:e1:86:37:65:54:de:fb:5b:ba:
                    be:8b:e4:bf:13:aa:2f:9a:70:b2:12:66:b6:cc:95:
                    c6:c1:74:cc:47:8e:36:15:b3:f5:c6:b7:9e:a2:df:
                    4c:fc:ef:d8:76:52:49:e7:ce:d8:6f:58:38:f8:11:
                    fe:c3:bf:35:87:1c:74:2d:94:5c:2b:0e:21:8f:1b:
                    8e:fa:a2:09:ea:84:12:b6:14:9d:11:41:58:57:2f:
                    4f:1f:65:28:d8:40:da:a2:79:02:34:6a:77:06:c8:
                    9b:b2:dd:1b:83:cb:46:be:3f:a4:63:4d:55:06:27:
                    c2:a4:07:05:6c:d7:b2:b1:95:a4:58:74:54:e6:6f:
                    bc:8f:f6:32:b7:45:78:54:90:0c:65:ae:cf:c3:eb:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:0F:FA:52:D0:2C:59:E2:5B:A6:CD:C6:71:17:C4:B7:14:CA:B8
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/2554381cba9c6a7091642085bf31c573c6e324ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:0c:1c:9c:b5:7f:0c:2d:86:76:f1:c0:8a:7a:bc:b8:64:
         19:d5:d6:98:06:31:de:4b:f2:81:fb:08:77:b7:e1:20:9b:3f:
         c2:29:5c:34:e1:9b:db:1e:fa:b4:72:e2:6c:47:9d:69:a4:bb:
         50:36:ee:0e:fc:fd:a3:91:03:06:a3:08:08:13:73:02:50:91:
         8f:dd:2f:19:d3:6a:32:dc:eb:4e:ea:0f:65:ac:9a:e0:e1:2a:
         be:c1:39:b8:f9:bc:88:13:65:4f:c5:01:66:df:26:11:0b:4e:
         ec:fb:92:43:dc:00:e8:25:fc:12:3f:37:fb:15:93:17:2b:0a:
         fd:55:46:b4:93:0b:6a:1b:96:42:89:97:8a:3e:3c:06:91:17:
         d0:a9:f4:75:2f:5b:30:eb:fb:3d:3a:f6:14:c8:68:b2:7a:39:
         82:d1:7a:ff:09:b8:5d:c9:17:f3:cf:2d:eb:91:4a:75:ab:e6:
         1e:27:56:48:ef:f0:88:8f:97:25:da:bc:78:24:63:d1:59:5c:
         f5:0a:66:15:56:d2:bf:61:36:b8:a7:d5:0a:ad:f5:b5:b2:18:
         2e:34:e7:b2:24:79:fb:6f:19:81:af:a4:32:3f:df:84:26:5e:
         fb:ad:dd:31:60:66:87:ac:6e:a2:23:8d:e2:c5:90:24:e1:be:
         b1:17:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----