Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/8b7491b7a65fa17258aabea1877016a54fb75a85.roa
File:                     8b7491b7a65fa17258aabea1877016a54fb75a85.roa (raw, json)
Hash identifier:          HjU0jSusbHHRTNPAR2Jrm8VM5ylmBG8UpWWNmwfkWBw=
Subject key identifier:   F5:5A:21:F0:30:DC:4E:AD:EE:C8:B7:C1:2A:04:0A:2D:42:21:66:25
Certificate issuer:       /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial:       0BFE10
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/8b7491b7a65fa17258aabea1877016a54fb75a85.roa
Signing time:             Wed 24 Mar 2021 14:47:32 +0000
ROA not before:           Wed 24 Mar 2021 14:47:32 +0000
ROA not after:            Tue 24 Mar 2026 14:47:32 +0000
asID:                     267811
IP address blocks:        2803:e3a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785936 (0xbfe10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
        Validity
            Not Before: Mar 24 14:47:32 2021 GMT
            Not After : Mar 24 14:47:32 2026 GMT
        Subject: CN=8b7491b7a65fa17258aabea1877016a54fb75a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:d5:98:da:a9:6e:ca:94:9e:0c:86:a1:bc:
                    e0:1d:79:ae:00:50:60:e1:4f:91:c7:66:68:0f:49:
                    a2:ac:ac:ff:05:ce:cd:ab:73:5d:96:04:d9:4c:90:
                    81:d4:55:62:7b:f4:3f:fa:04:50:f4:21:5b:ec:0e:
                    1c:46:71:8f:57:93:59:48:5a:9f:25:c1:46:ca:50:
                    0b:28:1c:09:50:bf:57:50:c8:9f:a6:e1:e8:e4:2a:
                    21:67:3a:e1:92:17:b1:6a:4d:94:a6:0a:c9:ef:f7:
                    6c:e4:e6:00:47:ab:37:d0:e4:9d:25:7f:e9:64:da:
                    7c:c3:94:a0:23:5c:42:29:09:0a:9c:c1:c9:1c:37:
                    48:65:f5:28:2f:ad:7c:d8:b6:07:e1:61:e4:34:6f:
                    84:63:74:e7:d4:c2:60:df:ec:a7:1f:dc:21:3b:1b:
                    39:c2:ba:55:42:77:f5:25:9d:40:9b:ad:1d:70:ab:
                    66:40:2e:03:c8:c9:33:bc:47:87:1d:54:08:54:2d:
                    22:ef:d7:81:7e:87:03:85:9c:8a:f8:d8:b8:c3:a6:
                    89:64:d9:74:05:4a:db:b6:f8:33:e8:bc:5e:d5:f3:
                    aa:cc:e4:bd:3b:08:41:b1:17:eb:3d:fa:08:f7:68:
                    0d:0d:80:b1:f9:ac:6a:a7:b1:6f:c5:5c:60:f1:a5:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5A:21:F0:30:DC:4E:AD:EE:C8:B7:C1:2A:04:0A:2D:42:21:66:25
            X509v3 Authority Key Identifier:
                keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/8b7491b7a65fa17258aabea1877016a54fb75a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:0e:6f:f6:40:89:08:ef:8b:0d:ea:b2:ff:8d:86:ff:95:
         d1:28:20:88:e1:f1:45:bf:24:ed:7d:e2:4f:45:53:db:d8:12:
         8c:ed:84:c2:d8:eb:5b:39:90:0a:52:81:9a:a7:fe:55:52:53:
         7e:57:77:41:1f:fa:79:95:e5:c2:00:69:59:6a:6c:6f:da:5b:
         95:42:13:d9:da:26:57:1b:68:a1:0b:02:9e:c1:84:d9:6a:78:
         8a:04:f7:95:72:66:f5:ef:6e:d3:15:d0:6a:d2:4e:f9:64:10:
         26:9e:e0:10:46:a8:e8:e2:84:96:27:25:94:77:2e:42:df:7d:
         f1:f3:4f:04:6f:17:63:1a:d9:00:a8:2a:02:c8:ba:49:0a:43:
         b0:d0:17:0e:09:02:e4:37:2f:35:9c:84:0f:c5:25:c3:22:b2:
         42:9c:39:9f:5d:e4:70:3c:b8:f6:08:04:3c:70:f3:66:55:a4:
         af:42:2a:34:72:41:43:6d:d2:a8:d7:a1:62:2d:5f:aa:bb:34:
         af:78:5d:1c:ca:72:79:b2:75:ce:60:6a:a6:19:a5:61:17:09:
         fd:50:7a:1c:12:bb:20:a3:63:a3:8f:ca:e8:8d:c9:30:02:48:
         ed:91:74:c2:70:9e:99:a4:d6:5d:4a:80:89:4d:39:3a:66:1e:
         9d:fd:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----