Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/3a6974e7fdd9e564e49c3e1d90d03d6567d0b553.roa
File:                     3a6974e7fdd9e564e49c3e1d90d03d6567d0b553.roa (raw, json)
Hash identifier:          bJsv4DxKONlnrLadtRto11x5Ue8SqLbpfPN/1tDktvA=
Subject key identifier:   0A:75:32:E1:7B:EC:2A:0F:02:BA:91:CA:C5:A6:62:76:69:DE:2C:19
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       0D99EC
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/3a6974e7fdd9e564e49c3e1d90d03d6567d0b553.roa
Signing time:             Wed 24 Mar 2021 14:41:28 +0000
ROA not before:           Wed 24 Mar 2021 14:41:28 +0000
ROA not after:            Tue 24 Mar 2026 14:41:28 +0000
asID:                     264668
IP address blocks:        2803:2220::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891372 (0xd99ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Mar 24 14:41:28 2021 GMT
            Not After : Mar 24 14:41:28 2026 GMT
        Subject: CN=3a6974e7fdd9e564e49c3e1d90d03d6567d0b553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:ab:08:c5:6e:52:8f:a2:61:c1:47:cb:c6:
                    06:ac:64:77:fa:56:d1:53:d4:d3:8b:b7:dc:9d:8e:
                    da:3e:4f:29:7d:ad:e3:10:a8:12:a7:d9:67:9f:58:
                    d9:07:47:3b:a2:3d:ac:13:3a:cc:db:ff:60:09:bc:
                    2a:dc:dc:fe:1f:b9:40:69:75:af:14:63:6e:c9:c8:
                    04:de:62:91:de:d2:22:99:43:09:4b:e8:d2:2d:d7:
                    7e:40:b9:63:a1:bc:45:3e:2b:50:75:53:42:d7:29:
                    87:6e:e3:ba:05:e3:c5:07:9b:4c:f1:f8:ac:0b:e3:
                    34:8c:05:73:01:4e:e6:73:32:a1:72:69:2a:43:00:
                    e9:07:a7:50:ed:f5:60:23:0f:8b:56:d7:22:be:69:
                    f9:52:a2:6a:93:3b:83:e3:37:15:39:a0:8d:45:d7:
                    b4:e7:10:d6:00:39:ab:ac:7c:ab:ba:75:a3:f8:c2:
                    eb:8e:3b:de:1d:98:f2:61:83:dc:84:b2:ce:2a:23:
                    91:23:4f:6d:ea:f7:7e:86:2b:99:33:52:8b:1a:e5:
                    63:c8:43:fb:4c:bf:72:24:c4:cf:92:1d:22:40:71:
                    e7:be:dd:ed:8d:b1:43:0a:fd:e8:5d:88:a3:7f:70:
                    ad:88:4b:3c:16:12:69:86:3c:e5:09:d3:d8:18:37:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:32:E1:7B:EC:2A:0F:02:BA:91:CA:C5:A6:62:76:69:DE:2C:19
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/3a6974e7fdd9e564e49c3e1d90d03d6567d0b553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:73:02:92:e0:5d:db:22:c1:d3:ec:f6:3d:ef:b6:cf:e1:ac:
         2c:53:4e:63:b8:0c:e2:a8:1f:ce:79:0d:24:7e:ed:df:83:9e:
         df:17:59:82:63:c4:1b:31:66:a0:26:e6:af:e5:95:49:4b:23:
         9d:d6:9c:de:cd:47:67:d8:1b:50:63:0f:55:95:18:b6:e5:4f:
         56:83:9b:f1:39:a8:e7:0b:71:e7:12:c2:07:7f:52:77:35:c2:
         38:4b:97:f0:3a:47:d7:2c:25:e8:9d:56:28:30:99:2c:65:fa:
         e5:f4:86:10:33:6a:ff:6e:d8:2a:fd:1a:d6:76:a3:10:6b:37:
         b8:69:e4:b9:c8:1c:73:5a:11:9f:25:67:e3:f3:76:76:95:0a:
         8b:d4:9c:92:b6:aa:2b:a4:c0:f4:0d:3c:c5:a8:e9:fa:95:94:
         ad:7b:89:6b:ca:47:6f:e9:60:5c:15:c7:aa:e1:22:e6:b1:88:
         0c:a6:6a:5c:5b:b8:7a:37:d4:04:c3:a1:46:70:69:08:5c:8f:
         ed:6d:3d:e1:e0:71:0c:f2:f5:c0:35:c7:b5:98:19:7d:75:51:
         6d:95:66:66:45:f9:df:73:a4:73:c5:f6:e3:d3:55:8a:9c:89:
         0e:7d:ac:4f:7d:76:48:a2:f8:49:b0:20:10:3c:66:eb:6c:69:
         94:34:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----