Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/c0042521c9836a89bde2f73af3fb9cfaa159517b.roa
File:                     c0042521c9836a89bde2f73af3fb9cfaa159517b.roa (raw, json)
Hash identifier:          /kvk9vjtoHsfJ1jEPBTqHv4H+szqLB4G7ewBAQnGqW0=
Subject key identifier:   FC:3E:51:54:B7:C1:60:0F:8A:B7:0D:36:98:78:B1:57:55:AE:5A:DF
Certificate issuer:       /CN=7cd476f73c9fe24cad71bb31f59adc910154e2ec
Certificate serial:       0B7ECE
Authority key identifier: FF:69:7A:E2:15:EB:BB:89:68:BA:02:03:B8:F2:87:25:9D:F3:EE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd476f73c9fe24cad71bb31f59adc910154e2ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/c0042521c9836a89bde2f73af3fb9cfaa159517b.roa
Signing time:             Wed 24 Mar 2021 14:39:06 +0000
ROA not before:           Wed 24 Mar 2021 14:39:05 +0000
ROA not after:            Tue 24 Mar 2026 14:39:05 +0000
asID:                     269761
IP address blocks:        2803:d560::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753358 (0xb7ece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd476f73c9fe24cad71bb31f59adc910154e2ec
        Validity
            Not Before: Mar 24 14:39:05 2021 GMT
            Not After : Mar 24 14:39:05 2026 GMT
        Subject: CN=c0042521c9836a89bde2f73af3fb9cfaa159517b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:6d:6a:30:d1:25:b0:1c:57:e8:46:48:05:
                    5f:0a:86:37:48:f9:e0:15:38:c8:b2:be:27:73:38:
                    c8:99:34:3e:56:17:d1:4b:50:24:34:fa:21:b0:a6:
                    bf:c0:51:61:dc:4e:1e:8e:29:f0:d8:af:52:04:0b:
                    8b:00:2b:4a:dd:01:b0:59:b5:92:3e:86:f0:2a:c6:
                    b8:c7:39:56:d6:cd:c7:9c:67:40:49:5f:3f:95:d2:
                    b1:a7:f8:de:93:fd:a1:a6:31:37:0a:91:28:25:d4:
                    8a:41:f2:68:57:38:0f:ef:d4:8d:c1:fd:e6:5b:fd:
                    4e:60:52:cc:2b:99:f5:4a:28:bc:ba:e5:f9:0b:5d:
                    04:fd:55:76:e4:28:46:f6:d5:60:5b:a9:98:ec:c6:
                    a1:bc:9a:ef:65:c4:51:c9:62:2c:ff:b5:1a:7f:2a:
                    63:ce:82:d7:33:f0:e0:d1:28:60:5c:96:54:81:e4:
                    87:42:95:81:8b:0d:c8:aa:d1:69:88:27:38:75:12:
                    57:c7:51:10:89:cd:52:79:0b:f5:07:b7:48:8e:8b:
                    87:d7:5a:9e:c3:a5:06:26:bf:22:93:e4:4f:4f:e1:
                    d2:b2:56:c5:56:bf:85:45:15:bb:e4:ea:36:2c:2c:
                    bd:a0:24:5f:b9:58:9c:18:e3:f9:ba:4d:cf:32:64:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3E:51:54:B7:C1:60:0F:8A:B7:0D:36:98:78:B1:57:55:AE:5A:DF
            X509v3 Authority Key Identifier:
                keyid:FF:69:7A:E2:15:EB:BB:89:68:BA:02:03:B8:F2:87:25:9D:F3:EE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd476f73c9fe24cad71bb31f59adc910154e2ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/c0042521c9836a89bde2f73af3fb9cfaa159517b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/7cd476f73c9fe24cad71bb31f59adc910154e2ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d560::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:15:49:6a:74:93:7a:e9:61:0e:f0:7c:56:92:0e:b2:79:dc:
         0e:a6:e6:53:8f:34:73:fc:6b:3b:77:f8:81:c6:ad:ba:6a:d2:
         46:ce:da:2c:e5:aa:e1:84:84:ab:68:82:1c:a9:48:b8:79:b7:
         47:73:81:4a:1c:42:d2:d3:0a:7c:07:d7:71:e5:8c:43:92:f3:
         b7:32:80:61:d5:e8:23:44:33:0d:11:f5:f1:8f:ef:11:87:fa:
         cc:50:d6:44:ba:a4:ef:bf:51:92:f0:ce:38:d2:e1:21:86:72:
         c0:cc:f6:7b:b1:6e:1b:a0:66:4c:09:67:25:3b:1b:42:5b:5d:
         e1:27:ee:dc:ad:f3:e9:e9:09:ec:5b:3d:1d:da:81:ef:d2:36:
         6b:81:78:f9:be:5d:ea:de:55:6d:7d:c8:c9:18:ca:10:b3:03:
         34:5f:6d:ae:d1:44:f7:7b:f9:f3:4c:1c:34:49:84:6d:9d:a2:
         38:7d:db:15:68:fe:7f:11:4e:89:cf:c9:e7:c7:d0:47:2a:75:
         cc:6c:b0:ff:80:43:64:f7:fa:70:15:02:de:fe:5e:57:cf:63:
         c3:41:e2:20:68:13:61:2f:0f:80:c0:5c:e6:84:72:65:37:b4:
         30:58:ae:71:c7:f7:f1:53:66:78:ff:60:e6:63:79:32:e8:f9:
         cf:3f:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----