Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9834b9e1642ad92eda5bdc0fce5d0c0cb3264c4c.roa
File:                     9834b9e1642ad92eda5bdc0fce5d0c0cb3264c4c.roa (raw, json)
Hash identifier:          90ylSq08sAjfwoTmd1bKQfiWM5Q9JNDAI6Fq/aaiRJw=
Subject key identifier:   84:D0:1F:41:31:57:90:D2:50:F2:96:86:18:34:62:44:CE:EA:EF:14
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E9561
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9834b9e1642ad92eda5bdc0fce5d0c0cb3264c4c.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        2800:600:128::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955745 (0xe9561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=9834b9e1642ad92eda5bdc0fce5d0c0cb3264c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:95:58:b9:9e:e5:09:8e:0d:96:e9:b0:a3:
                    44:57:10:15:0c:b4:0b:5b:2b:73:2d:6b:5b:4c:6c:
                    07:31:cf:aa:5a:bd:6d:6f:12:07:82:a2:f1:54:a9:
                    e9:bc:4c:62:22:a4:e6:26:10:09:77:5b:a4:0d:2a:
                    db:bc:a4:02:d0:2d:56:80:4f:c8:b6:1c:5f:73:65:
                    02:28:a2:d3:e2:4d:e3:72:14:2d:ed:95:a5:29:49:
                    14:3c:2f:d4:30:ad:65:b1:94:aa:ae:48:8e:f5:8d:
                    e1:a3:3b:38:87:fa:80:71:15:e7:77:9b:55:ab:21:
                    21:ec:a0:53:a7:3e:58:03:65:8e:0f:c9:f8:0b:43:
                    d1:fa:08:e5:05:12:ef:a2:89:06:b0:fa:4c:91:7a:
                    79:4d:fe:16:58:2d:f1:48:ea:c8:62:cb:3d:60:f3:
                    82:0b:72:a6:e9:32:32:d7:87:85:b8:0d:76:07:7b:
                    d2:45:a0:f3:83:3b:d5:54:c4:32:2f:8e:fa:df:79:
                    4f:68:cc:b4:97:ce:6f:83:d4:cc:56:bb:0a:56:9c:
                    2a:64:26:3d:c0:41:fa:bd:56:6e:1a:10:da:54:93:
                    29:98:47:c7:e9:32:04:f6:90:9a:00:e5:df:79:9b:
                    5a:19:05:0f:88:54:4a:04:c7:cf:d8:fd:0f:0a:10:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:1F:41:31:57:90:D2:50:F2:96:86:18:34:62:44:CE:EA:EF:14
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/9834b9e1642ad92eda5bdc0fce5d0c0cb3264c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:37:fb:c2:5d:67:5c:7f:18:27:fe:a9:0f:21:ad:fd:7d:69:
         52:3b:65:c9:d8:7d:7c:26:b5:c0:6c:73:3a:19:31:df:64:bb:
         3a:86:87:8c:59:74:41:62:66:3e:40:e3:45:9f:8a:02:72:83:
         9b:a9:9c:2a:4c:2d:ce:89:4c:21:fa:a5:f2:d4:ed:5c:23:df:
         46:3f:30:c5:d6:c2:55:5c:40:e9:33:ed:ad:b9:40:92:93:72:
         98:cb:84:cc:8c:36:a7:c3:48:bf:cf:ba:de:8b:bb:9e:80:18:
         ea:7e:5d:81:65:57:e7:db:15:4d:0a:0e:4d:cf:36:fb:2c:2f:
         78:e5:6a:35:f3:80:ab:90:75:c5:e0:25:03:d8:a4:ea:8c:80:
         25:06:75:56:ce:d0:6d:0e:0e:23:9e:6d:4a:15:7f:6b:f3:18:
         63:54:f3:f5:fb:9c:47:5e:8b:39:a4:e7:bc:62:ec:bc:b2:c9:
         b1:74:b0:57:84:d2:13:3d:d6:f8:48:b2:ee:34:5b:1f:0a:1b:
         8d:2c:69:eb:0d:99:6f:40:9c:1e:13:de:bf:2d:4f:da:7a:ec:
         69:12:0b:e3:1b:25:40:75:8d:78:3d:73:72:00:f5:0f:c8:6a:
         8f:ef:55:91:eb:40:b7:ab:2a:b5:88:42:50:7a:f5:74:e2:a6:
         1b:af:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----