Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/ad6895bf88fb2b3f0147bb236cc5e8546746e259.roa
File:                     ad6895bf88fb2b3f0147bb236cc5e8546746e259.roa (raw, json)
Hash identifier:          e5yZjPyfCG9FIvV9kX9+YCRVOFReXzxbZitdyE4js5w=
Subject key identifier:   35:F2:40:C5:3F:CD:FC:6A:40:AE:2A:79:AD:53:47:6C:58:C2:19:71
Certificate issuer:       /CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
Certificate serial:       0D77A8
Authority key identifier: 3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/ad6895bf88fb2b3f0147bb236cc5e8546746e259.roa
Signing time:             Wed 24 Mar 2021 14:34:30 +0000
ROA not before:           Wed 24 Mar 2021 14:34:30 +0000
ROA not after:            Tue 24 Mar 2026 14:34:30 +0000
asID:                     20940
IP address blocks:        2800:150:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882600 (0xd77a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
        Validity
            Not Before: Mar 24 14:34:30 2021 GMT
            Not After : Mar 24 14:34:30 2026 GMT
        Subject: CN=ad6895bf88fb2b3f0147bb236cc5e8546746e259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:31:23:d0:f4:a1:1b:1a:e5:9a:92:3d:a1:
                    17:8e:49:99:bb:ee:cc:8c:8e:f3:70:58:e1:47:81:
                    0e:6e:6c:7b:8e:07:21:32:ac:d5:6a:3e:e0:33:63:
                    fc:6c:ee:0d:7a:38:15:51:63:71:10:06:27:26:d8:
                    14:79:e3:e8:a2:e7:28:9f:37:5b:99:95:77:d8:fe:
                    d0:96:71:d3:01:42:75:55:83:aa:5b:87:60:3a:be:
                    dc:ea:be:f4:e9:7f:36:a4:d7:05:78:12:85:53:84:
                    77:6c:64:81:b4:04:00:ea:49:f4:31:ce:f3:5b:37:
                    9a:39:45:8b:8d:70:45:c7:e0:d2:f0:1b:df:d5:61:
                    6e:10:ba:75:98:cd:5f:1c:75:a5:88:ee:e2:af:db:
                    67:2a:9e:ac:5d:90:4f:ee:da:3f:c5:64:61:da:48:
                    2c:83:88:78:0c:c9:5b:78:40:cf:fd:4b:d2:95:ef:
                    76:fd:ac:43:b2:70:e8:f3:9c:9d:8c:b2:ce:54:62:
                    d7:9c:53:0e:75:84:63:43:66:7c:86:5e:ba:03:4e:
                    4f:a1:e9:b0:90:71:ff:bd:33:ae:55:8c:f9:9f:e1:
                    dc:39:26:24:1c:74:a8:d8:4c:b5:75:7c:6d:7f:46:
                    9e:51:67:af:e6:09:27:d9:71:29:40:0a:73:b4:3d:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:40:C5:3F:CD:FC:6A:40:AE:2A:79:AD:53:47:6C:58:C2:19:71
            X509v3 Authority Key Identifier:
                keyid:3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/ad6895bf88fb2b3f0147bb236cc5e8546746e259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/7e02bc3ca022a8018c29af8772e06cbe046b81de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:150:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:0d:a7:c6:4e:e6:9e:73:86:0a:e3:5f:e9:25:4f:16:28:
         41:22:44:f0:06:26:ad:c4:14:fc:d1:52:89:60:3e:10:7c:9e:
         2d:12:8f:6d:96:9e:66:15:cc:6e:34:3b:b6:3b:b8:41:e8:d1:
         e4:04:12:eb:d8:84:0d:9d:bd:cb:26:0a:f0:c6:6b:b7:e9:67:
         eb:10:d2:d1:23:4a:d2:09:ed:78:72:3b:e8:07:7f:bf:9c:79:
         72:55:d9:fc:f0:71:66:98:e9:bc:8a:8d:e7:5d:19:17:95:70:
         2e:c8:7d:76:86:c4:07:d7:8d:da:33:82:b5:76:56:71:fe:6f:
         c8:62:ca:46:b7:eb:14:b0:47:32:35:f1:26:e5:6c:e7:fa:c2:
         5f:2f:25:1b:ab:82:94:37:60:f9:c7:36:c1:5a:0b:0e:53:5a:
         82:00:34:8f:82:6a:c5:67:04:8e:e6:41:d6:24:62:5c:0c:d4:
         5d:5e:55:9f:e0:ed:6d:27:d2:9a:87:61:0f:40:5b:f9:4f:34:
         4e:ed:4a:b1:3d:1c:f1:6d:09:c1:a9:40:34:62:ee:4a:7f:93:
         1c:3d:eb:2a:95:17:e5:86:b8:cb:93:2f:72:42:00:14:e6:2a:
         d2:de:67:7d:f9:1d:d2:e9:ef:72:41:65:06:d0:cc:cb:04:1b:
         d1:8a:b3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----