Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/2d24cfc90d22a768ca9d0ce09d7f9f2758ef23e5.roa
File:                     2d24cfc90d22a768ca9d0ce09d7f9f2758ef23e5.roa (raw, json)
Hash identifier:          TjhbgdVvDnvVp+IewqVPQwx/GV45tPEBQOm/apl+cFc=
Subject key identifier:   2C:55:1C:11:D3:76:65:B8:AC:3F:F1:D0:4E:DC:75:AA:DE:B3:02:93
Certificate issuer:       /CN=0cec7209b9057d239c9d724b057b75899fa702cf
Certificate serial:       0D4421
Authority key identifier: 71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/2d24cfc90d22a768ca9d0ce09d7f9f2758ef23e5.roa
Signing time:             Wed 24 Mar 2021 14:39:28 +0000
ROA not before:           Wed 24 Mar 2021 14:39:28 +0000
ROA not after:            Tue 24 Mar 2026 14:39:28 +0000
asID:                     265815
IP address blocks:        2803:b820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869409 (0xd4421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cec7209b9057d239c9d724b057b75899fa702cf
        Validity
            Not Before: Mar 24 14:39:28 2021 GMT
            Not After : Mar 24 14:39:28 2026 GMT
        Subject: CN=2d24cfc90d22a768ca9d0ce09d7f9f2758ef23e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:d8:00:28:6b:1a:29:84:a3:71:c3:70:2e:
                    92:6e:33:ef:09:01:f9:b4:a8:eb:3d:47:de:81:2a:
                    69:45:b6:fd:a1:a6:6f:5b:2c:9e:00:bb:4b:d8:99:
                    91:2a:14:93:0f:0c:6b:95:1e:90:6c:e7:36:10:51:
                    74:b1:02:16:12:2b:df:82:fb:c2:9b:49:b9:7a:83:
                    ab:93:86:ab:2b:a5:35:97:15:91:79:7a:ee:29:ea:
                    bd:f0:a0:dd:7c:44:e6:09:32:b8:ca:08:80:7c:76:
                    48:69:9b:d6:4d:8e:bb:6e:e3:59:ed:80:d2:72:0f:
                    5b:03:c3:b9:19:59:20:48:53:68:2f:f4:51:4d:ab:
                    70:dc:0e:64:04:ea:99:a1:95:1b:3b:07:f2:b0:2e:
                    25:d7:d5:9f:b4:2e:90:2a:e0:6a:3c:f1:5e:4a:a9:
                    fa:9f:1d:c9:ac:9b:b0:3a:e4:ab:09:92:4d:13:e3:
                    86:b6:bd:79:95:28:de:97:b1:10:7f:fb:82:32:bb:
                    9f:d8:f7:80:3b:f9:8d:ca:7c:73:88:78:7e:dd:24:
                    9c:2d:95:f5:9a:e3:0a:e8:8a:4e:73:0c:6c:6a:16:
                    3b:33:ad:3e:2c:a0:2d:03:7b:e0:30:3b:c4:9b:18:
                    f7:9f:64:bc:0d:3d:d1:c1:e9:8f:0f:da:77:c5:a6:
                    73:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:1C:11:D3:76:65:B8:AC:3F:F1:D0:4E:DC:75:AA:DE:B3:02:93
            X509v3 Authority Key Identifier:
                keyid:71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/2d24cfc90d22a768ca9d0ce09d7f9f2758ef23e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/0cec7209b9057d239c9d724b057b75899fa702cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b820::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:a7:96:d1:9e:48:3e:57:87:e6:62:d6:21:76:b1:4e:20:c4:
         9f:17:7e:9e:e8:6e:ce:45:ed:1d:aa:21:62:c3:cc:a7:d7:13:
         90:ea:8b:be:18:60:1b:d3:1e:e3:a3:85:b7:13:65:7c:fd:83:
         f8:75:de:37:aa:21:95:d9:6e:ca:e0:d1:92:f0:4f:ae:85:72:
         7d:a6:e6:89:0c:f8:68:0f:21:fa:a3:a9:ec:e8:70:e0:b2:63:
         50:7b:7f:7f:8d:5d:2c:77:87:cd:78:27:7b:91:f4:4f:cb:e8:
         85:74:4b:30:9d:fd:3c:fd:6b:0c:c0:f5:eb:85:4a:d6:01:a1:
         fc:9e:26:a2:1d:f2:cf:72:4f:13:c9:fa:7c:37:0f:54:33:ed:
         c0:d1:20:72:df:ae:53:a2:98:c3:8b:e3:e6:37:84:fe:a6:7d:
         af:72:9a:50:11:0b:bf:33:a4:78:d1:00:9b:17:a0:6d:3f:0b:
         35:19:69:36:84:aa:74:74:7f:56:67:74:d8:83:01:ec:e4:46:
         ac:52:0d:7d:fc:e0:eb:57:74:f5:9a:4b:43:1e:33:04:d8:01:
         39:d3:3e:eb:e0:1d:9e:37:ac:ab:f9:32:3f:42:09:5a:b1:e9:
         97:86:ae:31:ff:66:75:52:0c:b4:b0:98:61:43:c4:4b:a2:b0:
         5c:7a:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----