Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/118ffd431b6f0ec34720fe7c2dd0174e8ec1f138.roa
File:                     118ffd431b6f0ec34720fe7c2dd0174e8ec1f138.roa (raw, json)
Hash identifier:          ALHrsXCHYQquqOxz/TDGUFsp0iDo1WIzxdn2Qw/M4dg=
Subject key identifier:   B9:F0:5A:52:90:BF:39:78:DF:6D:93:0B:37:0C:3E:3C:66:45:E3:66
Certificate issuer:       /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial:       0D797B
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/118ffd431b6f0ec34720fe7c2dd0174e8ec1f138.roa
Signing time:             Wed 24 Mar 2021 14:40:01 +0000
ROA not before:           Wed 24 Mar 2021 14:39:56 +0000
ROA not after:            Tue 24 Mar 2026 14:39:56 +0000
asID:                     19169
IP address blocks:        2803:b2c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883067 (0xd797b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
        Validity
            Not Before: Mar 24 14:39:56 2021 GMT
            Not After : Mar 24 14:39:56 2026 GMT
        Subject: CN=118ffd431b6f0ec34720fe7c2dd0174e8ec1f138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:30:02:d7:38:ba:fe:e3:0e:e3:4a:ee:5b:
                    2e:99:3b:83:7e:14:f1:e4:7f:f8:56:d0:16:9b:bc:
                    fe:d4:4b:ec:0b:e2:31:32:99:0b:c1:28:99:da:b4:
                    fe:1e:0a:27:71:5d:be:5d:30:da:cf:d3:00:eb:ce:
                    8a:f3:73:b8:5b:c5:86:93:5d:1f:8d:6a:5d:2b:09:
                    08:08:7a:ff:c3:88:0a:59:d0:7a:7f:84:cd:75:5a:
                    e9:82:96:c8:70:4a:ef:cb:0a:10:28:a8:d1:c2:29:
                    51:b7:a3:28:b0:21:d1:0d:e8:92:85:f1:98:3e:f1:
                    90:88:f5:29:f0:aa:9b:2e:24:a6:e4:ed:f6:79:0f:
                    80:e8:df:cd:a5:d5:de:ca:97:92:48:b8:ef:4f:02:
                    ef:65:74:96:4e:af:ed:7b:cf:49:f0:7a:9f:e4:7a:
                    7c:77:85:d5:6f:45:58:47:c6:02:75:d6:02:7d:20:
                    9f:72:57:b2:11:09:7b:f7:d9:a4:45:78:af:dc:28:
                    e7:73:2a:60:f7:6f:8e:e8:c4:35:e6:79:4b:4d:2a:
                    46:82:78:52:d2:df:55:03:3c:ff:87:17:97:20:f2:
                    f2:49:d0:3a:2f:6d:72:5e:d8:5c:86:08:09:92:dd:
                    5e:46:f0:7f:7b:11:53:54:d0:68:95:73:e8:cf:4a:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:5A:52:90:BF:39:78:DF:6D:93:0B:37:0C:3E:3C:66:45:E3:66
            X509v3 Authority Key Identifier:
                keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/118ffd431b6f0ec34720fe7c2dd0174e8ec1f138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:0e:90:81:6f:37:cf:a8:93:5f:84:d4:f3:d8:c6:89:93:
         7b:f8:d0:2d:8d:58:d8:b2:6f:e9:74:8a:03:0f:df:8a:ad:ba:
         a4:c2:8e:e2:25:52:37:6c:aa:1b:b2:fc:11:7b:73:86:d4:14:
         fc:d0:ff:23:d5:99:4c:08:df:1c:2b:77:00:71:d2:9d:85:f7:
         db:d0:c5:5f:c6:13:4b:3f:b1:fb:88:dc:4f:1b:eb:0e:80:d2:
         b9:30:08:2c:79:5c:0b:87:85:f6:72:aa:cd:0e:ad:95:d8:1b:
         8a:c9:65:04:49:9b:0f:4c:97:49:3a:e4:c5:6c:49:25:51:03:
         9c:70:1a:1e:5b:6c:b9:ed:ee:88:84:ba:0f:b7:b2:26:80:2a:
         31:76:c2:1d:c2:36:5b:f8:d2:f0:fd:56:8a:b3:00:4b:ee:6d:
         e7:7b:a3:2a:91:9b:68:20:21:9a:0d:f6:dc:26:38:0b:5d:2e:
         09:d3:73:13:4d:dd:2c:35:ff:10:a6:17:0c:72:08:51:bf:1e:
         3a:d1:9c:3f:81:7e:fb:a9:ef:8f:c3:a4:a9:07:e1:84:61:c7:
         8f:af:19:19:39:07:fc:06:8a:b6:b3:27:e0:d3:ce:b6:f4:f6:
         b2:05:75:d2:af:6d:93:b6:b2:fd:7b:dc:dc:57:85:fa:ef:e7:
         64:df:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----