Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/2479893348348c0b5725381d2dd51098b51b13d2.roa
File:                     2479893348348c0b5725381d2dd51098b51b13d2.roa (raw, json)
Hash identifier:          nrIN4jJyeiWVp3t10Ldk2GQFRuTlUrEjfGb+Hv2JvZg=
Subject key identifier:   ED:C3:2C:67:AB:56:3F:33:A5:A9:E8:99:F3:EF:41:6C:CD:9B:18:34
Certificate issuer:       /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial:       0D7A86
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/2479893348348c0b5725381d2dd51098b51b13d2.roa
Signing time:             Wed 24 Mar 2021 14:40:01 +0000
ROA not before:           Wed 24 Mar 2021 14:39:56 +0000
ROA not after:            Tue 24 Mar 2026 14:39:56 +0000
asID:                     27947
IP address blocks:        2803:b2c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883334 (0xd7a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
        Validity
            Not Before: Mar 24 14:39:56 2021 GMT
            Not After : Mar 24 14:39:56 2026 GMT
        Subject: CN=2479893348348c0b5725381d2dd51098b51b13d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:e1:c8:a7:da:af:e7:40:40:c8:cf:57:d4:
                    47:76:78:bf:9a:b1:3a:bc:6e:9d:b2:bc:ce:f0:a2:
                    0c:bd:d4:43:ca:3a:19:8e:a5:6f:ec:39:58:ee:d8:
                    4a:4c:70:c7:a9:92:d6:1b:e7:6a:13:25:ff:d2:65:
                    e2:58:a8:20:84:1f:a2:b6:82:80:0f:5c:58:25:e1:
                    d3:74:c7:2d:5d:ce:39:3a:48:ac:d8:44:49:64:aa:
                    bc:57:2f:fe:50:b0:a9:c6:3c:8c:df:16:97:f0:d4:
                    29:20:e4:5a:9b:66:71:77:a5:cc:1d:14:c3:a3:be:
                    7a:ce:84:9a:21:74:f5:02:e2:5b:ea:0e:5e:47:37:
                    07:21:66:e3:c0:f5:83:6e:31:ef:42:7a:14:96:47:
                    77:6d:34:07:a8:fa:9d:5b:32:01:fb:0d:ff:6e:52:
                    3b:f2:76:c3:13:57:5f:de:37:f0:97:0f:e0:1f:84:
                    a9:b9:c2:3a:e7:86:4f:fb:e1:48:58:8c:16:69:cf:
                    5a:47:9e:71:9b:73:3b:95:27:4e:ed:46:6a:e3:d5:
                    77:14:e0:fb:de:f6:44:af:ff:89:3c:0e:35:da:18:
                    6f:55:52:5b:be:c1:b2:f6:7a:c0:5c:c8:bf:75:1b:
                    7d:5f:da:05:42:1a:a4:3f:f5:d9:55:cd:7d:23:bd:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C3:2C:67:AB:56:3F:33:A5:A9:E8:99:F3:EF:41:6C:CD:9B:18:34
            X509v3 Authority Key Identifier:
                keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/2479893348348c0b5725381d2dd51098b51b13d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:6f:a3:65:7c:be:46:d1:37:8b:d9:bc:36:9e:2f:a1:b0:
         eb:cf:8b:17:ca:4d:42:69:95:f9:4a:f7:5c:4f:4b:4f:18:31:
         45:e9:4c:77:8f:a2:09:d5:b4:d1:fa:44:e3:6f:99:23:0d:cf:
         fb:37:a5:e2:70:5f:65:5d:26:10:b6:76:48:8d:da:57:4e:70:
         65:19:35:67:bc:3d:f6:cb:92:27:b4:ac:ed:6c:f8:6d:ad:9c:
         44:54:36:6a:bf:88:d1:d2:da:ae:3f:7e:0b:d8:65:2e:2c:3f:
         aa:be:4b:f3:83:73:04:09:5a:d9:6d:05:65:39:e6:19:87:66:
         a4:2a:3a:f7:4c:23:6a:1b:8d:74:29:32:4f:69:85:ec:26:ca:
         fe:be:f6:6a:a1:de:12:16:90:9c:d2:d0:4f:df:5a:f9:48:cb:
         d8:9c:a8:15:f6:88:1f:e3:87:e5:a8:e5:c3:6a:2a:97:37:08:
         82:0e:eb:7c:40:9e:f3:79:db:97:16:69:e3:bf:85:2f:6a:08:
         f4:13:e3:5d:8a:f6:33:d2:68:22:60:5f:12:6d:6e:e1:91:65:
         e6:68:7c:b1:a3:56:f2:1c:b8:c6:03:5a:45:ac:27:3b:f3:4b:
         eb:ae:d4:6a:fb:78:2b:22:25:53:87:9b:8e:c7:ef:0c:60:1e:
         5d:97:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----