Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/57f07930164ce56b4f6d01d473c39f0785a8c73f.roa
File:                     57f07930164ce56b4f6d01d473c39f0785a8c73f.roa (raw, json)
Hash identifier:          /jnP7Ykt54KqZU55T/ACIiSVi7dOiI/nQ9HurgU2EpM=
Subject key identifier:   EB:03:A2:40:CA:BA:E4:C1:03:97:0A:A1:67:96:E9:02:3B:66:91:19
Certificate issuer:       /CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Certificate serial:       0D3D5C
Authority key identifier: 8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/57f07930164ce56b4f6d01d473c39f0785a8c73f.roa
Signing time:             Wed 24 Mar 2021 14:41:31 +0000
ROA not before:           Wed 24 Mar 2021 14:41:31 +0000
ROA not after:            Tue 24 Mar 2026 14:41:31 +0000
asID:                     264668
IP address blocks:        2803:59c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867676 (0xd3d5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
        Validity
            Not Before: Mar 24 14:41:31 2021 GMT
            Not After : Mar 24 14:41:31 2026 GMT
        Subject: CN=57f07930164ce56b4f6d01d473c39f0785a8c73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:6c:47:14:1e:b4:7d:92:9c:35:8b:d6:38:
                    ef:2c:2e:95:26:cf:f0:63:18:f7:2d:bd:75:19:0a:
                    41:f5:68:17:55:0a:17:02:af:3f:0f:09:8f:26:fd:
                    ea:66:01:a4:c3:f6:ec:ba:61:09:19:51:f0:82:84:
                    29:a1:08:97:5e:99:ba:cb:16:b9:0d:af:4e:b1:11:
                    84:31:17:19:60:81:c6:dd:e1:4e:a0:c7:67:74:dc:
                    66:b9:48:5a:b1:95:9f:00:05:87:d6:f8:ed:20:45:
                    70:f9:a5:1f:ec:f3:59:62:fd:47:95:75:79:e6:b4:
                    ba:00:46:66:f3:f7:c9:5f:8b:9d:82:52:10:f0:38:
                    c1:c8:01:18:56:f0:e6:58:cb:b8:71:3c:f3:24:92:
                    3c:09:d6:92:11:b7:05:cd:ba:71:de:e5:90:28:cb:
                    75:0f:a9:e6:17:70:6c:9b:4a:ee:4a:e4:22:8a:36:
                    fc:b7:54:e4:a4:05:a9:98:68:c1:08:50:04:f7:8f:
                    cf:b8:e6:ba:39:62:33:58:8a:1a:76:8f:32:42:66:
                    02:1d:d4:05:8d:03:dc:4e:e6:93:80:dc:8b:f1:53:
                    b8:19:1a:ac:7f:69:6d:e0:a0:4c:82:54:45:cf:4a:
                    92:fe:e4:b2:38:46:8d:33:b1:d5:1d:a5:67:cd:ce:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:03:A2:40:CA:BA:E4:C1:03:97:0A:A1:67:96:E9:02:3B:66:91:19
            X509v3 Authority Key Identifier:
                keyid:8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/57f07930164ce56b4f6d01d473c39f0785a8c73f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:05:c8:68:63:ea:e7:7a:12:77:4a:c6:4b:2c:1f:b0:21:7f:
         0c:41:7b:04:3e:9e:2b:e2:64:cb:f6:ef:b1:04:0a:0a:02:ff:
         09:30:da:ba:af:8e:40:88:b9:8e:61:9f:07:7e:9d:47:23:a1:
         3a:62:64:96:7d:0e:bf:23:c9:86:52:db:0c:37:a4:cb:a0:cc:
         8c:e5:ea:13:0c:12:ad:bc:dd:7c:44:7d:b9:03:7c:03:ba:ff:
         a1:f1:09:a3:2e:95:a9:94:97:f8:86:9b:28:1a:c8:a9:81:dc:
         a6:a0:e9:51:97:96:a2:03:61:9f:5b:35:88:ca:68:0f:3c:17:
         5a:fc:6c:7d:23:22:f6:10:a0:1b:4e:da:e4:8e:bc:86:c9:59:
         6f:da:7f:92:4d:59:13:08:ee:01:f5:8c:ad:05:1c:60:ff:67:
         6b:10:b8:3c:9b:47:2b:4f:d1:a1:12:ba:4d:23:48:2d:b6:45:
         82:f7:27:08:f1:47:d1:14:ee:54:ca:c4:1c:b3:e4:44:3f:4c:
         20:00:3e:15:c5:38:c6:8a:36:e2:a5:c7:8b:2e:87:93:4e:30:
         40:33:dc:82:d5:ca:28:5a:3c:48:87:5d:44:e3:12:cf:9a:47:
         5c:7f:f3:e1:c9:f5:d1:41:e1:a8:31:ae:63:ef:b7:e3:e5:fc:
         cf:c0:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----