Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/97e88a179c7ee3627db4b7cc41d44cae9649beba.roa
File:                     97e88a179c7ee3627db4b7cc41d44cae9649beba.roa (raw, json)
Hash identifier:          lZl/4uCys5H3n/vh76cQic6l0exA9mmuPjL9/mfuERQ=
Subject key identifier:   F4:93:A3:97:B1:15:64:E1:6F:49:15:6C:92:33:AA:8A:BF:CD:85:67
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0575C6
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/97e88a179c7ee3627db4b7cc41d44cae9649beba.roa
Signing time:             Wed 24 Mar 2021 14:28:53 +0000
ROA not before:           Wed 24 Mar 2021 14:28:53 +0000
ROA not after:            Tue 24 Mar 2026 14:28:53 +0000
asID:                     27887
IP address blocks:        2803:5ce0:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357830 (0x575c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Mar 24 14:28:53 2021 GMT
            Not After : Mar 24 14:28:53 2026 GMT
        Subject: CN=97e88a179c7ee3627db4b7cc41d44cae9649beba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ca:a3:7a:a1:8a:1d:bf:04:8d:5a:57:de:bd:
                    5c:77:67:70:77:3b:a6:c0:d6:ad:32:98:25:b7:25:
                    58:be:d3:bc:90:8e:17:04:ad:fd:d2:11:b7:3f:94:
                    a4:fc:28:bb:bb:eb:af:a7:42:d5:fe:95:49:81:04:
                    84:f3:9b:a0:b0:5d:b0:56:1d:c1:3d:42:0e:71:c8:
                    51:a0:a2:e8:3c:10:39:19:ea:bc:7f:c7:0e:31:06:
                    18:ee:f7:c4:c5:0a:f2:47:6d:58:18:c8:c4:e3:f4:
                    e7:f5:30:42:d7:ad:57:62:ce:d0:ab:05:17:79:3f:
                    f5:46:fc:39:77:7c:47:58:7c:ec:ba:1a:9d:eb:70:
                    ca:02:39:9a:ed:ed:09:38:04:5e:ca:3a:89:42:2a:
                    f5:41:72:1c:ba:1c:ea:9e:4f:88:3c:07:a2:32:f2:
                    75:d9:16:33:92:8d:13:24:8c:ec:b9:40:4c:df:27:
                    28:82:bc:24:d1:a8:97:41:d7:57:c3:eb:fe:58:49:
                    b9:ef:b6:3f:3d:97:23:af:57:ad:95:72:9f:0e:a9:
                    56:53:e3:ae:b4:95:49:f0:2d:b8:89:d5:d3:ee:b2:
                    b0:b9:53:e4:cf:d6:b5:f5:34:6e:08:cf:a6:82:b7:
                    38:76:0a:a7:33:97:f9:97:da:e5:79:d1:7d:be:75:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:93:A3:97:B1:15:64:E1:6F:49:15:6C:92:33:AA:8A:BF:CD:85:67
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/97e88a179c7ee3627db4b7cc41d44cae9649beba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:da:79:c4:22:a7:ec:2c:04:d9:f2:a1:ab:a9:ae:3a:31:b8:
         35:8c:31:a8:18:11:ff:45:67:e0:0e:bc:d5:85:15:11:75:54:
         8a:a8:e0:53:dd:f2:93:f9:ee:0d:99:76:d9:34:63:84:74:3b:
         fa:36:46:03:71:c2:18:9f:1a:53:0e:b0:04:f7:c1:1f:5f:37:
         1b:eb:86:76:ba:1b:a7:ea:3e:d0:4f:ec:39:ba:cc:6d:5b:ad:
         f1:b0:94:b9:dc:f8:ed:f4:65:ee:46:29:b7:b6:7c:dd:c7:08:
         ff:9b:84:0e:76:96:9f:de:f9:3a:41:43:50:67:bc:72:68:40:
         fd:e7:8c:90:90:a8:50:bb:df:4d:35:4d:3f:b7:c7:3b:0a:14:
         c8:f7:37:06:7a:3f:f8:d0:6f:3d:ed:44:da:49:da:21:e3:98:
         d8:5b:62:a8:51:61:54:5f:54:cd:b3:6b:14:16:5b:10:24:02:
         c2:c2:4a:da:54:99:06:a2:cc:e8:0b:87:30:62:6e:63:4c:81:
         61:15:e0:78:f0:f2:5e:87:88:10:d7:40:15:e9:54:ed:0e:c7:
         93:5c:c4:11:7a:d9:a4:24:06:66:7e:1b:3a:b6:48:38:9f:71:
         8a:b4:0c:1d:c7:e9:45:74:09:4b:e3:f8:06:12:e4:80:b0:e8:
         2b:22:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----