Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/2634a005f3205017e5c4560b5531d64689e500d0.roa
File:                     2634a005f3205017e5c4560b5531d64689e500d0.roa (raw, json)
Hash identifier:          pOBqx6StE9ri7MVe+V6ht5YqpXPECTn5R/zXy+yk1XY=
Subject key identifier:   EB:D2:C7:9C:4C:AE:14:97:5F:70:66:B4:23:10:60:8B:41:99:9B:9B
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A1DE5
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/2634a005f3205017e5c4560b5531d64689e500d0.roa
Signing time:             Wed 24 Mar 2021 14:43:19 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663013 (0xa1de5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=2634a005f3205017e5c4560b5531d64689e500d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:37:08:04:29:d2:3a:23:1b:4e:3c:b1:87:
                    f5:3e:ca:e6:16:28:87:46:01:b3:44:8b:b3:19:55:
                    d6:5c:50:39:c4:69:66:63:36:b3:4d:db:96:df:62:
                    c8:f5:24:fb:e1:18:2c:d1:88:61:54:dd:08:78:65:
                    30:a6:30:54:b7:19:74:1e:d2:c5:16:9e:e5:51:c8:
                    89:a7:a3:0f:b4:86:71:5a:0f:3e:86:45:d0:4c:a8:
                    41:f4:98:02:4d:6e:a7:e6:ec:7d:db:85:9e:8f:c7:
                    28:d3:5a:ff:17:0e:b5:56:0e:c6:38:f9:cf:5a:2e:
                    00:56:eb:8e:4b:df:6b:4f:5c:19:03:4c:1a:4b:3a:
                    0d:ed:c5:e0:0e:01:5d:51:df:59:6a:a8:7e:3a:23:
                    5e:9d:2a:17:76:cf:f3:86:bf:e7:75:13:9f:04:42:
                    6f:99:b5:64:0a:90:b9:78:c2:db:20:b9:b9:f1:9a:
                    da:96:9a:65:5f:b3:ae:f7:c4:bc:dd:02:6a:8a:c6:
                    7a:79:cd:41:dc:26:85:51:b4:b5:e2:18:95:66:1d:
                    2e:52:e2:30:36:e8:6a:97:fe:6c:07:5d:87:40:07:
                    04:74:3d:50:df:d5:fa:02:4d:eb:a1:0d:94:f5:30:
                    f3:8e:79:16:7c:b4:41:c2:5c:0b:26:c5:71:be:a1:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D2:C7:9C:4C:AE:14:97:5F:70:66:B4:23:10:60:8B:41:99:9B:9B
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/2634a005f3205017e5c4560b5531d64689e500d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:7c:ff:f8:86:23:d4:5b:c6:06:fd:c2:0c:d1:87:35:4b:
         0f:96:6e:48:f6:f4:34:5d:71:23:f5:bc:cc:d7:45:d4:98:bb:
         50:61:64:79:e5:04:8f:ee:9c:9f:f2:ba:ed:a3:16:3c:04:f0:
         e9:a1:a6:34:ba:1c:ec:f0:09:33:d6:c7:e7:84:61:1e:13:f7:
         39:c8:f7:07:e8:1b:f9:42:66:80:b7:a0:90:df:cd:03:42:fe:
         76:b9:3c:d7:a2:69:01:61:2a:d1:6a:bb:55:6b:12:9a:a5:05:
         44:65:44:43:a5:87:56:9c:8b:2b:d4:6d:26:da:6f:d3:ad:3d:
         5d:9c:c5:c2:32:0c:23:c3:db:4d:0b:8f:51:5b:db:68:f1:63:
         8d:50:e9:3a:28:28:80:f8:94:1c:25:de:46:a2:aa:6b:b8:2b:
         53:d4:45:bf:a4:be:16:c6:3f:96:e2:e5:f1:b9:81:bb:cc:a7:
         ef:55:bd:9c:fd:3c:b7:44:11:c7:92:06:e4:f7:e9:ed:43:dc:
         2d:85:2e:37:71:ef:d5:41:cb:8e:5b:97:74:e4:99:76:a7:63:
         6c:f0:5e:53:bd:c4:48:15:55:15:cb:1a:cb:c9:30:9a:73:b2:
         83:74:39:e9:26:d2:38:46:ae:53:24:50:25:1a:5c:04:3a:6a:
         ca:63:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----