Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/67e73d4240466aca11e6ac593d80a325a49e3ec2.roa
File:                     67e73d4240466aca11e6ac593d80a325a49e3ec2.roa (raw, json)
Hash identifier:          NMuYaS6vWvLFxT4ucvDW62lbBTtwGw/Ylvw4sfRGlH4=
Subject key identifier:   42:31:2B:A7:66:98:18:9D:6A:A0:53:77:AC:C0:51:94:95:40:63:60
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A1831
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/67e73d4240466aca11e6ac593d80a325a49e3ec2.roa
Signing time:             Wed 24 Mar 2021 14:43:19 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661553 (0xa1831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=67e73d4240466aca11e6ac593d80a325a49e3ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cf:06:ec:d0:3e:49:b1:6d:f4:08:7a:2f:9e:
                    30:ec:da:b2:20:15:eb:bb:fe:d9:27:e9:1c:19:76:
                    f5:13:50:c0:26:ab:9b:df:f7:a2:5e:12:b3:6e:7e:
                    e4:e5:54:40:54:7c:10:d6:6d:25:1f:49:6f:e5:de:
                    83:f9:cc:87:bc:4e:6f:e4:5b:81:56:5d:76:c4:21:
                    01:a4:59:aa:4f:ab:ea:f9:0b:3c:65:17:e7:f0:cd:
                    b2:98:9d:75:e1:c8:f3:88:ab:4a:3f:09:5f:b1:aa:
                    7f:5a:69:22:be:91:10:3d:ba:00:4a:5f:f1:a9:2f:
                    bd:63:2f:48:56:d3:c4:7a:11:31:52:c2:aa:c8:ed:
                    d4:c8:29:3f:01:6d:7b:15:f4:64:b2:69:15:0f:8d:
                    62:71:26:17:8d:ec:09:b3:ea:e1:b8:3f:5f:82:17:
                    2f:84:66:70:e3:78:d7:c3:0a:4d:d9:69:49:6b:41:
                    da:04:a5:4b:44:64:bd:f1:af:6e:a0:2b:ad:c9:97:
                    ca:b0:e1:d6:48:77:d6:9e:4f:83:dd:9b:fa:b9:e0:
                    5f:6d:21:b3:6e:3d:a2:52:d1:09:bf:eb:77:c5:22:
                    83:91:2f:8c:d4:d2:a1:61:4f:99:54:8b:d9:21:70:
                    83:2d:42:a9:c1:3d:83:c3:d1:d3:90:6d:c9:96:bd:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:31:2B:A7:66:98:18:9D:6A:A0:53:77:AC:C0:51:94:95:40:63:60
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/67e73d4240466aca11e6ac593d80a325a49e3ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:ce:79:f7:bb:20:74:26:4d:ea:43:58:5c:89:25:f0:aa:bc:
         a0:3d:07:a8:a6:b5:bd:3e:12:e1:9f:72:95:f0:bc:31:31:43:
         1a:bf:c0:a4:b0:1c:6d:cb:c8:1e:af:e2:3b:8b:ec:e8:e5:04:
         2e:43:d7:27:cd:a4:2d:7d:3b:4d:96:5f:cf:52:9a:9b:60:f4:
         24:e5:d5:ee:8a:a7:27:a9:58:fd:d2:92:0f:b8:03:a2:2c:a0:
         8b:f4:61:b7:4e:6b:d9:58:c7:78:ef:11:7f:cb:c6:09:11:57:
         80:38:e4:e8:50:93:5b:61:09:dd:06:bf:6a:93:47:9a:b5:55:
         1e:ed:9f:58:d1:37:44:38:2b:cc:b5:d1:66:11:87:f8:1a:4c:
         0f:b0:93:b3:e7:f5:11:f4:ec:a5:63:42:d1:09:80:98:32:ad:
         98:0b:fc:24:55:34:5f:04:c4:55:19:4a:ff:eb:48:c2:0d:35:
         d0:b8:a0:0c:a4:d0:91:ef:c4:d5:fa:bc:46:0d:d8:28:af:36:
         aa:e9:d3:4e:e7:db:36:38:a0:db:80:6f:61:69:03:da:e1:78:
         7a:f8:f9:ae:2d:fd:f2:ec:45:69:dc:9c:4a:d5:0b:54:1c:7c:
         26:00:f8:45:77:71:68:90:c7:59:8c:93:27:81:4e:55:91:1d:
         57:44:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----