Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/95dc364f252e8a553735c8e996be4ef26e754f35.roa
File:                     95dc364f252e8a553735c8e996be4ef26e754f35.roa (raw, json)
Hash identifier:          rPsgHWHRgGlPNSS4gdc6HGG/lyudZGwl+BqNeylRC4s=
Subject key identifier:   7B:B4:36:AF:A1:DC:15:F7:85:64:35:A2:9C:E7:80:1C:33:26:18:BB
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A25F6
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/95dc364f252e8a553735c8e996be4ef26e754f35.roa
Signing time:             Wed 24 Mar 2021 14:43:20 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665078 (0xa25f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=95dc364f252e8a553735c8e996be4ef26e754f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:9b:d1:bb:5e:c4:2e:be:1a:0d:51:4a:1d:
                    9b:9f:95:ac:23:24:f2:78:94:8b:42:79:49:25:02:
                    81:da:dd:20:75:1e:a0:39:c8:a0:4f:6d:cb:85:72:
                    c4:e6:b8:76:8c:08:69:03:ea:06:ac:71:b1:fb:9f:
                    18:ef:61:1b:6e:29:5a:55:c7:5b:36:3f:f2:ef:67:
                    b6:6d:f5:c7:3c:c9:d9:db:4b:d4:4e:df:cf:dc:30:
                    d7:92:53:e6:fd:c3:2e:d4:b9:79:3d:5e:2d:ae:68:
                    23:ac:0f:1c:1b:91:16:27:c7:13:fe:0c:7c:7a:6d:
                    d2:52:ed:8d:32:54:56:aa:d9:bf:0a:4a:98:f8:7a:
                    90:a6:d2:47:b1:3b:27:02:d6:ee:0e:10:5e:e9:c6:
                    1d:38:2e:64:03:64:39:d2:5e:fc:42:96:c3:39:bc:
                    6c:01:f9:f5:a8:0e:8a:1e:ba:36:52:ae:ee:8d:fe:
                    f4:53:33:46:5d:d8:1c:47:fe:fd:88:d0:a0:7f:45:
                    63:c7:59:d8:e5:21:72:e0:48:38:97:06:a0:89:6c:
                    36:72:54:47:f2:30:56:61:28:f8:1c:82:e6:86:fa:
                    76:97:f3:30:98:e7:7d:64:8c:5d:55:7d:54:37:ff:
                    50:16:43:84:a0:40:fd:36:f7:d7:9d:35:52:59:71:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B4:36:AF:A1:DC:15:F7:85:64:35:A2:9C:E7:80:1C:33:26:18:BB
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/95dc364f252e8a553735c8e996be4ef26e754f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:24:d4:d1:e2:47:99:2b:91:51:21:a6:ba:ec:c9:26:be:
         fa:7f:54:9e:48:c0:e3:78:f3:ec:a0:a8:8a:e5:9c:f3:d8:f1:
         2e:bd:91:f9:c8:0e:f3:32:63:49:a7:92:df:b9:b4:d9:39:e1:
         8c:e6:a4:fb:99:db:8e:45:77:f9:7e:2b:49:d7:d8:c6:57:20:
         74:66:e2:43:27:27:db:aa:7b:ee:ce:9b:71:a9:11:e8:d6:53:
         00:0d:98:82:72:f4:e8:5a:7c:75:fd:3d:e8:f2:d7:f7:aa:44:
         51:b8:42:37:72:90:67:50:05:44:ab:ec:fc:42:db:71:ac:e0:
         ad:20:ca:7a:80:9d:ed:ce:b7:22:f1:0f:fb:03:2f:8d:e5:4e:
         ae:71:81:7e:62:2c:02:1d:70:53:8b:5d:c4:a7:43:9d:c3:21:
         35:d0:4d:09:6a:78:cb:a2:a7:91:76:5d:6f:47:01:f3:50:1c:
         4d:36:9f:07:dc:09:20:66:8b:9f:94:84:a8:01:0b:74:2d:97:
         4f:59:ab:de:9f:67:fd:71:ab:6e:e1:d5:97:33:a4:fb:1b:95:
         ab:25:93:1e:8b:b5:e6:1d:4b:d7:72:d1:37:a8:b7:f0:fa:62:
         20:9f:13:31:96:a9:c1:6d:7a:ad:b3:27:05:ba:cb:25:85:6d:
         3a:a2:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----