Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a27444a20b8e1dde22d73a26eb9f17023cb20e8e.roa
File:                     a27444a20b8e1dde22d73a26eb9f17023cb20e8e.roa (raw, json)
Hash identifier:          Tx7EtPWhJNPtaAYL4em10ReFPQL/4kgQc+2PNRMSlC0=
Subject key identifier:   5E:26:3D:65:E0:B6:B8:ED:12:81:EC:64:CD:1A:BF:C6:8D:79:CF:19
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A2559
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a27444a20b8e1dde22d73a26eb9f17023cb20e8e.roa
Signing time:             Wed 24 Mar 2021 14:43:20 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664921 (0xa2559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=a27444a20b8e1dde22d73a26eb9f17023cb20e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:f0:23:ee:bc:a9:dd:b5:58:71:47:91:18:
                    52:54:e4:cf:d6:06:84:26:ad:33:05:99:be:b4:63:
                    d8:91:99:b8:84:b7:3a:13:8a:8a:52:61:c9:aa:94:
                    cb:0f:63:92:7a:d1:9d:22:3f:40:ea:75:ae:a4:f9:
                    b4:db:49:2f:84:80:5e:fd:40:2b:f3:22:f8:9e:c3:
                    bd:33:6f:a3:8e:51:52:32:c8:9b:f9:9e:8e:ae:3c:
                    75:e9:8f:3e:e7:6d:29:ed:58:35:2f:cf:cd:72:8e:
                    03:46:5b:49:09:fb:40:f8:14:84:f3:4b:bf:54:f6:
                    70:d6:01:2c:49:2d:cc:81:9d:9c:b3:ba:2d:18:a1:
                    ac:6e:43:b6:d5:49:ab:5b:3c:89:60:98:85:80:36:
                    e5:5c:b7:0a:42:e1:f5:3e:9c:f3:17:17:62:ff:10:
                    03:98:6e:0c:cf:74:1c:5d:32:ed:33:f0:2b:c4:1e:
                    96:4e:f3:86:5d:1e:b5:38:d0:45:26:33:06:16:43:
                    7a:d6:77:8b:c5:af:05:d6:74:7a:05:e8:e6:46:34:
                    28:ad:47:5e:e1:f8:4d:21:d6:1d:d7:5a:53:78:c0:
                    90:6f:da:1a:df:e2:49:e7:90:64:47:80:2a:e6:3e:
                    0a:56:c3:56:67:fe:8b:8a:00:88:4d:28:8c:3e:f0:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:3D:65:E0:B6:B8:ED:12:81:EC:64:CD:1A:BF:C6:8D:79:CF:19
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a27444a20b8e1dde22d73a26eb9f17023cb20e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:7e:29:46:48:f7:56:e2:98:f1:aa:5d:64:7a:7f:e2:9d:
         8b:b9:d6:9c:4b:2a:d4:a2:f4:8e:df:3f:e0:fa:57:2d:2c:f6:
         46:3d:5d:cf:9e:08:ea:bf:1d:fa:b3:a0:48:22:f8:f2:cf:b2:
         de:4a:4e:66:68:5f:81:02:1d:e0:ef:ed:d8:cf:9b:15:0f:f7:
         aa:77:6c:21:00:3e:ef:19:52:54:c4:b7:f0:a6:70:2a:4b:7f:
         d6:17:cc:06:f7:d7:59:fc:ee:8e:1c:69:4c:d5:c1:f0:57:e5:
         d4:7f:c4:f2:88:05:56:49:57:d3:33:d1:57:44:35:83:92:80:
         8c:c8:76:54:ff:fa:d2:96:17:0f:07:a7:51:9e:ba:a8:6f:dc:
         05:98:bf:3b:4c:fd:16:73:f4:a4:75:b3:cf:ff:8c:c1:7d:79:
         35:f0:b9:e4:29:df:17:4c:2f:21:6b:fe:b5:b8:6c:d9:51:19:
         51:9a:55:38:47:dd:c9:40:0b:ed:94:91:f1:9d:bb:22:22:38:
         8d:42:8b:16:2b:68:62:e0:2c:8e:b0:49:df:73:a2:1a:44:12:
         c9:c3:cd:42:22:3b:9b:d6:39:31:8a:db:8d:12:f7:7f:63:b3:
         e4:f5:8a:94:bf:80:76:c9:68:60:f5:f8:7c:26:7d:29:a4:ed:
         38:75:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----