Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/339f0fbf2380c13b25f978fa3d20bbb3eac3167d.roa
File:                     339f0fbf2380c13b25f978fa3d20bbb3eac3167d.roa (raw, json)
Hash identifier:          rX5FZNkXk4Ko7f9nZiMNY5RcZzq5R/GczpdHr0apxgc=
Subject key identifier:   1C:5D:B7:68:2A:7C:8C:7D:87:22:7B:32:B6:E6:09:16:17:F7:03:63
Certificate issuer:       /CN=42b02bf99b87736ae95e822677591902bbb82724
Certificate serial:       0EAAF7
Authority key identifier: AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/339f0fbf2380c13b25f978fa3d20bbb3eac3167d.roa
Signing time:             Wed 26 May 2021 22:36:47 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266844
IP address blocks:        2803:dca0::/32 maxlen: 96

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961271 (0xeaaf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b02bf99b87736ae95e822677591902bbb82724
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=339f0fbf2380c13b25f978fa3d20bbb3eac3167d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:ed:5f:16:7f:5b:ec:f7:7e:65:5d:62:c4:
                    3e:cb:13:23:bc:d4:27:de:67:a2:0f:d4:82:c8:27:
                    a9:73:a1:29:b0:d3:0b:26:76:5a:53:bc:0b:94:4f:
                    05:12:2b:ce:3a:b0:64:40:59:96:a0:8a:97:73:87:
                    31:23:b0:e1:96:5b:34:a0:28:c7:64:ab:ff:56:13:
                    25:5f:ad:e0:6e:9f:ad:12:1a:6e:d4:4f:fe:6c:3b:
                    2f:56:95:22:21:d8:2e:43:a5:43:91:32:44:c6:46:
                    fc:22:61:ff:54:3a:61:7e:ca:10:0b:b0:28:68:fd:
                    f0:88:38:6e:34:28:3c:6d:7f:14:52:82:27:12:a9:
                    17:b1:57:b0:fc:80:bc:ee:4e:db:ba:65:56:41:22:
                    f3:1c:0e:25:10:25:c7:76:40:d9:3c:a7:a2:03:d3:
                    49:ba:ed:ff:23:6c:79:ad:31:82:7c:7d:b3:03:aa:
                    d4:43:98:3b:5c:08:52:ff:24:2e:b6:7e:4a:d6:79:
                    ff:35:41:ed:70:ca:9d:fb:38:aa:77:31:6b:a1:55:
                    4c:e6:e5:99:95:2a:03:48:cf:93:dc:d1:1b:6d:f1:
                    68:27:92:99:75:67:2f:37:be:a3:31:2d:94:5a:83:
                    09:a9:47:7f:f1:3c:82:a9:a5:1e:f2:20:e7:59:6a:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5D:B7:68:2A:7C:8C:7D:87:22:7B:32:B6:E6:09:16:17:F7:03:63
            X509v3 Authority Key Identifier:
                keyid:AC:67:68:30:B3:A6:85:85:44:6D:88:27:41:E3:04:B8:71:48:66:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b02bf99b87736ae95e822677591902bbb82724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/339f0fbf2380c13b25f978fa3d20bbb3eac3167d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a30fe822-3ce4-4e70-b17c-8bec66c1ba27/42b02bf99b87736ae95e822677591902bbb82724.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:26:7e:ae:ff:66:7f:2d:6b:b0:72:d4:1c:32:f8:c5:84:
         b1:5c:4c:8c:54:dc:5e:c4:02:31:68:c0:1d:d5:81:8c:15:d0:
         8a:be:49:39:68:df:98:64:4e:48:8b:ac:19:44:4c:47:a4:3b:
         f8:7e:22:6f:f5:85:65:9c:ca:17:70:17:c0:a9:00:8c:f7:7d:
         d2:3e:fb:67:d1:ef:7f:ed:77:a3:d2:23:c1:d3:5f:c0:c3:ed:
         f3:63:47:dd:a9:f8:14:c6:72:8b:ca:f0:46:22:06:09:af:bb:
         31:e4:bc:b5:a9:1d:36:72:2d:f3:ac:f9:6a:6e:68:a2:17:f1:
         cf:9a:7b:ea:1f:3a:1b:9e:87:73:ab:94:cb:ea:16:44:a7:63:
         8c:c2:21:54:00:04:6f:1c:2b:f2:cb:3c:fc:bc:75:22:b7:df:
         f0:db:72:e9:98:46:39:fd:04:90:51:95:6a:5d:fd:57:7e:e4:
         38:04:fb:fd:8d:70:bd:ee:f1:87:ed:3b:e2:9f:ba:28:72:c4:
         38:c2:6d:e3:ab:db:13:16:53:14:4d:10:f3:ca:d2:ae:2d:fb:
         63:3d:6b:fc:02:4c:3b:8b:ad:39:3d:cf:36:06:50:ef:f1:3b:
         47:b9:17:37:c1:4d:52:fd:fa:94:2b:e9:d2:fc:bc:72:85:6a:
         e7:f3:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----