Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/7dda0c48a25158170f4b256ded33ec5d7c97076a.roa
File:                     7dda0c48a25158170f4b256ded33ec5d7c97076a.roa (raw, json)
Hash identifier:          lLzwO5OeLMq++AOL4x/F7U6oU0y1WAgQfAaPtfFG31E=
Subject key identifier:   5C:08:0D:79:F8:91:CF:82:2B:5C:DB:56:67:63:D2:37:20:1D:DA:6B
Certificate issuer:       /CN=23805813b8db816d15bdbeeb6cf82b37f383e99a
Certificate serial:       0D897E
Authority key identifier: 9C:9C:38:E1:70:C0:8D:C8:0F:0D:99:DA:D6:A1:95:19:8E:21:76:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23805813b8db816d15bdbeeb6cf82b37f383e99a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/7dda0c48a25158170f4b256ded33ec5d7c97076a.roa
Signing time:             Wed 24 Mar 2021 14:30:30 +0000
ROA not before:           Wed 24 Mar 2021 14:30:30 +0000
ROA not after:            Tue 24 Mar 2026 14:30:30 +0000
asID:                     265719
IP address blocks:        2803:dc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887166 (0xd897e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23805813b8db816d15bdbeeb6cf82b37f383e99a
        Validity
            Not Before: Mar 24 14:30:30 2021 GMT
            Not After : Mar 24 14:30:30 2026 GMT
        Subject: CN=7dda0c48a25158170f4b256ded33ec5d7c97076a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:80:68:e4:53:b6:88:79:8e:94:3b:f6:02:
                    6c:af:78:bf:6e:e7:7a:a9:ac:ce:48:72:af:0d:8d:
                    ec:14:39:07:94:2c:84:3c:cc:6d:f2:31:c0:cd:63:
                    54:99:02:2c:d6:0a:0f:a6:a6:b2:3c:ec:e4:46:f5:
                    81:6e:ba:06:cd:6c:94:3d:d3:21:08:8c:42:01:b1:
                    29:45:bd:ae:87:66:f5:d5:14:db:93:88:37:87:c8:
                    f4:c4:d9:4d:0f:56:2b:0b:5b:b5:59:da:e3:03:a4:
                    81:22:0d:5f:91:8b:e8:45:dd:ff:72:15:56:82:7a:
                    43:cb:82:18:ed:f2:c0:34:aa:6c:cf:cd:1a:13:2f:
                    64:45:7a:02:2e:bd:ac:66:62:d1:7d:6a:bb:f0:99:
                    2e:17:a4:67:3c:5d:41:5e:fa:8f:57:ea:a6:da:80:
                    2d:de:1c:5a:8f:57:59:1a:26:af:1b:c1:61:72:fb:
                    76:bd:ca:7e:d8:58:6c:3e:9c:13:d6:68:bf:39:80:
                    21:b2:a1:42:6e:7d:75:bf:7b:49:cf:6c:e1:04:a3:
                    00:8d:3b:3d:6c:04:92:61:58:30:db:85:65:b7:98:
                    92:a5:c0:ea:12:b5:08:ff:a6:62:0b:91:8d:73:cc:
                    e5:62:91:15:6a:99:b7:30:bf:55:0a:e8:b1:b5:89:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:08:0D:79:F8:91:CF:82:2B:5C:DB:56:67:63:D2:37:20:1D:DA:6B
            X509v3 Authority Key Identifier:
                keyid:9C:9C:38:E1:70:C0:8D:C8:0F:0D:99:DA:D6:A1:95:19:8E:21:76:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23805813b8db816d15bdbeeb6cf82b37f383e99a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/7dda0c48a25158170f4b256ded33ec5d7c97076a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/23805813b8db816d15bdbeeb6cf82b37f383e99a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:5d:02:3f:40:0f:14:7f:e3:bd:37:f5:3b:f7:58:ee:ad:42:
         3e:29:91:6b:cb:e6:c3:ba:2b:43:34:3f:77:fe:c0:3a:c6:16:
         ec:4d:72:cb:17:93:6b:be:f3:9f:dc:1a:09:c2:a2:ff:c2:7f:
         c6:c6:68:62:a8:71:c2:63:55:fc:ec:c5:ef:8c:eb:de:d8:b2:
         ee:04:90:7b:53:fc:81:dd:61:26:62:3b:9e:c6:46:95:2f:cd:
         ad:59:4b:4f:2b:02:ef:ab:a3:a6:e9:43:54:03:cb:ff:be:95:
         f7:5f:34:25:33:e0:e9:f3:02:62:33:83:4f:f0:5d:c4:60:02:
         c1:2c:b1:d6:63:cc:ae:82:63:e3:6f:fb:80:d5:9c:99:da:5d:
         ef:fb:21:70:1a:6b:de:a4:b3:9e:e8:21:61:87:b7:04:35:a9:
         50:16:b9:7b:fb:27:b2:77:74:58:5b:fe:23:91:52:e1:69:79:
         ad:77:9a:b6:f6:fe:5a:16:88:f1:77:ca:b4:a5:11:a6:57:7b:
         05:e0:7d:a0:31:ac:b6:76:ac:8c:ef:c4:4d:5f:e7:23:ae:76:
         84:74:34:d0:ca:92:1d:16:3f:66:71:79:a5:31:04:6f:84:a1:
         49:26:b3:38:0a:67:89:eb:55:69:27:47:b4:06:47:c2:63:20:
         aa:ac:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----