Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/7ca93900bb5b88e0095bfc4b41ecf6b89e8815c4.roa
File:                     7ca93900bb5b88e0095bfc4b41ecf6b89e8815c4.roa (raw, json)
Hash identifier:          5lGbBJK/t+iCXgGq3bsNvJ6YbAyYrZE5PpVSRBvEcGw=
Subject key identifier:   31:B3:0F:79:71:C0:48:22:2D:CB:24:60:67:2C:FA:26:51:B1:DB:CD
Certificate issuer:       /CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
Certificate serial:       0D02AC
Authority key identifier: 5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/7ca93900bb5b88e0095bfc4b41ecf6b89e8815c4.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:15 +0000
ROA not after:            Tue 24 Mar 2026 14:45:15 +0000
asID:                     267784
IP address blocks:        2803:5120:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852652 (0xd02ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
        Validity
            Not Before: Mar 24 14:45:15 2021 GMT
            Not After : Mar 24 14:45:15 2026 GMT
        Subject: CN=7ca93900bb5b88e0095bfc4b41ecf6b89e8815c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:e6:ee:00:cb:17:9c:a7:f8:98:cd:bc:f9:
                    d7:5c:8c:1f:63:a7:1a:e3:a0:40:a5:99:de:ba:04:
                    1f:bf:e1:25:99:55:bc:6c:6c:32:27:44:58:de:89:
                    0d:20:97:18:ef:97:d2:f6:8c:89:0f:01:cf:52:a4:
                    cd:44:a4:75:9a:f6:06:85:52:1c:fd:7d:2f:c4:0f:
                    25:6f:2f:68:5a:f7:65:95:04:c2:d6:c5:70:7c:9a:
                    e3:9a:0b:7e:27:91:6d:0e:0e:94:dc:79:c0:17:35:
                    c5:91:e1:28:14:76:86:9c:b8:4f:4a:28:98:a7:49:
                    fa:46:7d:99:5e:6a:00:3f:bf:39:37:e4:49:0d:27:
                    a3:d0:d5:36:1d:60:fe:65:62:cb:df:f1:6e:15:40:
                    0f:f3:6d:a9:7c:6a:98:c7:98:b6:e0:50:99:05:7d:
                    c8:30:59:dc:be:d6:3e:f2:26:3e:a1:2d:3a:97:97:
                    08:b5:0a:ac:a5:98:cf:06:e8:07:3a:d7:41:db:31:
                    28:ad:49:88:91:e3:87:f5:bb:61:81:29:d0:5f:20:
                    42:71:22:76:a6:e2:ff:cf:ba:b0:9c:b7:9a:70:66:
                    5c:98:a6:fd:aa:a4:7c:44:d1:18:70:a2:65:84:21:
                    a2:a0:d8:12:b1:86:39:24:93:6d:a6:9e:a6:d8:86:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B3:0F:79:71:C0:48:22:2D:CB:24:60:67:2C:FA:26:51:B1:DB:CD
            X509v3 Authority Key Identifier:
                keyid:5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/7ca93900bb5b88e0095bfc4b41ecf6b89e8815c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5120:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:21:11:e7:f2:74:f4:2d:36:e6:c8:7d:54:6a:e4:de:54:cd:
         cc:1a:2a:fa:41:91:07:83:81:35:d6:0a:85:cc:3e:5c:1d:ed:
         9a:38:5c:47:45:87:eb:a7:c4:ef:95:b4:f1:9a:e9:ca:86:17:
         b0:9f:16:46:86:89:82:19:f6:6d:dc:81:d6:d3:fa:a2:ca:de:
         b9:d4:77:1a:7c:4d:cc:e0:ea:ac:1a:99:0a:31:8f:1b:60:a1:
         cc:34:ec:dd:6a:df:1f:48:05:34:65:9c:8f:34:c2:5f:50:4a:
         ec:0b:28:49:f0:cb:6e:e7:bd:48:f9:31:57:83:b6:fb:4a:8b:
         12:95:20:b8:64:fb:ea:ca:50:7d:f6:9a:de:70:3f:a8:c9:6b:
         64:1d:71:d7:ec:00:55:dc:5e:44:46:84:08:6d:7e:44:8b:c8:
         98:ad:e7:fd:71:b3:c7:10:d2:37:5e:ae:ac:56:26:7b:5f:b6:
         fc:8a:0e:c6:ac:e9:64:59:65:fc:02:04:47:da:5c:63:d6:48:
         f9:ad:f7:31:c5:e4:01:3e:24:9e:fd:91:c9:50:c6:f4:36:7e:
         25:e0:cc:d0:a7:7a:4f:41:8c:68:30:3e:da:80:b1:2f:59:15:
         66:e3:09:ed:f3:2b:04:12:86:6f:f7:ba:a3:2a:18:08:b9:f9:
         2f:0c:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----