Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/0bf9c633f45b035d9721463232595eacbd8d27dc.roa
File:                     0bf9c633f45b035d9721463232595eacbd8d27dc.roa (raw, json)
Hash identifier:          V0yBS8Hx3Q2NKGU6G2GxkPy2sRwb46kCtdmoI+bt9Ao=
Subject key identifier:   D1:02:0B:AB:F4:87:80:06:F9:38:69:AF:4B:E4:D1:B9:FE:2E:5D:37
Certificate issuer:       /CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
Certificate serial:       0D0702
Authority key identifier: 04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/0bf9c633f45b035d9721463232595eacbd8d27dc.roa
Signing time:             Wed 24 Mar 2021 14:40:32 +0000
ROA not before:           Wed 24 Mar 2021 14:40:32 +0000
ROA not after:            Tue 24 Mar 2026 14:40:32 +0000
asID:                     264668
IP address blocks:        2803:9c20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853762 (0xd0702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
        Validity
            Not Before: Mar 24 14:40:32 2021 GMT
            Not After : Mar 24 14:40:32 2026 GMT
        Subject: CN=0bf9c633f45b035d9721463232595eacbd8d27dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:f6:c2:b7:21:3a:a0:39:50:75:a3:b7:63:
                    19:ff:be:34:f9:a8:8d:64:f3:a0:68:97:5e:13:19:
                    cf:49:81:ca:a7:1b:a7:1e:51:a4:c6:1d:9b:89:7a:
                    29:76:8a:7e:20:2e:95:1d:74:24:1b:c8:bd:46:77:
                    f2:81:0d:94:89:2d:d9:94:1b:9e:54:cc:6f:da:3f:
                    96:53:18:1d:7f:5a:76:d6:37:0b:f9:b5:ab:a5:59:
                    0f:43:b1:16:34:8b:89:0c:2f:82:32:3a:3b:a6:4e:
                    9f:94:47:80:6a:49:9f:c9:a4:e0:6b:fd:a9:b7:68:
                    f8:2c:ab:30:37:60:13:73:d1:5c:69:ae:1d:f1:f5:
                    a3:c6:6c:a2:55:10:8c:30:1b:df:a0:af:67:92:2d:
                    42:ae:c1:b0:e7:01:4c:23:5b:a2:a9:dd:83:88:c0:
                    ba:94:0b:fa:86:8d:a1:63:88:a2:cb:3a:13:fc:b6:
                    3c:2d:64:e1:3c:f3:85:48:c2:83:1c:7b:15:ef:f8:
                    80:f4:89:08:68:9f:6f:84:f6:e5:83:94:88:c3:7e:
                    75:56:fe:7e:79:cd:eb:43:00:16:c3:51:80:8e:13:
                    bd:13:61:9b:32:aa:ae:32:ed:7e:56:8b:ad:55:0e:
                    04:8f:e8:2d:5a:9d:24:85:99:3b:64:3c:f4:27:b9:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:0B:AB:F4:87:80:06:F9:38:69:AF:4B:E4:D1:B9:FE:2E:5D:37
            X509v3 Authority Key Identifier:
                keyid:04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/0bf9c633f45b035d9721463232595eacbd8d27dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:56:a6:70:bd:d4:cf:a0:a7:8c:13:0d:37:95:21:0b:65:e0:
         bc:00:28:53:ac:70:8b:c0:77:5a:bc:cc:eb:bd:89:d2:c2:49:
         d7:1b:ff:e2:10:d9:e5:1d:33:07:7f:54:50:10:9a:69:cd:37:
         f6:7c:f4:31:79:9f:aa:d5:bd:52:da:1e:cd:b8:7f:13:b1:9c:
         b1:d8:ce:36:c7:de:e1:95:33:6e:fa:6c:b4:5c:e3:7f:9e:81:
         b1:0e:8f:ae:9a:5a:c6:73:53:1b:68:62:a5:8a:7e:0e:c7:64:
         a0:37:db:5c:ac:39:57:e7:d5:3b:60:8c:17:61:7f:a8:4f:86:
         b6:78:4f:0a:43:40:72:86:7c:70:1b:e4:d1:32:6f:97:fb:03:
         a1:86:c4:dd:3a:ec:36:44:4f:6f:71:97:af:ad:e6:3c:04:22:
         43:d5:d3:30:41:15:52:96:0c:99:79:d3:12:8a:1d:b2:65:cf:
         4b:8c:2d:39:4e:d5:19:f7:fd:05:fa:f8:8b:88:2c:83:0b:1a:
         33:51:d9:b1:8a:8a:df:37:63:20:2a:db:a5:13:dd:22:44:d6:
         65:04:ab:4a:4a:ae:36:05:17:0a:ef:55:49:c6:0b:32:46:57:
         0a:f7:07:6f:c1:fd:02:8b:de:7c:41:02:b6:3a:3d:e2:8c:c7:
         f3:f1:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----