Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/ddc804bbb8c789b7c9ce520b779626a63d602561.roa
File:                     ddc804bbb8c789b7c9ce520b779626a63d602561.roa (raw, json)
Hash identifier:          WyMfbIMunbFRseCriCSwNaRIIENYQdFepBBC2I8gwJY=
Subject key identifier:   11:B8:66:E6:18:C3:32:D0:18:8A:B4:F0:34:3C:56:32:A8:06:19:2F
Certificate issuer:       /CN=03f3fc842228425fd2a45f4711e8d7cf3259690c
Certificate serial:       18A5
Authority key identifier: 19:D5:F0:75:3C:0E:C8:72:0E:B7:D7:A1:74:19:7C:61:58:6E:29:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03f3fc842228425fd2a45f4711e8d7cf3259690c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/ddc804bbb8c789b7c9ce520b779626a63d602561.roa
Signing time:             Fri 06 Aug 2021 04:31:31 +0000
ROA not before:           Fri 06 Aug 2021 03:00:00 +0000
ROA not after:            Thu 06 Aug 2026 03:00:00 +0000
asID:                     264668
IP address blocks:        2803:c610::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6309 (0x18a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fc842228425fd2a45f4711e8d7cf3259690c
        Validity
            Not Before: Aug  6 03:00:00 2021 GMT
            Not After : Aug  6 03:00:00 2026 GMT
        Subject: CN=ddc804bbb8c789b7c9ce520b779626a63d602561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:ff:11:af:a8:50:09:53:87:48:fe:1d:c4:
                    6f:a0:60:e2:7b:5c:39:aa:66:47:b7:a3:c7:e2:58:
                    12:15:39:ac:fc:9b:c4:d3:61:d2:e4:41:ab:74:0e:
                    17:45:96:90:1e:2c:37:9f:9a:e1:de:19:96:64:a1:
                    bf:b4:23:f6:85:89:1d:d3:ff:39:eb:ce:cf:10:ef:
                    be:df:e0:d7:75:89:6c:47:79:4a:22:82:c2:ea:e2:
                    d5:db:3e:91:6a:af:a1:aa:3f:d0:0b:22:e5:fe:6d:
                    e2:b7:a3:88:39:56:b4:12:60:6d:98:48:e7:fd:61:
                    40:46:66:0f:36:fe:47:45:65:3b:93:f7:d6:c8:b8:
                    eb:98:fe:c4:ab:33:c8:5a:d1:6f:0d:7f:14:70:67:
                    e9:ab:7d:0f:62:e3:db:63:6d:2d:9c:f8:42:f5:1d:
                    09:9e:a1:51:da:09:31:3d:91:49:20:35:22:0d:f5:
                    af:b3:04:18:05:d7:27:f1:e9:e2:6a:ac:84:96:50:
                    e3:2c:95:29:83:24:28:90:0f:64:eb:ca:9a:a6:5b:
                    54:79:55:fb:f1:5d:48:91:6c:97:4b:60:4a:ad:a0:
                    b3:54:70:e7:4c:18:d2:71:e4:31:f1:56:e1:5e:73:
                    fc:f9:b8:3f:42:c7:9b:1d:a0:7b:c2:6f:a6:51:e6:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:66:E6:18:C3:32:D0:18:8A:B4:F0:34:3C:56:32:A8:06:19:2F
            X509v3 Authority Key Identifier:
                keyid:19:D5:F0:75:3C:0E:C8:72:0E:B7:D7:A1:74:19:7C:61:58:6E:29:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03f3fc842228425fd2a45f4711e8d7cf3259690c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/ddc804bbb8c789b7c9ce520b779626a63d602561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/03f3fc842228425fd2a45f4711e8d7cf3259690c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c610::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:1c:98:0a:10:5d:24:da:0f:d2:28:97:95:2b:0e:32:b2:aa:
         a4:ae:c1:bd:fe:13:9a:f5:ab:08:7e:fe:27:14:79:30:52:27:
         c0:42:05:d2:9d:21:dd:3d:9f:ec:3b:69:fb:b9:f3:1b:cc:ee:
         83:b2:a3:15:80:98:42:a2:94:b2:bd:d1:c2:49:4a:aa:e6:4e:
         e6:78:20:7d:74:c7:2f:c5:f3:33:a6:f4:ab:3e:56:1f:0e:dc:
         d7:fd:8e:c3:86:d9:b6:4d:22:0e:e1:4a:41:03:a2:17:00:3c:
         1a:23:b3:1a:98:5d:db:b6:c2:fc:13:df:13:e8:3f:11:aa:b4:
         bc:0a:2f:ab:27:1c:53:24:69:2c:cf:da:88:88:1b:51:5a:1e:
         07:2c:3b:d2:a1:e7:fd:e8:f8:31:83:3b:93:68:30:6f:b9:c1:
         51:03:7f:dc:bb:cf:aa:39:ec:8c:c5:c0:ea:b1:e5:e6:81:a0:
         4b:ab:2c:05:bf:8f:72:23:03:f3:d7:95:dc:0c:00:fd:55:e2:
         6b:e7:e4:40:a1:49:f2:62:48:17:7a:09:a5:41:83:08:c9:c4:
         e3:b3:6c:28:b6:60:08:3e:7c:fe:c1:53:f4:13:ce:bd:a2:57:
         a6:9a:ce:02:98:41:78:2b:76:8a:90:4a:5c:76:14:86:6d:1b:
         66:a3:1f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----