Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/2557bcae2a0893afdbcceefe3a9472b5922fefa2.roa
File:                     2557bcae2a0893afdbcceefe3a9472b5922fefa2.roa (raw, json)
Hash identifier:          ZfZa8H0wkqnqWyGoCmuxDJGglvSRJLf8FOV0GHUqd8E=
Subject key identifier:   BC:60:E8:F5:64:C2:F2:CA:45:26:03:4D:5B:48:57:F8:2F:D7:37:CD
Certificate issuer:       /CN=12ace2bda69512c114fc039cc4dccc6cd0e96af1
Certificate serial:       0CE02B
Authority key identifier: C9:A4:9B:BB:A6:78:7A:0A:F3:72:11:4F:01:6A:7A:DF:9B:86:0C:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12ace2bda69512c114fc039cc4dccc6cd0e96af1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/2557bcae2a0893afdbcceefe3a9472b5922fefa2.roa
Signing time:             Wed 24 Mar 2021 14:33:55 +0000
ROA not before:           Wed 24 Mar 2021 14:33:55 +0000
ROA not after:            Tue 24 Mar 2026 14:33:55 +0000
asID:                     263702
IP address blocks:        2803:a20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843819 (0xce02b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ace2bda69512c114fc039cc4dccc6cd0e96af1
        Validity
            Not Before: Mar 24 14:33:55 2021 GMT
            Not After : Mar 24 14:33:55 2026 GMT
        Subject: CN=2557bcae2a0893afdbcceefe3a9472b5922fefa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:0b:53:d0:0e:fd:da:c3:1d:f6:8c:03:03:
                    d0:b9:6f:b3:f3:07:bb:9d:d7:4d:68:69:68:3f:32:
                    e6:0a:7f:ea:e4:35:21:2b:ec:78:cf:95:ab:f9:cb:
                    99:65:a4:1b:7d:fd:8c:ba:e0:ab:96:f4:9b:94:c7:
                    45:65:77:6c:fd:50:d3:5f:c6:02:1e:31:83:bd:73:
                    7c:01:77:4e:7c:8a:1c:68:88:9e:40:e4:75:58:ec:
                    21:23:0d:7c:a6:ac:8d:3e:59:09:41:9b:3c:aa:09:
                    74:f8:48:a8:9b:b6:70:45:43:14:84:8c:cc:db:3e:
                    b7:3f:36:7d:17:ae:ce:09:21:ed:62:94:36:07:04:
                    63:7b:37:ca:5a:07:6d:8d:9d:93:35:e5:ff:71:59:
                    e1:22:a3:a7:d3:89:4e:91:e9:5c:04:4d:7b:ed:85:
                    84:5f:09:c8:63:0d:46:29:ff:ea:b8:25:47:0c:f2:
                    80:41:39:5a:12:ac:13:5b:28:34:81:0a:28:84:c7:
                    6e:52:5c:ab:10:b4:d4:3c:9c:32:4c:fa:e2:66:a1:
                    40:c9:3d:b3:24:d0:e1:18:62:a0:18:6c:2d:7c:02:
                    e4:b4:6c:52:81:a0:c1:6a:2c:27:c5:64:5f:17:d8:
                    58:4f:fb:c6:4b:89:af:7c:d2:b4:5e:69:73:6b:55:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:E8:F5:64:C2:F2:CA:45:26:03:4D:5B:48:57:F8:2F:D7:37:CD
            X509v3 Authority Key Identifier:
                keyid:C9:A4:9B:BB:A6:78:7A:0A:F3:72:11:4F:01:6A:7A:DF:9B:86:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12ace2bda69512c114fc039cc4dccc6cd0e96af1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/2557bcae2a0893afdbcceefe3a9472b5922fefa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/acf149ef-2fe9-4873-99f7-3db79fb7cabb/12ace2bda69512c114fc039cc4dccc6cd0e96af1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:65:ff:d5:dc:5e:34:d6:d0:d5:b2:cb:f8:d3:31:32:18:1f:
         59:dc:f8:d3:9b:1e:6f:f9:a8:80:ce:34:e1:b4:64:d1:d3:04:
         7a:18:37:09:4e:2e:1c:ed:e9:b6:74:3e:c8:f6:0d:66:3d:4b:
         bc:c4:35:16:28:e5:97:a4:20:3b:fe:00:6b:a9:9b:a8:2e:ea:
         70:70:df:72:35:51:8a:69:0d:bb:3b:3d:d9:12:87:a7:15:01:
         0b:35:cc:d6:ae:28:21:5f:e8:dc:4a:ec:30:65:94:2a:62:86:
         2e:89:eb:97:63:c6:e4:21:75:a8:3a:32:6e:9b:c8:d4:df:d3:
         1a:4a:82:28:f0:5b:b1:e9:05:1c:f7:99:8c:0e:c5:3e:79:41:
         8b:54:2a:6d:8a:22:eb:df:f5:0f:9a:07:b0:28:c4:bb:bb:96:
         e9:2c:b2:e7:a1:9d:2e:8a:2d:d8:cd:aa:27:07:ac:af:47:bb:
         5b:5c:20:89:8f:af:13:c2:e5:2b:24:03:46:9b:4b:a0:91:60:
         ee:26:df:99:52:23:97:6d:28:b8:d3:16:4f:78:74:0b:76:73:
         9d:70:95:cd:66:f9:14:dc:50:a4:1b:5e:94:08:99:4b:7b:b9:
         a3:a8:63:2f:a6:43:ed:50:88:44:a8:32:94:fd:f4:c1:e4:fb:
         6a:c5:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----