Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/4c3df10e542f01610781c8b9a4adb3f3afeefbde.roa
File:                     4c3df10e542f01610781c8b9a4adb3f3afeefbde.roa (raw, json)
Hash identifier:          edilaAhdM5A/8T5JkTmXKwE5A+tvq2JeQ1QVYeUUP6c=
Subject key identifier:   0A:CC:B2:40:96:75:29:87:A9:CE:31:96:22:6A:B1:B5:F0:23:5E:C1
Certificate issuer:       /CN=070040b1836f3353fb7f260224621c2deb277eb0
Certificate serial:       0D4CAC
Authority key identifier: 23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/070040b1836f3353fb7f260224621c2deb277eb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/4c3df10e542f01610781c8b9a4adb3f3afeefbde.roa
Signing time:             Wed 24 Mar 2021 14:41:04 +0000
ROA not before:           Wed 24 Mar 2021 14:41:03 +0000
ROA not after:            Tue 24 Mar 2026 14:41:03 +0000
asID:                     266672
IP address blocks:        2803:3c20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871596 (0xd4cac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070040b1836f3353fb7f260224621c2deb277eb0
        Validity
            Not Before: Mar 24 14:41:03 2021 GMT
            Not After : Mar 24 14:41:03 2026 GMT
        Subject: CN=4c3df10e542f01610781c8b9a4adb3f3afeefbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:0b:ea:db:56:1f:a7:d7:9b:ae:61:d7:b1:
                    2f:3e:db:1a:d7:1a:7c:49:12:a7:5a:5d:72:23:e1:
                    2f:a7:7f:05:57:f6:6d:82:34:53:d5:c7:13:d3:78:
                    41:16:4a:85:1a:cc:e7:3e:ee:1a:01:84:7e:93:33:
                    81:b6:62:ff:e3:75:8f:8e:16:ff:58:ed:d2:38:65:
                    53:f3:d9:45:0f:4a:eb:3c:4f:56:9b:ef:e7:f0:a4:
                    23:dd:3d:07:82:d0:13:98:e3:83:38:4f:bc:c0:ec:
                    82:cf:ee:88:32:d2:bd:0c:c1:f1:4c:2b:56:37:7c:
                    37:bc:3f:fa:f1:40:22:40:9c:07:c4:41:95:37:a2:
                    7d:b0:be:bd:e5:06:36:70:63:20:4c:19:b2:db:fe:
                    88:2a:f3:25:58:55:50:3d:4b:8b:c6:a7:69:1f:7b:
                    1b:f1:b8:69:d1:f0:a1:20:50:e4:1c:a2:b4:12:35:
                    0d:c0:fd:a5:5f:13:37:ac:09:86:a2:2f:89:45:45:
                    59:e5:ea:a4:4c:10:7a:69:07:c5:93:60:7d:f5:d7:
                    5b:fd:b5:35:30:6d:44:57:a5:79:da:3a:19:1f:a7:
                    d2:f8:f1:03:93:8b:97:a7:82:56:30:4e:02:dc:bf:
                    45:72:a6:c3:a1:57:a8:c2:1a:8a:9a:9f:18:8c:99:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CC:B2:40:96:75:29:87:A9:CE:31:96:22:6A:B1:B5:F0:23:5E:C1
            X509v3 Authority Key Identifier:
                keyid:23:E6:05:E2:3D:F4:55:5F:73:A1:0B:39:29:C0:39:07:F2:BF:4C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/070040b1836f3353fb7f260224621c2deb277eb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/4c3df10e542f01610781c8b9a4adb3f3afeefbde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae12de46-4e62-4511-b77a-dfdacd833658/070040b1836f3353fb7f260224621c2deb277eb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:55:e5:dd:87:cd:b4:c2:cd:1a:c5:11:14:e3:90:5a:de:c3:
         80:53:ec:08:aa:bf:7e:14:db:7e:02:04:a6:2a:ee:de:5a:ce:
         fe:03:c0:f2:fd:90:57:85:19:f2:3e:d5:a2:a3:79:f7:e3:d4:
         dd:c3:29:ce:b2:0e:73:7e:ab:fa:c5:17:9b:32:fc:05:1f:65:
         57:b7:5a:9d:c3:3b:9a:8a:45:28:67:fc:b7:b9:4d:52:22:6d:
         4f:3f:5f:06:23:65:e9:18:f9:85:45:11:0c:26:cf:13:61:eb:
         99:75:78:e1:11:fe:e4:ca:9d:d4:6e:1a:54:ff:55:75:3a:b8:
         82:38:98:1a:b9:13:96:f4:4c:29:ad:e5:b8:00:ad:1f:dc:04:
         87:8e:bf:9b:cf:47:d0:56:8d:ee:31:7a:55:43:02:b9:1f:f7:
         32:fa:a5:fd:a1:01:49:a5:2d:ec:fa:a5:92:4b:f6:21:80:25:
         bd:f9:8d:79:a0:5b:ce:fd:49:2f:3f:f2:95:24:db:2c:48:7a:
         a8:c3:e4:e6:e2:4c:01:2a:fb:0c:c7:65:af:bc:4c:4f:f6:65:
         94:c7:cd:53:db:8b:02:29:f9:0a:27:d8:f4:82:4d:b3:8a:ac:
         dd:b6:42:ae:21:56:c7:d1:df:44:a6:71:5e:a4:97:5c:cd:3a:
         91:6d:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----