Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/cdaf026334b9124ff764a380f9c4a7c0be85b0de.roa
File:                     cdaf026334b9124ff764a380f9c4a7c0be85b0de.roa (raw, json)
Hash identifier:          Kq6Sv/cJLR5jHikZPQ/ZOLB7Ls9wMyjRgykhGskiuQ8=
Subject key identifier:   76:AD:6D:E9:AC:D7:FA:A3:9D:79:62:A2:D6:3C:B3:87:50:9E:C6:5B
Certificate issuer:       /CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
Certificate serial:       0D9FDD
Authority key identifier: 8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/cdaf026334b9124ff764a380f9c4a7c0be85b0de.roa
Signing time:             Wed 24 Mar 2021 14:30:48 +0000
ROA not before:           Wed 24 Mar 2021 14:30:48 +0000
ROA not after:            Tue 24 Mar 2026 14:30:48 +0000
asID:                     263770
IP address blocks:        2803:3840::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892893 (0xd9fdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2530e9633e4c0fd319edd31c24cbda0c0b19490c
        Validity
            Not Before: Mar 24 14:30:48 2021 GMT
            Not After : Mar 24 14:30:48 2026 GMT
        Subject: CN=cdaf026334b9124ff764a380f9c4a7c0be85b0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:d6:84:d3:6d:49:e4:6c:9f:4f:21:35:e8:
                    a1:38:1c:1c:4a:1b:2a:f3:e0:d6:91:21:85:c2:8f:
                    0e:29:23:c6:27:60:80:dd:79:11:32:ea:0c:99:57:
                    8b:64:af:96:3c:4f:91:50:cc:15:5c:4f:ad:09:47:
                    5c:34:99:d7:77:19:89:f8:a6:b0:c3:20:64:32:f4:
                    80:07:81:e7:7b:e1:aa:04:7a:8a:92:b5:20:cf:c8:
                    b9:2d:30:d9:e0:58:ae:b2:a6:05:7a:51:f7:6b:20:
                    dd:b6:7a:6a:3b:9f:21:f1:5f:e9:64:18:ab:93:e5:
                    de:68:f5:9c:a1:24:a2:6b:0d:02:3d:7b:e2:e3:87:
                    cf:b4:df:a6:f2:ad:13:4a:90:12:96:8f:6d:c3:b2:
                    11:25:ac:ad:47:dd:b1:6e:37:13:f9:a9:40:f2:5b:
                    b7:8e:52:7f:87:e5:06:be:5b:d7:82:d6:5a:fc:1d:
                    94:36:e6:44:a9:5d:12:2f:10:c2:71:90:5d:c0:66:
                    cc:2d:c4:e1:4b:27:e7:fd:73:1c:be:78:55:ef:0d:
                    72:04:80:74:b4:9d:1b:95:d9:8c:8c:95:1b:ca:a1:
                    e0:fe:56:9c:2d:4a:12:08:1a:3f:6e:25:2d:2d:97:
                    ec:ce:df:00:f4:45:d0:cd:f6:5c:46:e3:08:81:b1:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AD:6D:E9:AC:D7:FA:A3:9D:79:62:A2:D6:3C:B3:87:50:9E:C6:5B
            X509v3 Authority Key Identifier:
                keyid:8F:74:5C:C7:98:D9:4E:C6:0E:5B:D2:9F:29:31:41:D9:84:27:A4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2530e9633e4c0fd319edd31c24cbda0c0b19490c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/cdaf026334b9124ff764a380f9c4a7c0be85b0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2dff5f5-998f-4878-a7b2-4002a90d55b7/2530e9633e4c0fd319edd31c24cbda0c0b19490c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3840::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:84:ac:64:13:a8:6d:59:88:30:d0:df:d7:45:0a:db:dc:
         95:6a:01:ff:e7:f5:ec:b6:76:24:81:4d:9f:47:cd:5d:af:e2:
         93:4a:40:3f:e6:bb:c1:cd:0b:01:ae:6a:b0:75:1f:c1:b2:6a:
         98:e5:de:3a:ee:b3:4c:a6:8a:af:88:32:59:c6:55:f8:6e:af:
         58:d5:fe:72:33:de:87:1e:e6:61:30:51:b5:a5:db:38:2f:13:
         1c:77:4e:7c:62:06:7c:f0:f1:79:55:9e:98:33:20:65:60:fe:
         f8:1a:ec:99:42:66:f6:9e:01:57:46:21:e4:1c:db:af:25:49:
         a9:bf:29:a3:42:44:0c:6d:96:9d:24:e9:a2:f5:7a:9d:51:96:
         e2:a7:5a:4c:59:33:a2:d1:89:3d:f7:45:25:44:0b:3b:37:8d:
         8a:66:82:6b:8b:33:71:c2:53:22:a4:54:c8:00:97:0b:2e:07:
         f9:04:31:7b:09:78:af:05:d1:ab:61:1d:0b:af:d6:e3:a7:cb:
         a0:7b:01:c9:95:a1:1b:31:ae:06:7a:dc:ed:56:a2:de:66:88:
         ed:65:36:85:04:21:a1:cc:d9:59:32:55:3f:8d:26:c3:45:21:
         6b:d9:fa:b7:a6:89:9b:57:ea:4c:c8:0f:b3:1f:3e:b9:8e:68:
         fd:f9:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----