Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/c727cea1ee05ea749e52aa10451fbaa91c592bd7.roa
File:                     c727cea1ee05ea749e52aa10451fbaa91c592bd7.roa (raw, json)
Hash identifier:          3K7u323ICEt9lFrl2d8hixQJHDoantjF87+dcTX1eWw=
Subject key identifier:   A1:A6:6F:1C:D4:68:AD:11:AC:B6:69:C9:ED:21:86:46:C3:7F:81:7D
Certificate issuer:       /CN=ba552a17127ec2904d82704412e8848dc8f11c6c
Certificate serial:       0D5CFB
Authority key identifier: 16:5D:39:5E:8A:66:E6:22:C8:FF:FF:E3:A2:1B:F6:16:AC:2A:11:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba552a17127ec2904d82704412e8848dc8f11c6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/c727cea1ee05ea749e52aa10451fbaa91c592bd7.roa
Signing time:             Wed 24 Mar 2021 14:47:18 +0000
ROA not before:           Wed 24 Mar 2021 14:47:18 +0000
ROA not after:            Tue 24 Mar 2026 14:47:18 +0000
asID:                     20255
IP address blocks:        2803:d600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875771 (0xd5cfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba552a17127ec2904d82704412e8848dc8f11c6c
        Validity
            Not Before: Mar 24 14:47:18 2021 GMT
            Not After : Mar 24 14:47:18 2026 GMT
        Subject: CN=c727cea1ee05ea749e52aa10451fbaa91c592bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d2:fe:af:16:87:11:14:41:48:14:b8:59:3c:
                    79:a8:2d:ef:90:5c:60:6e:ea:6c:cd:2a:bb:00:f7:
                    05:41:75:e8:07:44:4c:1b:dd:2e:cb:f5:5f:2b:40:
                    10:3f:60:fd:37:48:6c:fa:b3:26:18:42:54:58:c7:
                    f3:6e:64:3f:0b:7e:95:5c:c2:09:21:8f:c1:cd:0b:
                    20:50:27:aa:a4:94:f7:dd:de:f3:26:c5:0b:58:5e:
                    4c:ce:14:23:73:1a:0d:77:84:d2:3a:43:47:eb:14:
                    85:c8:37:a1:b5:84:07:84:47:29:9c:74:8b:5a:36:
                    51:39:28:c7:d1:f7:33:06:d2:fa:7f:be:f5:12:44:
                    93:1a:7b:3f:ce:ad:0b:43:18:4a:65:87:58:42:84:
                    fa:d6:d1:9e:c9:19:0e:91:f0:e9:90:53:92:23:fc:
                    6d:8c:ff:16:2c:c7:69:b6:d1:99:8d:05:08:02:d7:
                    6e:11:e7:88:f5:ba:c3:0d:3a:5d:7c:e1:e4:83:86:
                    e2:f7:b0:26:9a:19:72:c4:74:69:5f:5e:67:81:35:
                    51:c2:eb:f9:1c:93:4c:19:fc:fb:6f:a6:07:97:eb:
                    16:c4:37:42:0a:75:78:f6:a5:05:d3:2c:a5:a3:5a:
                    75:13:ae:aa:f3:fe:fd:ec:de:26:2a:3c:8b:08:4e:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A6:6F:1C:D4:68:AD:11:AC:B6:69:C9:ED:21:86:46:C3:7F:81:7D
            X509v3 Authority Key Identifier:
                keyid:16:5D:39:5E:8A:66:E6:22:C8:FF:FF:E3:A2:1B:F6:16:AC:2A:11:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba552a17127ec2904d82704412e8848dc8f11c6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/c727cea1ee05ea749e52aa10451fbaa91c592bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b491d053-f2b5-4dfb-b4e0-b6a18878ff66/ba552a17127ec2904d82704412e8848dc8f11c6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:36:45:3a:f0:de:2b:05:89:2c:41:d0:ca:81:54:47:05:4b:
         43:2c:7d:68:00:fc:4f:43:24:ec:e2:27:a0:0f:22:8d:8c:40:
         0b:ca:af:13:f8:d9:0b:4b:67:79:e1:d9:66:c9:25:c2:46:96:
         cc:cf:f8:be:fb:ae:fe:44:54:a7:5c:93:00:df:c7:21:a2:7d:
         a4:46:93:6a:3f:97:8f:c3:2b:25:04:81:9d:70:13:ed:8f:1c:
         7e:fe:46:4b:56:b8:ec:3f:8c:8b:96:bb:18:76:4a:28:be:d9:
         6e:48:a2:84:87:2d:c9:8b:d4:12:c7:e1:54:6a:1e:92:a8:a3:
         3b:1a:a7:03:57:e5:10:66:a1:51:1b:f2:0c:06:f4:30:e6:1a:
         89:59:62:e1:39:91:ce:3d:0c:f2:4e:08:33:44:ab:df:08:80:
         76:b9:c2:48:93:c8:30:74:ca:37:7f:e6:54:73:53:07:19:69:
         0f:2a:b8:32:c2:83:bc:13:3b:ff:b4:f4:32:6d:4a:66:df:04:
         77:64:46:be:cc:92:e0:b6:de:87:f6:3e:99:95:1d:c8:96:ed:
         ca:ef:0c:62:8b:d3:a6:d0:a7:21:1f:1e:7e:df:f5:8b:68:1d:
         ae:04:01:66:99:e7:b0:a7:c8:54:4e:3d:4c:af:7e:2e:44:4f:
         8c:8a:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----