Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/c3ce6351533f27e0859a4124e8a9c2d70bea30b7.roa
File:                     c3ce6351533f27e0859a4124e8a9c2d70bea30b7.roa (raw, json)
Hash identifier:          adr6EovE2MUl1B2de3xd4Uy1QyC8wgItJZ3cgFQZ6LM=
Subject key identifier:   40:3B:2F:4A:E7:E7:2D:D1:B8:E6:D2:15:9E:9F:12:4C:7E:02:B1:88
Certificate issuer:       /CN=a021501bf713ce344873efb6d039b5bf1e030235
Certificate serial:       0D4B14
Authority key identifier: 04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/c3ce6351533f27e0859a4124e8a9c2d70bea30b7.roa
Signing time:             Wed 24 Mar 2021 14:39:12 +0000
ROA not before:           Wed 24 Mar 2021 14:39:11 +0000
ROA not after:            Tue 24 Mar 2026 14:39:11 +0000
asID:                     264746
IP address blocks:        2803:5740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871188 (0xd4b14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a021501bf713ce344873efb6d039b5bf1e030235
        Validity
            Not Before: Mar 24 14:39:11 2021 GMT
            Not After : Mar 24 14:39:11 2026 GMT
        Subject: CN=c3ce6351533f27e0859a4124e8a9c2d70bea30b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:30:c8:1f:4d:3c:4c:dc:9b:68:f6:ea:b0:
                    5d:0d:88:aa:d9:15:77:bf:0f:68:df:95:b2:b6:22:
                    3d:6a:cd:dd:9a:49:1d:22:bc:a7:6b:16:49:d9:a7:
                    26:c2:55:5b:ec:10:79:d6:b2:2f:cd:c7:54:d0:84:
                    36:19:4b:d4:b9:4f:8f:c3:e8:ae:a2:fd:4a:54:18:
                    a9:95:07:05:37:90:6b:a0:8c:99:6a:3a:b2:3b:40:
                    0d:be:8f:60:55:b3:09:5c:2f:69:b9:a2:45:5c:c7:
                    51:3e:31:43:54:bf:af:a5:a5:b0:64:5e:ba:f6:6b:
                    97:3f:6d:80:25:4f:73:76:43:5a:c8:95:24:59:6b:
                    cd:a7:d0:51:49:c2:b9:b2:d5:fe:31:d7:84:40:10:
                    34:cc:b4:8d:ba:50:b2:83:25:dc:b0:97:ef:01:91:
                    1b:4c:30:53:76:d2:d1:1c:16:95:e7:71:b9:78:03:
                    80:dd:be:5c:49:bc:54:01:6b:b4:b0:93:88:ce:da:
                    73:42:98:fc:22:56:5b:98:60:df:21:df:4d:5f:65:
                    4d:18:42:cf:12:b8:70:44:90:76:8e:4e:89:2d:46:
                    39:ba:23:a1:1a:1f:53:1e:e4:af:3f:86:fd:7c:bf:
                    9d:a7:f3:38:85:e1:bb:70:8d:32:49:43:d5:eb:8c:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3B:2F:4A:E7:E7:2D:D1:B8:E6:D2:15:9E:9F:12:4C:7E:02:B1:88
            X509v3 Authority Key Identifier:
                keyid:04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/c3ce6351533f27e0859a4124e8a9c2d70bea30b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/a021501bf713ce344873efb6d039b5bf1e030235.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5740::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:0e:62:d9:57:10:6f:25:ea:94:24:77:5d:f7:59:a3:39:f3:
         0f:9d:dd:64:fd:8b:f9:00:fc:50:c8:6e:48:5d:f7:b6:ee:d3:
         ee:3c:ca:23:0d:c3:06:28:4e:10:fc:ef:38:07:89:dd:1f:78:
         87:17:60:34:d5:98:97:2d:e6:06:9c:c8:84:b3:e3:30:8d:41:
         5f:3d:8c:e9:14:89:7f:be:4c:73:db:74:8a:94:27:92:65:1c:
         43:d7:e2:ed:98:6d:ad:40:e7:ae:b5:8e:6d:d9:c7:38:4d:b7:
         0f:72:7a:8f:d3:59:d5:06:a9:ee:8a:01:d7:c3:94:7a:09:2d:
         7e:86:b0:e0:f1:8d:dc:02:31:5a:48:09:b0:c1:24:46:6d:f1:
         28:2b:24:0c:7c:e4:8b:21:2f:23:be:d6:c1:dd:e3:42:f0:ee:
         6c:5e:56:74:12:40:8c:4a:2f:97:fa:0a:32:84:3e:ad:30:46:
         e7:cd:94:9f:90:44:f1:b9:29:c1:fe:f5:20:6f:a3:e7:59:42:
         61:45:c2:97:0d:dc:14:a3:06:aa:e4:29:1e:2c:f3:f5:93:b4:
         d0:4d:81:70:e4:fc:05:35:6a:63:e7:48:a0:72:e2:8f:d6:90:
         63:52:30:bb:ca:45:42:cc:99:18:5b:18:9f:0c:da:c3:4a:a0:
         cb:da:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----