Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/2a6dcc673d8c274095dff96fd7c02856c0295f71.roa
File:                     2a6dcc673d8c274095dff96fd7c02856c0295f71.roa (raw, json)
Hash identifier:          bWHfK1NmGfStBKFk63XixefBPuLMGkA8+XA05YnT7rE=
Subject key identifier:   64:06:EA:C3:53:5A:D8:0B:51:8F:21:AC:71:68:B1:97:4E:C6:24:5D
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       0DE093
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/2a6dcc673d8c274095dff96fd7c02856c0295f71.roa
Signing time:             Wed 24 Mar 2021 14:29:53 +0000
ROA not before:           Wed 24 Mar 2021 14:29:52 +0000
ROA not after:            Tue 24 Mar 2026 14:29:52 +0000
asID:                     265819
IP address blocks:        2803:a9c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909459 (0xde093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Mar 24 14:29:52 2021 GMT
            Not After : Mar 24 14:29:52 2026 GMT
        Subject: CN=2a6dcc673d8c274095dff96fd7c02856c0295f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:f0:80:24:e8:29:25:1d:bc:23:68:5b:ba:
                    54:41:7a:0e:59:62:f8:3d:cb:3e:7c:4c:43:40:e8:
                    c2:ca:af:3e:2c:c2:fc:bc:3e:76:0f:20:84:fc:f3:
                    e7:be:8c:e3:c4:29:2a:6e:07:b8:15:48:1b:4d:04:
                    1f:6d:3a:bb:8e:bf:f6:5d:87:07:47:8e:85:57:73:
                    8c:d0:d2:bd:11:1a:5f:aa:5b:02:f3:fc:d3:1d:d0:
                    8c:d9:5a:fd:c6:5c:c2:fa:9e:47:38:cb:09:6b:52:
                    4a:64:ce:52:6d:8a:83:4e:fc:ac:bb:6d:7b:1b:87:
                    94:5b:78:cb:e1:e6:48:6a:df:13:15:15:2e:53:9d:
                    c5:4a:ec:9d:77:03:2b:7e:ac:34:fb:aa:c2:99:b3:
                    1b:cc:1d:ef:b3:a0:8c:a9:64:49:b9:6e:9a:15:8c:
                    7f:7d:8e:df:0f:88:3d:04:3a:03:c9:88:10:d0:ce:
                    e7:b9:c9:c3:92:fb:e6:81:c3:3d:2b:9b:dc:cb:55:
                    fb:6f:06:a2:1c:df:f8:60:7f:fe:b1:ae:1e:eb:c6:
                    ef:89:ac:0d:00:9e:fd:2a:c3:8e:63:ea:5c:c6:a6:
                    35:d0:97:ba:8d:3a:ae:b6:fd:00:58:7f:61:5f:0f:
                    af:5e:ac:5a:43:7b:d1:cc:65:72:d7:dd:59:fe:e0:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:06:EA:C3:53:5A:D8:0B:51:8F:21:AC:71:68:B1:97:4E:C6:24:5D
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/2a6dcc673d8c274095dff96fd7c02856c0295f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:8c:98:81:d8:11:5f:27:dd:e3:bd:d6:dd:df:4d:39:4b:
         81:5b:9a:27:32:48:48:8d:84:c0:ef:06:3a:c4:33:52:fa:41:
         e0:7a:8a:c2:ec:6d:d1:9d:c1:18:06:6d:27:1d:04:56:23:7f:
         3f:4d:88:60:5d:bd:fc:11:f7:c7:57:9f:38:0a:bf:13:bf:e1:
         f1:43:e0:93:47:90:1e:a7:ab:cb:dc:c1:73:64:20:3a:47:e5:
         9e:e8:0f:8d:1a:d7:99:5a:5d:83:88:3d:cc:4b:6e:1e:62:30:
         43:d2:a6:9e:52:e1:09:41:03:c2:a5:76:61:5b:2a:d5:a7:fc:
         f9:5a:7c:49:a3:c3:9f:45:07:6d:8d:d5:11:df:39:3b:c0:26:
         0b:fd:42:ee:35:7e:35:a5:07:55:9f:b0:a4:a0:1f:9a:6f:02:
         76:cc:c4:f3:c2:8c:d6:69:ba:4c:12:b5:08:1f:71:58:ba:ba:
         41:c2:0e:9c:70:82:8d:d4:50:ce:7e:55:cc:49:a7:81:a4:99:
         3a:1f:aa:3b:38:85:e8:4a:97:01:7e:ca:79:be:d5:4c:d3:66:
         17:c4:76:81:69:31:23:02:91:67:59:6a:73:dc:8e:46:99:b2:
         e7:0a:af:75:b3:56:e4:d1:fb:dc:31:91:53:75:0d:61:9e:89:
         35:70:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----