Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/60b3f8446c8bc802ee6b1ce82f637537d00cd993.roa
File:                     60b3f8446c8bc802ee6b1ce82f637537d00cd993.roa (raw, json)
Hash identifier:          YeEmg++JwKGuaidXiEg6N8qNptzdL1/zM3nSBMJ4r5E=
Subject key identifier:   6E:96:5B:F1:29:5F:B3:C1:A7:D3:31:29:FA:3B:39:F6:FD:14:BC:6A
Certificate issuer:       /CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Certificate serial:       0D2B28
Authority key identifier: FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/60b3f8446c8bc802ee6b1ce82f637537d00cd993.roa
Signing time:             Wed 24 Mar 2021 14:34:00 +0000
ROA not before:           Wed 24 Mar 2021 14:34:00 +0000
ROA not after:            Tue 24 Mar 2026 14:34:00 +0000
asID:                     267848
IP address blocks:        2800:be0:3e5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863016 (0xd2b28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
        Validity
            Not Before: Mar 24 14:34:00 2021 GMT
            Not After : Mar 24 14:34:00 2026 GMT
        Subject: CN=60b3f8446c8bc802ee6b1ce82f637537d00cd993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:f7:15:21:f6:35:4a:7b:df:8b:30:7f:6e:
                    f9:9e:20:db:9c:02:39:c0:9f:eb:9b:33:dd:ca:2a:
                    e6:04:0d:87:e4:c3:d0:b2:05:cc:2e:5a:c9:b5:ee:
                    7a:b8:79:58:8f:04:3e:77:40:5f:fd:0f:a9:50:24:
                    a1:95:81:ca:a5:90:f3:5e:82:38:88:87:32:55:e6:
                    bf:69:b6:66:16:a7:5f:4f:7d:a4:0e:57:6c:26:c6:
                    17:ad:47:4d:18:69:62:66:a3:a3:80:25:8e:a3:38:
                    55:dc:7e:a5:74:06:c9:d7:51:06:25:cb:58:ef:93:
                    84:4e:22:e0:c4:52:cf:fe:cb:ef:37:dd:24:eb:cc:
                    65:2c:8d:73:da:de:dc:61:53:d8:38:24:f5:6d:d6:
                    c9:3e:a7:6f:61:68:3a:90:ae:ac:c8:15:82:ab:8e:
                    18:fc:65:15:5f:4e:b9:eb:f3:cd:37:78:5a:8e:6c:
                    e6:2a:67:a5:3f:d7:66:a1:f3:f0:5e:de:26:d8:28:
                    06:11:c2:f9:01:79:08:e7:03:f2:f3:af:d0:f5:7d:
                    84:90:fe:2d:c2:85:7f:05:4c:74:17:e4:43:15:85:
                    68:95:9a:a7:f8:72:b5:d1:b5:0f:17:e3:44:16:a7:
                    e5:e6:53:5f:ad:7e:d3:e1:92:9b:6b:79:c4:a2:7d:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:96:5B:F1:29:5F:B3:C1:A7:D3:31:29:FA:3B:39:F6:FD:14:BC:6A
            X509v3 Authority Key Identifier:
                keyid:FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/60b3f8446c8bc802ee6b1ce82f637537d00cd993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:3e5::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:3a:b6:aa:f2:24:66:66:56:ec:41:8d:96:1e:7f:9c:df:
         56:59:97:cd:2a:2b:fd:fc:f8:fd:f3:9c:cc:a5:e7:06:f2:67:
         56:6b:c0:92:9c:d9:db:e2:d5:ac:20:92:20:7e:b5:e6:f2:86:
         39:1f:f0:1f:fe:e9:d0:9f:70:8f:3c:ca:61:c7:3c:31:ea:e8:
         8e:48:74:e1:1d:bb:84:f0:86:02:ee:2c:6c:47:d6:91:db:cb:
         0f:0b:db:dc:c3:6b:47:46:28:f3:08:fb:f8:c8:7b:0a:26:de:
         f4:54:a9:a8:ab:8e:7c:81:31:f2:e4:0e:12:a7:a1:ac:d8:9a:
         c4:2e:6c:9b:dc:21:52:ae:87:41:7b:82:6a:08:05:5b:4e:89:
         ae:5b:b9:48:2e:93:e2:a9:98:44:ef:05:50:a5:73:21:71:73:
         b4:e1:9b:3b:05:5f:8d:36:b2:11:a1:a7:11:07:44:65:20:28:
         89:4a:e4:63:cb:6c:e2:5b:a3:ac:ea:c7:d1:b5:d2:1f:ed:ef:
         f0:1a:4f:3a:b2:0f:f3:38:78:84:5f:a4:c3:7a:5d:b8:60:7b:
         7e:80:b7:52:ba:d6:eb:4e:1b:ce:ec:d6:31:8e:f4:bc:eb:e9:
         5e:44:5b:92:75:ec:32:d5:02:01:6c:5c:9f:4f:b0:c8:cc:32:
         74:c4:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----