Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/ed9a55990cebec3303f41ca5b5bd4a209e0d8462.roa
File:                     ed9a55990cebec3303f41ca5b5bd4a209e0d8462.roa (raw, json)
Hash identifier:          sonsjnKFsm3ln5jKIoQF0NSI72srAfdqaADYIVPo8tQ=
Subject key identifier:   4A:34:87:1A:5C:33:D6:34:AD:8D:03:6F:67:DF:5F:A8:A1:24:57:2F
Certificate issuer:       /CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Certificate serial:       0DDBFA
Authority key identifier: FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/ed9a55990cebec3303f41ca5b5bd4a209e0d8462.roa
Signing time:             Fri 16 Apr 2021 01:05:20 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267848
IP address blocks:        2800:be0:4e0::/48 maxlen: 48
                          2800:be0:4e1::/48 maxlen: 48
                          2800:be0:4e2::/48 maxlen: 48
                          2800:be0:4e4::/48 maxlen: 48
                          2800:be0:4e5::/48 maxlen: 48
                          2800:be0:4e6::/48 maxlen: 48
                          2800:be0:4e7::/48 maxlen: 48
                          2800:be0:4e9::/48 maxlen: 48
                          2800:be0:4e10::/48 maxlen: 48
                          2800:be0:4e11::/48 maxlen: 48
                          2800:be0:4e12::/48 maxlen: 48
                          2800:be0:4e13::/48 maxlen: 48
                          2800:be0:4e14::/48 maxlen: 48
                          2800:be0:4e15::/48 maxlen: 48
                          2800:be0:4e16::/48 maxlen: 48
                          2800:be0:4e17::/48 maxlen: 48
                          2800:be0:4e18::/48 maxlen: 48
                          2800:be0:4e19::/48 maxlen: 48
                          2800:be0:4e20::/48 maxlen: 48
                          2800:be0:4e21::/48 maxlen: 48
                          2800:be0:4e22::/48 maxlen: 48
                          2800:be0:4e23::/48 maxlen: 48
                          2800:be0:4e24::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908282 (0xddbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ed9a55990cebec3303f41ca5b5bd4a209e0d8462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:a3:c5:7a:ac:7c:03:b9:88:f5:ad:ce:13:
                    46:af:51:17:54:eb:cd:24:d0:c2:6e:5f:b9:bf:6d:
                    e8:7e:34:c0:77:2a:60:b0:ab:ac:b9:64:f4:36:52:
                    3b:6e:20:68:b5:7d:94:db:79:dc:3f:9d:99:65:15:
                    34:ad:cf:e5:4e:d7:12:b1:67:44:33:68:96:76:8e:
                    a9:34:6c:ae:b5:38:0f:05:0b:e5:ca:02:d8:52:cd:
                    49:2d:d4:15:8a:2c:51:a1:13:ed:c9:1b:33:60:ed:
                    8d:e3:5f:31:e9:7e:a0:41:10:08:ae:b8:96:cc:44:
                    af:f9:66:61:6f:b5:44:74:fe:bf:4b:0f:87:27:f4:
                    47:81:6b:66:23:17:96:eb:d0:d9:6e:c5:4a:46:07:
                    11:01:aa:0f:02:b7:3a:27:29:79:63:f5:60:20:61:
                    e9:2d:f0:3c:25:a3:a5:6b:ae:a2:21:1d:36:59:57:
                    a7:d6:b2:fc:4c:5c:5f:c1:1a:9b:c6:f6:ec:25:1d:
                    67:46:1d:bf:ed:7e:de:28:a8:2f:a5:40:08:11:31:
                    b1:1b:27:07:d2:4c:bb:b6:22:d1:7b:2a:9b:e5:43:
                    ae:f4:e3:93:22:ee:c2:06:0f:a4:db:bb:e0:4a:88:
                    7e:a8:2a:cf:7c:57:f2:e8:c8:6b:d9:b7:69:f6:13:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:34:87:1A:5C:33:D6:34:AD:8D:03:6F:67:DF:5F:A8:A1:24:57:2F
            X509v3 Authority Key Identifier:
                keyid:FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/ed9a55990cebec3303f41ca5b5bd4a209e0d8462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e0::-2800:be0:4e2:ffff:ffff:ffff:ffff:ffff
                  2800:be0:4e4::/46
                  2800:be0:4e9::/48
                  2800:be0:4e10::-2800:be0:4e19:ffff:ffff:ffff:ffff:ffff
                  2800:be0:4e20::-2800:be0:4e24:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:09:12:de:54:57:63:3f:e2:6a:77:76:45:6a:5c:b8:38:
         fb:1e:93:ec:f9:f7:ac:a3:3a:f0:7c:fc:5f:e4:28:b1:8b:1b:
         e2:1a:fa:17:df:11:53:c0:ff:81:6b:a0:c8:38:20:4f:cb:7b:
         d7:12:a1:45:6d:bd:4e:40:a8:73:c7:15:48:e8:02:93:a3:97:
         0e:ce:3f:3a:54:48:75:15:52:cc:a0:63:45:33:ad:9c:13:07:
         f0:c8:35:33:b6:30:b0:de:fb:a8:66:79:61:a5:c8:e7:4b:92:
         05:eb:17:d0:f4:b6:24:bc:b5:00:cf:45:82:20:8e:ad:f0:76:
         e8:61:f1:7e:04:ae:85:b9:1d:9e:43:3e:8c:fd:af:3d:11:b6:
         e3:0a:51:a4:12:65:ae:78:e6:34:ee:81:1d:e0:d2:18:60:9b:
         37:44:a6:a9:79:67:92:27:95:8f:76:87:8e:62:c4:f9:c3:8a:
         8e:e1:c4:ab:b2:51:51:2c:ac:d8:ea:71:12:bd:e7:4e:ba:7c:
         78:6f:41:db:11:e6:bb:63:1c:0e:bb:73:cb:60:8c:be:35:62:
         29:c8:7a:0f:35:e9:0e:8d:f9:4a:09:f0:5e:0d:25:09:e2:9f:
         82:eb:c2:df:40:56:ca:94:42:64:00:da:f3:12:9d:26:99:95:
         f3:e7:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----