Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/b3de64f6038247343edc3b37392fd6507d8a609a.roa
File:                     b3de64f6038247343edc3b37392fd6507d8a609a.roa (raw, json)
Hash identifier:          VfPNri2i7k5DS2JO+aSDKe1/mOCFV7U1Slka59x0VZc=
Subject key identifier:   BB:22:40:D3:70:88:A8:E0:FA:62:3C:8A:CF:A8:3E:EC:B4:9E:5D:58
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       046E60
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/b3de64f6038247343edc3b37392fd6507d8a609a.roa
Signing time:             Wed 24 Mar 2021 14:43:00 +0000
ROA not before:           Wed 24 Mar 2021 14:42:55 +0000
ROA not after:            Tue 24 Mar 2026 14:42:55 +0000
asID:                     265540
IP address blocks:        2806:2f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290400 (0x46e60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Mar 24 14:42:55 2021 GMT
            Not After : Mar 24 14:42:55 2026 GMT
        Subject: CN=b3de64f6038247343edc3b37392fd6507d8a609a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:27:95:ed:9d:54:94:3d:a9:21:58:f9:2e:
                    db:f7:37:e2:90:46:57:87:10:3a:d6:d2:76:a3:fb:
                    95:f4:e0:d6:8e:fb:82:b6:83:cb:d2:2e:0f:a2:69:
                    fd:e5:4b:35:41:af:34:0d:09:4d:f1:7a:bb:af:9c:
                    1b:cc:33:ed:e0:73:e5:d0:cd:9b:61:fc:8a:55:bc:
                    08:c0:0d:4e:eb:bc:b8:65:07:cc:03:ff:64:5d:50:
                    ff:05:c3:aa:ff:cf:cc:ae:45:38:05:b8:41:77:1c:
                    49:d2:02:12:3a:24:48:91:b3:63:59:bb:10:1e:81:
                    fc:2a:04:d2:cb:d3:4c:b9:b6:c5:12:17:5c:5f:3e:
                    fe:8a:e1:3b:f6:04:5f:a1:aa:8f:98:80:fd:e1:c2:
                    5c:6e:e3:e2:71:12:b3:df:55:96:ff:9b:1b:f9:ce:
                    1f:88:49:55:36:dd:3c:94:e3:65:12:21:6b:16:ba:
                    3f:ee:a1:08:29:84:4f:bc:f3:91:09:92:e8:2b:ca:
                    55:d6:57:b3:63:d9:fb:40:37:f4:ea:51:f1:13:e7:
                    bc:1a:f1:1b:30:0f:4f:ef:7a:6e:40:81:c6:2f:62:
                    10:31:f0:3a:a4:e1:88:a7:63:76:2a:bf:3a:0c:f1:
                    49:7d:3e:77:c1:69:24:22:72:b6:c1:5a:eb:1a:04:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:22:40:D3:70:88:A8:E0:FA:62:3C:8A:CF:A8:3E:EC:B4:9E:5D:58
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/b3de64f6038247343edc3b37392fd6507d8a609a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:3f:08:a1:aa:1a:a6:ae:24:cb:c2:09:bc:3b:47:12:b4:f8:
         97:b7:b6:b1:8b:6b:d6:9e:14:58:7f:1a:27:c3:5c:64:5e:55:
         cd:d8:a3:64:a1:27:89:e9:5e:b7:4b:d2:2c:c9:90:c8:61:61:
         61:0c:b7:06:c3:27:07:45:c3:41:5a:4b:6c:34:a7:30:23:ee:
         48:67:d2:d9:50:7f:77:23:0e:ce:b6:07:9c:5f:a0:44:05:c6:
         10:52:76:ab:fc:50:e1:07:b5:18:d0:1a:30:ec:93:ac:6b:6d:
         d4:9d:a5:18:a2:00:a9:68:e6:1e:30:13:6c:32:2a:12:7d:56:
         6f:64:14:89:43:4b:61:cf:e5:32:8f:83:17:3a:dd:8a:6d:ce:
         0b:cf:42:fb:86:b5:07:f9:02:72:be:76:f9:99:7b:4f:ae:9d:
         09:53:6c:b7:25:4d:6e:c7:46:1a:cb:18:8d:d6:ba:c4:d8:23:
         93:03:c7:73:14:c6:5f:1a:d9:e7:a5:7c:1e:d0:bc:b8:4e:a3:
         63:0e:a2:8a:13:c3:4f:db:ff:ed:57:5f:40:f5:80:a4:5b:ee:
         e8:43:22:df:04:2b:76:41:f9:e0:90:dc:93:48:d9:3f:06:b7:
         ab:ec:9c:2f:a3:35:04:eb:ee:31:c8:d5:a8:83:be:96:24:c1:
         69:f9:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----