Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/248f2eefb4eb81a678bdc7ed04544c5a2c09dc63.roa
File:                     248f2eefb4eb81a678bdc7ed04544c5a2c09dc63.roa (raw, json)
Hash identifier:          Vgv+pAmzDtFpx59wBUe+QQGBc3QGFIdgx6zdp++EPs8=
Subject key identifier:   99:EC:10:F5:27:E3:97:50:EA:E3:37:3C:8E:5F:4A:7A:D3:7B:FA:0F
Certificate issuer:       /CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
Certificate serial:       0DBB30
Authority key identifier: 1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/248f2eefb4eb81a678bdc7ed04544c5a2c09dc63.roa
Signing time:             Wed 24 Mar 2021 14:38:25 +0000
ROA not before:           Wed 24 Mar 2021 14:38:25 +0000
ROA not after:            Tue 24 Mar 2026 14:38:25 +0000
asID:                     12066
IP address blocks:        2803:2b80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899888 (0xdbb30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
        Validity
            Not Before: Mar 24 14:38:25 2021 GMT
            Not After : Mar 24 14:38:25 2026 GMT
        Subject: CN=248f2eefb4eb81a678bdc7ed04544c5a2c09dc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:a9:43:38:f0:44:df:0c:46:ec:8a:13:42:
                    34:fc:0b:9a:3d:a0:32:d4:67:ee:6f:71:4e:80:67:
                    39:84:c5:d9:6b:7f:e6:c6:98:b5:28:90:60:54:b3:
                    b7:c8:27:18:9a:d7:01:67:42:e4:df:e0:b3:99:58:
                    b6:ce:d9:94:10:92:35:11:62:6c:62:d7:91:a0:2a:
                    56:f0:1d:f0:a4:c5:36:bf:96:a1:27:20:14:8b:c0:
                    33:de:d4:20:b9:55:13:22:5a:e8:83:99:9a:ad:30:
                    6c:43:3c:8f:e6:78:36:32:0a:33:45:66:2f:8b:93:
                    9c:55:c8:22:e2:5b:2d:73:3f:3f:b1:72:a6:bf:6f:
                    7d:0f:77:a4:6d:fb:5a:f3:2b:48:67:e6:d2:93:46:
                    07:72:93:f7:b8:eb:1b:bf:1b:af:06:f5:6e:15:03:
                    cb:16:a1:66:63:35:ce:16:b4:df:76:b3:35:ef:cd:
                    ea:2a:fa:9e:7e:e6:3b:a6:3f:a8:f1:19:c2:10:6b:
                    b9:bd:5a:14:c1:92:ff:a1:11:25:86:bf:7a:1d:c5:
                    db:f4:8e:c6:04:27:c1:d3:84:57:cd:96:2e:59:fb:
                    3d:b8:13:9e:d3:0b:08:54:bb:4b:f2:98:48:c1:02:
                    2e:7f:dc:d7:b4:38:3c:dd:de:27:51:09:c1:69:8a:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:10:F5:27:E3:97:50:EA:E3:37:3C:8E:5F:4A:7A:D3:7B:FA:0F
            X509v3 Authority Key Identifier:
                keyid:1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/248f2eefb4eb81a678bdc7ed04544c5a2c09dc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/6e441519e30664b9a2cdf15d20d8d69bd047094c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:9b:e0:8c:7a:90:cf:b1:21:78:73:9f:b5:09:23:ff:87:
         eb:fd:0e:2c:e3:2b:ed:a6:f3:1f:da:7e:8c:1b:ba:fe:b3:b3:
         c7:83:86:ca:d1:05:fb:37:28:68:fe:c3:4e:bc:9b:71:d4:80:
         a0:a8:dc:42:fe:08:f2:70:af:0b:88:60:02:6b:3b:ef:eb:ee:
         4d:80:66:a6:73:f3:75:82:0e:d7:df:b9:b1:a3:2d:58:a3:ed:
         99:41:dc:73:cd:d9:88:88:31:6d:e6:dd:51:95:f4:0b:af:66:
         b9:aa:da:d1:2e:46:6e:a8:f5:ba:9f:3d:9f:3d:84:bb:33:db:
         bb:c0:1b:4a:f2:64:b1:23:8a:62:4d:f4:52:68:f6:01:b9:fc:
         e5:20:20:8d:7c:3a:94:e1:fe:f7:e7:80:8b:57:ff:68:2c:05:
         46:86:a8:d5:a0:b3:cf:fc:b7:5e:a9:03:29:9c:73:42:f1:21:
         84:13:72:d9:84:3d:87:1d:2e:b5:64:7e:7a:98:ae:3e:13:13:
         d3:14:b4:3d:fa:b5:d5:72:26:7b:f4:4c:cb:66:a6:33:33:fc:
         f2:d3:7d:e7:d8:f9:63:26:1c:f1:d7:7d:86:ed:85:14:87:d0:
         73:12:7c:f8:c2:59:51:cf:6d:22:bd:d7:5a:2b:f0:ac:fa:e2:
         49:11:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----