Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/655a019473fbc949287c692fc8c754acd7b8d544.roa
File:                     655a019473fbc949287c692fc8c754acd7b8d544.roa (raw, json)
Hash identifier:          GlR0obk2Ld5hAmlve3hHv8B9fmqYVKRBL6XKvqem9is=
Subject key identifier:   C2:E0:44:6F:85:05:23:D5:21:3D:43:B2:72:0F:D8:9D:90:4D:EE:52
Certificate issuer:       /CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
Certificate serial:       0DB3DA
Authority key identifier: 1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/655a019473fbc949287c692fc8c754acd7b8d544.roa
Signing time:             Wed 24 Mar 2021 14:38:25 +0000
ROA not before:           Wed 24 Mar 2021 14:38:25 +0000
ROA not after:            Tue 24 Mar 2026 14:38:25 +0000
asID:                     46198
IP address blocks:        2803:2b80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898010 (0xdb3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e441519e30664b9a2cdf15d20d8d69bd047094c
        Validity
            Not Before: Mar 24 14:38:25 2021 GMT
            Not After : Mar 24 14:38:25 2026 GMT
        Subject: CN=655a019473fbc949287c692fc8c754acd7b8d544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:47:a0:9d:90:58:28:8f:2d:db:92:91:1a:
                    69:38:78:44:e0:78:0c:9a:6b:fd:fc:a7:3a:04:af:
                    e4:df:71:48:aa:b3:3e:d5:32:0b:6e:c4:0b:be:d4:
                    ec:1c:d6:a3:64:18:9f:55:38:a6:de:ff:fe:cf:8c:
                    a4:d8:77:be:f4:53:b1:b4:73:60:af:82:30:53:7f:
                    cd:6c:6f:e9:91:bc:45:85:f9:e4:f1:54:23:95:44:
                    c2:7c:15:c5:56:d9:ff:07:cb:ca:50:75:13:32:46:
                    61:22:49:e8:c3:fa:3e:5a:fc:53:66:37:ca:c9:7a:
                    2d:17:61:0a:0d:4c:1e:24:98:fd:49:1a:98:80:52:
                    87:a6:c4:08:64:e8:a7:bf:78:9f:53:8a:30:42:61:
                    88:60:a8:aa:2f:1a:35:b1:53:de:06:b5:e5:00:7c:
                    fe:64:27:4e:b5:b0:85:f2:2d:d0:bd:58:0a:25:f5:
                    5a:db:a5:d3:9a:33:cd:17:e1:a0:b3:be:aa:78:66:
                    65:03:8a:74:4e:3b:fb:60:43:fd:63:09:17:cb:bb:
                    c5:c6:63:f1:d3:57:f1:d3:3d:3c:e9:6c:cc:39:86:
                    ec:fa:97:70:83:6f:0a:17:2e:e0:a1:c6:fd:bc:dc:
                    9e:d0:21:4f:1f:15:05:81:d9:15:df:19:c0:bb:69:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E0:44:6F:85:05:23:D5:21:3D:43:B2:72:0F:D8:9D:90:4D:EE:52
            X509v3 Authority Key Identifier:
                keyid:1E:C7:DD:A2:F2:D1:31:03:71:3E:37:DE:2B:7B:9A:D4:0F:5A:20:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e441519e30664b9a2cdf15d20d8d69bd047094c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/655a019473fbc949287c692fc8c754acd7b8d544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1950632-2706-4492-aa2b-7547b1789fcd/6e441519e30664b9a2cdf15d20d8d69bd047094c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:48:20:81:da:a4:5a:9c:44:e9:a7:8c:55:b1:5c:18:39:
         ae:45:a0:a0:3c:77:9a:dd:45:81:91:a6:99:8e:47:80:63:35:
         5b:36:3f:fd:81:7e:97:bb:c1:b4:b8:b9:30:09:f2:11:d8:8b:
         72:23:7b:52:9a:ad:37:b5:9b:57:cb:25:53:25:75:2e:9f:80:
         5f:0c:b8:83:34:87:23:95:5f:2c:d9:5d:7c:c2:a7:6f:cf:ea:
         00:7f:1f:46:47:f9:8e:df:d3:68:db:9a:7a:fa:71:ac:f5:70:
         d8:d4:62:68:ec:68:30:a9:7a:5d:13:55:e1:e3:c7:d2:c9:ba:
         b4:6e:2e:59:c4:9a:b4:f5:ec:85:df:58:ae:0c:63:23:b1:36:
         4a:db:cd:ba:ec:a6:ff:6c:17:2e:5c:45:61:fb:30:8e:e1:2a:
         5b:9b:16:35:fa:b9:8a:d5:e3:18:82:80:da:57:96:84:8e:5f:
         61:d9:2d:a2:85:9c:dc:24:a9:76:60:8c:10:1e:b9:91:fe:cd:
         e6:b3:49:a3:9e:33:f0:69:2d:54:48:27:ff:cb:96:86:0d:4a:
         80:ef:60:5d:d6:59:40:11:44:9f:7e:bf:2f:8c:67:99:96:c1:
         9d:67:6b:5c:64:12:55:33:31:ae:8c:19:4f:a1:8b:57:b5:cd:
         8b:cd:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----