Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/84c0dfbd9e6b2805536009020f5c6a71d009b28c.roa
File:                     84c0dfbd9e6b2805536009020f5c6a71d009b28c.roa (raw, json)
Hash identifier:          FfAYLOAazzjyci4PRfncnOJQxgp/takQSfLb73Q2/WY=
Subject key identifier:   E8:E7:AC:2B:A2:24:A7:6B:40:3D:72:BC:41:55:1E:3A:43:6A:08:5A
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0CFC07
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/84c0dfbd9e6b2805536009020f5c6a71d009b28c.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        2803:6ea0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850951 (0xcfc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=84c0dfbd9e6b2805536009020f5c6a71d009b28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:45:96:26:01:d7:aa:64:89:66:28:ca:e4:
                    0c:99:07:46:f4:79:bc:9b:fe:f0:4f:55:a4:f3:63:
                    d3:e3:5a:29:57:06:7d:6c:d7:80:70:de:4b:4c:4e:
                    62:22:fe:dc:7c:77:1e:50:5f:67:c4:07:3b:6a:fa:
                    e0:6d:70:a1:6d:13:51:28:a1:a6:f4:6f:d1:4f:3d:
                    ff:96:36:bf:99:a9:4e:8d:5e:60:41:cc:cf:2d:dd:
                    89:21:e7:99:42:38:75:0f:74:18:2e:06:fd:02:61:
                    83:57:c8:6f:59:d7:37:37:d0:76:a2:27:8b:19:40:
                    2b:f4:f2:b4:10:76:b3:2f:08:e5:9c:0d:91:a7:e5:
                    ca:fe:fa:91:8b:37:ca:47:d8:c6:b8:45:65:9b:90:
                    e6:3d:56:c6:58:98:38:f0:58:ee:0c:0e:f7:72:c1:
                    8c:c9:87:d6:3d:db:22:c3:cf:1d:86:8c:6b:27:96:
                    c8:bc:92:f0:27:67:73:e6:e9:c7:03:d1:36:a4:f6:
                    61:38:24:bd:b2:20:ce:70:80:02:de:8d:ed:80:34:
                    93:e0:3f:93:bf:1b:97:8f:d0:c0:5e:c9:1d:28:95:
                    c6:9e:b4:de:61:8f:90:66:33:1c:3b:68:a7:4f:57:
                    08:2c:51:b5:9f:4f:77:dd:8f:69:0f:31:7a:99:e8:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E7:AC:2B:A2:24:A7:6B:40:3D:72:BC:41:55:1E:3A:43:6A:08:5A
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/84c0dfbd9e6b2805536009020f5c6a71d009b28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ea0::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:74:32:5d:61:86:52:40:00:cf:ff:59:ad:e5:a6:61:6e:
         24:24:ed:9a:29:ce:4f:d5:1a:ca:91:d1:80:7d:84:fb:5c:a5:
         13:83:01:bb:6e:aa:b0:df:83:55:96:9f:3a:ee:17:af:1c:96:
         f8:09:a8:0c:a2:27:63:3d:f9:fc:6d:b4:a7:c5:b1:a1:49:d7:
         b9:65:b2:4d:e7:af:a2:af:dd:3f:b6:e1:6e:b2:49:1c:69:09:
         b6:b4:4a:70:53:18:a1:95:00:bc:80:c9:66:c1:62:15:08:9d:
         53:fb:4b:93:05:06:8a:f0:e5:89:d8:b0:cd:81:00:7e:e6:29:
         de:15:9e:63:fe:30:8c:7b:7f:b3:67:a9:04:6f:85:b7:eb:19:
         e6:9e:49:c9:fa:68:64:7b:98:0d:2c:1d:ce:c5:5d:10:ef:93:
         94:6f:55:a2:47:d0:3f:4b:a4:77:89:5d:01:68:1b:c1:80:73:
         0a:b7:52:c5:7a:c0:b8:53:12:8e:15:a6:93:9d:2e:2d:af:83:
         9f:b8:77:9b:f2:13:7c:c5:db:67:d8:fe:9b:52:b4:39:11:5a:
         49:75:87:4c:46:22:1e:48:e9:d3:44:67:bc:4d:bc:b2:c5:e7:
         f1:a3:83:ab:c0:f0:94:da:61:5d:07:f5:af:53:13:f4:83:9c:
         71:61:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----