Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/b22fa6081696773681696d71b0825d8de4b42f66.roa
File:                     b22fa6081696773681696d71b0825d8de4b42f66.roa (raw, json)
Hash identifier:          0psf+kYewQ+vCj1W10+++DcW2rmvf9T27l/YmCydUqs=
Subject key identifier:   03:11:52:FF:CF:46:1B:DD:48:CB:87:D0:1D:FB:C0:DD:09:C4:51:60
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0CFDED
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/b22fa6081696773681696d71b0825d8de4b42f66.roa
Signing time:             Wed 24 Mar 2021 14:31:52 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        2803:6ea0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851437 (0xcfded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=b22fa6081696773681696d71b0825d8de4b42f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:71:d4:65:c0:ec:11:26:43:2a:b3:ef:58:
                    0c:80:0a:6e:e2:2d:df:f4:15:44:3c:6c:0b:20:a8:
                    a6:37:b1:9d:83:e5:63:a1:73:fb:2a:4c:7c:fe:6e:
                    7d:28:f4:5d:c2:1b:be:40:a6:5d:f7:ef:d3:3d:dc:
                    05:21:6b:7b:ff:ac:c8:cc:b2:8a:e5:a4:79:c0:bc:
                    af:30:c0:25:d2:5b:cf:b1:88:50:e3:89:75:82:6e:
                    07:e0:89:04:79:19:47:65:6d:07:c3:7e:d4:c0:69:
                    b7:3d:0e:ea:2a:47:57:3c:5c:47:a1:bf:9a:ea:65:
                    03:e8:21:45:28:ec:da:08:8c:ff:4d:30:41:49:95:
                    79:e3:43:16:92:f1:df:2d:d2:54:01:ff:6d:dd:7b:
                    24:7c:ae:a1:bb:bc:35:b2:73:96:85:41:49:43:a5:
                    91:5e:14:4f:c5:c0:6b:c3:71:58:dc:f7:0c:ca:f5:
                    30:33:48:76:c4:b8:2b:b5:6d:60:f4:01:bf:a1:2f:
                    37:c5:6c:36:d2:4f:c2:b0:7e:f0:43:1a:1c:c1:5b:
                    85:f9:eb:39:47:e3:20:8a:d7:d8:be:4e:2b:16:31:
                    79:c8:d5:83:a8:a1:a6:28:8b:bd:b4:20:a3:e8:b2:
                    83:8b:5d:99:e6:3e:1e:c5:2b:bd:6e:22:a6:8c:bb:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:11:52:FF:CF:46:1B:DD:48:CB:87:D0:1D:FB:C0:DD:09:C4:51:60
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/b22fa6081696773681696d71b0825d8de4b42f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ea0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:78:9b:c4:38:1f:66:24:cb:60:f6:ff:97:7a:7f:18:ce:16:
         a7:82:af:b2:b4:ff:92:7d:be:00:d0:7d:64:93:90:26:5f:90:
         ce:1f:48:b7:2b:fe:fc:03:5f:70:e9:35:6a:c7:c4:9e:d9:38:
         0a:3f:75:ff:d8:d6:e0:4e:50:4e:f5:1e:b3:b4:c6:93:04:4d:
         1c:27:66:4a:48:a9:f7:e4:ae:dc:c0:bc:29:13:dc:9d:8d:e5:
         16:b4:95:37:f0:01:95:92:5c:e2:d9:e7:cd:3b:40:9b:17:ab:
         11:02:86:0e:ff:87:a1:0c:29:d7:d3:f6:12:59:79:6e:ac:9e:
         28:36:b5:0d:47:d3:55:0e:68:6a:99:2f:39:85:5d:8a:3b:53:
         ec:5d:e7:f7:03:83:4e:fe:09:a2:df:dd:8f:95:a1:b9:36:97:
         82:c8:87:a2:72:9a:98:4b:fc:32:b0:8b:fb:18:83:ab:3d:72:
         d6:c5:da:af:61:e9:76:d2:05:f5:27:39:6a:0e:c5:98:a0:94:
         20:48:55:93:9e:3a:10:b3:a2:2d:07:ce:6a:e2:e6:0a:2b:36:
         96:49:c5:d1:30:86:92:d3:8d:c6:f7:5a:b7:7d:e6:9c:d0:74:
         a6:07:a7:bc:93:80:4e:fe:ac:61:dc:57:e4:19:3d:b7:01:75:
         77:ce:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----