Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/a8e2fd688a17bf9b9f44335070e44be23c77c1cb.roa
File:                     a8e2fd688a17bf9b9f44335070e44be23c77c1cb.roa (raw, json)
Hash identifier:          IilSf0OcQ90kdWW7mIIdRlzKTEKZ4sL95FhJMpMpKqI=
Subject key identifier:   3C:27:37:BB:3D:C4:0F:40:55:45:04:A4:25:C4:84:30:40:5A:DF:80
Certificate issuer:       /CN=52c2dea9e81fdad8d5d4689c106fde720d220299
Certificate serial:       0B2A26
Authority key identifier: F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/a8e2fd688a17bf9b9f44335070e44be23c77c1cb.roa
Signing time:             Wed 24 Mar 2021 14:38:13 +0000
ROA not before:           Wed 24 Mar 2021 14:38:13 +0000
ROA not after:            Tue 24 Mar 2026 14:38:13 +0000
asID:                     207036
IP address blocks:        2803:9c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731686 (0xb2a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c2dea9e81fdad8d5d4689c106fde720d220299
        Validity
            Not Before: Mar 24 14:38:13 2021 GMT
            Not After : Mar 24 14:38:13 2026 GMT
        Subject: CN=a8e2fd688a17bf9b9f44335070e44be23c77c1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:10:c4:4b:18:09:f8:20:82:55:76:8c:58:
                    af:60:25:3f:29:77:76:78:e1:33:2b:95:68:c4:31:
                    27:ed:0b:a2:fe:fc:b3:d3:df:0d:6d:7d:3c:61:2d:
                    c4:fa:26:00:81:c8:f1:ff:49:6f:d2:b3:a3:89:f7:
                    c6:73:26:46:fa:1d:ba:0f:4f:2d:7c:df:99:c6:e1:
                    f4:95:88:32:61:89:8d:78:80:c8:b4:af:cc:0d:32:
                    ae:61:a6:8d:36:ad:a5:d5:ec:a6:05:5d:00:37:26:
                    95:22:d5:99:95:f8:b3:74:c6:8b:45:04:a2:5d:da:
                    d0:16:53:01:8a:f0:a2:2a:6d:71:0b:92:54:17:89:
                    17:80:04:b5:a1:9c:67:57:fd:03:2d:dc:b7:ab:7e:
                    a9:ec:e1:98:5e:58:18:91:28:b9:ff:32:fd:9a:74:
                    14:27:de:0c:39:c7:df:27:71:e2:86:b3:d2:9b:20:
                    1e:6e:f1:dd:12:5c:95:82:a2:1c:47:43:e2:73:fc:
                    db:4a:17:ce:81:50:60:54:22:e6:df:fd:52:5f:04:
                    4f:1b:26:c1:17:16:0a:15:97:d0:f5:f0:57:ef:84:
                    cd:54:b8:1e:34:aa:59:3e:7e:ca:90:89:c9:7d:fb:
                    ef:db:66:a4:73:9b:c4:4e:09:d3:99:61:a9:f7:f8:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:37:BB:3D:C4:0F:40:55:45:04:A4:25:C4:84:30:40:5A:DF:80
            X509v3 Authority Key Identifier:
                keyid:F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/a8e2fd688a17bf9b9f44335070e44be23c77c1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/52c2dea9e81fdad8d5d4689c106fde720d220299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:70:d5:7e:9a:1d:65:7b:21:c4:6c:40:ef:e9:4a:39:56:
         53:34:e2:8f:bf:7c:67:f3:0d:65:58:99:c1:f6:8e:e8:ea:85:
         c0:f6:7b:17:36:d4:08:8d:df:44:d4:65:be:7b:38:18:87:86:
         1b:39:1f:f3:e2:07:51:32:83:e7:d9:79:23:09:9d:f4:50:7d:
         a0:40:e2:16:a0:e7:b4:75:9d:e6:b4:fc:66:64:e5:36:db:ef:
         2e:a7:69:38:24:9c:e8:0e:4c:6d:6c:0b:78:74:e1:46:6a:45:
         88:44:55:b5:78:5c:48:b8:f0:fa:8f:72:af:d7:f9:d8:41:60:
         ad:f5:87:7c:5b:00:ba:ac:6c:24:dd:42:b9:c3:e0:1e:c3:22:
         53:28:a6:43:bb:1a:80:6a:3c:56:02:d0:df:97:10:49:50:fb:
         62:de:9d:27:f7:e5:5b:8d:20:c0:55:b4:37:80:0e:48:31:78:
         80:db:df:40:86:f8:4c:9a:a5:71:dd:42:c5:b5:7f:40:a8:70:
         bb:4c:4f:37:91:97:a9:3c:98:54:35:8e:11:84:60:d2:55:fd:
         3c:45:da:2b:7e:05:4c:92:50:c2:65:c2:2e:a7:df:f9:ab:1e:
         a6:6f:cf:75:e1:b6:1f:5d:c5:46:9b:ba:33:d9:7b:f8:d9:b7:
         77:7e:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----