Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/dbce0061b7752cb0384c8beee9da1637741246eb.roa
File:                     dbce0061b7752cb0384c8beee9da1637741246eb.roa (raw, json)
Hash identifier:          NNm3fU+iJ4pOGEOFSGCo5saaCHHPj4cmi+u+LH3U0hc=
Subject key identifier:   9F:AF:56:E4:E9:51:1A:C7:79:20:A3:AB:4E:57:4D:D2:66:72:7A:B2
Certificate issuer:       /CN=52c2dea9e81fdad8d5d4689c106fde720d220299
Certificate serial:       0B267A
Authority key identifier: F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/dbce0061b7752cb0384c8beee9da1637741246eb.roa
Signing time:             Wed 24 Mar 2021 14:38:13 +0000
ROA not before:           Wed 24 Mar 2021 14:38:13 +0000
ROA not after:            Tue 24 Mar 2026 14:38:13 +0000
asID:                     265695
IP address blocks:        2803:9c0:4000::/34 maxlen: 34
                          2803:9c0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730746 (0xb267a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c2dea9e81fdad8d5d4689c106fde720d220299
        Validity
            Not Before: Mar 24 14:38:13 2021 GMT
            Not After : Mar 24 14:38:13 2026 GMT
        Subject: CN=dbce0061b7752cb0384c8beee9da1637741246eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:e1:51:12:9e:0c:7d:2d:c5:6b:50:ed:3a:
                    c2:72:f0:76:9b:f1:47:68:99:b7:9c:07:28:e2:5c:
                    e8:b4:df:c5:31:43:9b:a6:7e:69:4e:0c:9b:7f:9a:
                    7c:f6:6d:b5:2a:5d:44:bf:fe:e9:59:e2:45:a9:74:
                    e3:34:09:2d:83:79:75:6e:22:b6:f8:75:88:3c:0d:
                    81:3b:d8:16:4f:64:25:8e:56:7e:b4:b7:6c:7e:5a:
                    c7:ab:60:c2:34:a1:cc:30:5a:48:d2:e4:0a:12:ed:
                    c8:07:61:85:f8:df:8a:be:8e:12:c5:b0:58:68:32:
                    48:84:fc:7a:82:a2:6d:4a:cd:08:5e:8f:8d:48:65:
                    82:b7:39:f0:49:20:ab:b0:70:d2:54:a7:5c:bf:ab:
                    57:e0:d9:e4:1d:be:2e:b7:0d:62:42:d2:0e:ad:d7:
                    a7:8f:71:27:f7:f5:c5:e3:36:00:01:4f:e2:f9:b4:
                    15:30:b3:5b:36:47:e0:8e:30:09:61:1e:a5:c3:5a:
                    f0:49:29:77:a2:9e:af:e0:f7:6e:b5:48:21:c8:f6:
                    aa:8f:b6:ea:4d:86:7e:2f:dc:5b:34:e6:b6:d2:94:
                    aa:39:40:20:0f:e5:8e:22:33:d7:d7:5e:26:a0:13:
                    26:31:21:1a:fc:e9:f0:2e:d4:da:65:6b:5e:83:a3:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AF:56:E4:E9:51:1A:C7:79:20:A3:AB:4E:57:4D:D2:66:72:7A:B2
            X509v3 Authority Key Identifier:
                keyid:F2:33:09:8B:82:0C:6C:EE:20:B8:A5:74:08:E5:ED:EF:97:CD:DB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c2dea9e81fdad8d5d4689c106fde720d220299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/dbce0061b7752cb0384c8beee9da1637741246eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/52c2dea9e81fdad8d5d4689c106fde720d220299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0:4000::-2803:9c0:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:6e:e8:e9:c2:b4:b4:1a:e2:b8:0c:99:d0:17:5b:46:74:
         95:45:2c:d8:7c:97:a4:eb:09:c5:f5:23:83:37:b4:52:0f:4b:
         2c:64:b6:1e:36:04:94:12:4b:a6:66:86:9c:9a:69:74:04:01:
         62:98:50:0b:c5:a0:cd:47:89:2d:68:b7:6a:5e:2f:f1:ce:82:
         33:39:77:4e:1d:94:6f:9b:0d:4f:1a:08:e1:ca:90:76:a8:9a:
         82:c8:17:cd:14:04:18:38:1c:d4:dd:46:42:20:95:55:b7:9a:
         07:9f:c7:09:a4:06:27:2b:f2:cc:8d:c0:4f:fb:01:06:db:d9:
         f5:bd:7a:6d:c0:c7:fc:2c:26:f2:c8:70:46:a7:4f:a1:c2:05:
         f1:4a:f2:77:5a:61:3b:11:99:80:ac:81:64:75:28:94:22:6b:
         7d:0e:31:0e:6d:1a:2d:c6:f3:20:df:b6:f2:6f:5d:f8:86:85:
         b4:5c:cd:3f:bd:14:79:d3:4e:2b:92:05:13:80:13:8f:a4:2b:
         f3:ae:c6:3c:1a:68:44:09:9c:57:96:be:a5:db:e3:94:86:f0:
         60:98:d3:92:d0:06:06:95:40:4e:e8:cc:6b:10:87:d2:ed:4b:
         7e:1b:3e:f8:ad:fd:cd:be:2c:f3:94:c9:b6:9a:29:e0:d9:41:
         60:e2:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----