Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/9218e3f585fd08a82c2883a0a1e4ce426f3dd2ef.roa
File:                     9218e3f585fd08a82c2883a0a1e4ce426f3dd2ef.roa (raw, json)
Hash identifier:          Yg61DqiHOrtD1X47duojm3bbi7QsqDKW67T3Iupm69s=
Subject key identifier:   D4:07:91:7E:7B:9E:B7:AA:01:40:12:76:0C:21:28:F1:2E:48:C5:E8
Certificate issuer:       /CN=b14932b827e5b166c58065cb1f4068a039d95258
Certificate serial:       0DE7EE
Authority key identifier: D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/9218e3f585fd08a82c2883a0a1e4ce426f3dd2ef.roa
Signing time:             Wed 24 Mar 2021 14:33:06 +0000
ROA not before:           Wed 24 Mar 2021 14:33:06 +0000
ROA not after:            Tue 24 Mar 2026 14:33:06 +0000
asID:                     28094
IP address blocks:        2803:7900::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911342 (0xde7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14932b827e5b166c58065cb1f4068a039d95258
        Validity
            Not Before: Mar 24 14:33:06 2021 GMT
            Not After : Mar 24 14:33:06 2026 GMT
        Subject: CN=9218e3f585fd08a82c2883a0a1e4ce426f3dd2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:b6:7e:a3:42:e9:4d:ad:db:6d:9c:aa:c6:
                    34:19:1e:70:67:a0:78:0f:51:5e:fd:d9:9e:02:aa:
                    2b:95:5c:12:c9:9d:87:2f:19:16:ee:c3:68:4f:9f:
                    91:46:8a:5b:b3:e3:b3:d4:5a:9f:6b:fb:76:a0:8f:
                    27:48:35:a1:3e:28:f1:d3:60:8c:a0:6a:22:7f:ab:
                    52:87:8c:bc:8b:ca:b4:46:44:94:92:b9:1c:a7:a5:
                    dd:fa:59:d1:18:1b:1f:44:ad:0f:71:8d:10:02:46:
                    10:9e:ba:5c:c5:d1:83:5b:5e:2a:60:6e:00:d9:71:
                    0a:2f:00:d0:dd:55:44:60:7a:0d:61:01:da:27:a5:
                    44:d2:5c:04:79:8f:07:db:61:84:45:9e:a1:0f:d6:
                    2b:41:87:56:59:ab:ff:4f:df:f5:1a:68:49:53:a8:
                    81:e7:ab:5f:5d:0e:ee:b5:21:ac:6b:8b:11:70:14:
                    a0:ea:75:1e:1a:35:a9:12:d2:b9:49:58:d5:f3:72:
                    e0:f6:fc:af:ef:9b:e3:d1:19:8c:e7:70:1a:55:78:
                    7a:d2:fe:15:c6:6b:59:3f:60:40:93:cd:d7:83:16:
                    51:fd:05:84:ce:d6:2c:81:db:0d:ac:52:45:bb:ba:
                    49:b3:34:e8:c9:9e:5b:df:97:0f:1d:28:c6:bf:f2:
                    89:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:07:91:7E:7B:9E:B7:AA:01:40:12:76:0C:21:28:F1:2E:48:C5:E8
            X509v3 Authority Key Identifier:
                keyid:D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/9218e3f585fd08a82c2883a0a1e4ce426f3dd2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:a3:64:b2:b1:14:01:0c:5d:23:af:c6:f8:aa:0d:03:d4:
         cb:ce:69:c2:ca:76:ce:b4:6a:17:49:12:cb:c7:13:17:a7:e6:
         ff:d4:13:7c:40:7a:36:cd:14:f1:3c:68:ea:86:58:24:ca:50:
         18:8b:38:0a:32:cd:7d:32:bc:d5:e6:4f:5e:51:ad:84:e8:e2:
         61:2a:d3:6e:39:5a:01:ce:81:e0:3e:02:e9:74:b7:25:9b:02:
         d8:ea:04:e3:de:6c:69:cd:09:a6:f3:b6:74:9c:64:d8:00:29:
         45:47:8e:7a:ec:ea:4c:17:21:2d:99:c5:61:a7:5d:4a:be:02:
         fd:57:63:d5:a5:a1:8a:13:37:66:fa:fa:c3:74:9f:41:91:76:
         44:98:c9:30:8a:d3:0a:d8:4b:de:5d:34:ce:90:31:b7:a2:09:
         e5:4b:c0:0d:db:fc:5a:ca:69:42:d8:4f:0c:e0:d3:77:34:c7:
         56:26:8d:e2:69:13:5b:fb:1e:6f:4c:70:2b:57:25:48:25:71:
         79:89:7a:91:72:5a:60:5e:f5:79:01:f0:a4:a0:ec:97:f3:18:
         ff:ac:0f:63:95:92:d5:3d:ab:f0:c2:69:fc:2b:55:71:60:91:
         59:e6:cc:a8:6d:34:25:a2:3a:21:0f:70:c6:ad:ca:87:b1:ec:
         b2:be:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----