Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/28b4b13fda0d3cd7b5f8375ff5921d4053e2edec.roa
File:                     28b4b13fda0d3cd7b5f8375ff5921d4053e2edec.roa (raw, json)
Hash identifier:          e5cjgVRSVcvYY8CNNQNsu8LgfzG/E04cQl1yPfy186s=
Subject key identifier:   BD:75:8A:49:D3:76:9B:E5:8C:CD:CB:0D:8A:B7:72:3C:EF:37:E8:B6
Certificate issuer:       /CN=491991f40dab281b295c3cc5d691493655fc7e8d
Certificate serial:       0DC0DA
Authority key identifier: A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/28b4b13fda0d3cd7b5f8375ff5921d4053e2edec.roa
Signing time:             Wed 24 Mar 2021 14:29:49 +0000
ROA not before:           Wed 24 Mar 2021 14:29:49 +0000
ROA not after:            Tue 24 Mar 2026 14:29:49 +0000
asID:                     264830
IP address blocks:        2803:2c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901338 (0xdc0da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491991f40dab281b295c3cc5d691493655fc7e8d
        Validity
            Not Before: Mar 24 14:29:49 2021 GMT
            Not After : Mar 24 14:29:49 2026 GMT
        Subject: CN=28b4b13fda0d3cd7b5f8375ff5921d4053e2edec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:24:0d:5e:91:ae:64:eb:87:51:fb:09:d2:
                    63:b7:2d:91:ff:6d:17:4a:0e:13:03:3a:7b:3e:47:
                    6d:23:8b:1b:2b:47:2e:cc:2c:51:e7:43:fc:bd:04:
                    dc:d7:8d:d9:d7:28:e1:09:5a:19:87:fb:3c:f5:4e:
                    99:1b:b3:ca:fe:b0:68:4f:ef:d5:2e:9b:06:be:20:
                    6d:74:86:b7:e0:b9:4d:d0:b2:07:54:1d:68:a5:24:
                    da:ab:f7:90:35:9a:ef:49:cd:ad:c7:88:cc:04:bd:
                    88:37:1a:2c:28:c9:fe:a9:bd:61:a6:33:b9:43:c4:
                    4c:dc:27:f8:f8:e2:7f:28:f6:7b:c6:e5:73:08:6a:
                    f4:a6:85:33:91:cf:a4:61:fa:c5:30:12:64:ba:8f:
                    db:95:c4:38:b2:30:bb:e6:86:be:e0:2c:65:fd:a4:
                    74:f3:f3:b7:73:e6:68:53:7c:51:30:ff:ae:80:e5:
                    24:e6:2c:c1:0a:5a:24:c9:10:b0:97:94:d9:34:c3:
                    7d:79:4d:15:33:d4:2d:12:c4:67:3b:1a:26:b5:67:
                    5b:d0:81:96:9c:c8:c8:44:a5:8a:82:1c:7f:92:ca:
                    7d:4b:94:13:09:24:19:bc:47:97:35:07:e2:b0:4c:
                    10:4c:5b:28:34:ca:a5:08:06:d9:5a:90:32:31:e3:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:75:8A:49:D3:76:9B:E5:8C:CD:CB:0D:8A:B7:72:3C:EF:37:E8:B6
            X509v3 Authority Key Identifier:
                keyid:A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/28b4b13fda0d3cd7b5f8375ff5921d4053e2edec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:90:5c:53:09:3c:8e:72:c6:d3:18:05:fb:60:f7:66:f8:
         d5:c2:dc:d1:fa:b1:a0:de:68:be:c2:0a:6a:51:97:85:4f:cd:
         e4:de:55:9d:a4:2a:a1:4c:f9:49:91:bd:6c:76:b7:fd:f4:f4:
         82:97:5c:cf:45:d4:7a:cd:27:5c:5f:f9:7f:ab:76:34:20:b3:
         38:42:ff:4e:5e:ad:77:c9:04:2c:43:60:81:4b:a2:77:05:81:
         95:ec:fe:d9:ed:23:59:8b:f7:77:9c:81:0a:d1:00:da:fb:e1:
         e5:01:cb:27:9b:06:57:10:6c:92:af:54:7f:d9:d0:4b:bf:76:
         5e:e9:c2:05:03:dc:b8:84:cd:62:68:21:c6:80:68:b9:8f:67:
         86:ce:1c:44:cd:c2:3c:84:45:dc:21:6d:23:2e:3e:3a:a7:1f:
         72:2b:a0:d6:0a:cc:3e:96:2c:ee:7f:bb:03:40:be:1d:51:85:
         e7:50:d4:00:e4:39:f8:b7:83:24:95:bc:b0:0d:a4:8a:0b:9c:
         c8:67:37:ea:2f:02:9b:62:69:b6:5f:0f:88:55:ad:c7:5e:ce:
         76:e4:20:c3:1c:35:9c:3f:79:a1:e7:20:c8:c0:7d:df:1b:22:
         a8:9e:f1:a4:b8:90:35:3f:a2:36:dd:44:08:55:80:5b:c7:41:
         57:8b:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----