Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/93002fa04968e7f1c80d8da4b454bf5734100007.roa
File:                     93002fa04968e7f1c80d8da4b454bf5734100007.roa (raw, json)
Hash identifier:          DFuY6dJFckOcs+HaEHNbzI0IBe3oEBvUmOdO5B+GDVk=
Subject key identifier:   BD:D2:91:F5:43:68:02:D2:2F:D9:9F:8A:FF:62:54:DD:75:21:F8:AA
Certificate issuer:       /CN=165a2310cc55bf775bd8c9d5ba1511fd34da54bb
Certificate serial:       0D3E89
Authority key identifier: DA:44:6C:0C:D9:07:C6:5B:29:A9:D9:77:FC:7B:CD:9D:FA:62:92:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/93002fa04968e7f1c80d8da4b454bf5734100007.roa
Signing time:             Wed 24 Mar 2021 14:34:27 +0000
ROA not before:           Wed 24 Mar 2021 14:34:27 +0000
ROA not after:            Tue 24 Mar 2026 14:34:27 +0000
asID:                     264806
IP address blocks:        2803:34c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867977 (0xd3e89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165a2310cc55bf775bd8c9d5ba1511fd34da54bb
        Validity
            Not Before: Mar 24 14:34:27 2021 GMT
            Not After : Mar 24 14:34:27 2026 GMT
        Subject: CN=93002fa04968e7f1c80d8da4b454bf5734100007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cf:93:63:94:55:93:ee:2a:16:d0:38:e6:04:
                    88:1c:c1:7a:ad:97:8f:4b:6d:53:c2:f2:a0:d8:9f:
                    fd:86:b2:60:e2:f3:ef:3f:3d:4b:f7:ad:dc:1d:6a:
                    3e:d3:db:44:9b:55:5c:e2:3a:de:28:3e:16:dd:5a:
                    09:b3:a5:a5:2e:24:f4:42:78:19:a1:28:d4:33:37:
                    ac:82:a0:e7:17:ea:aa:c9:63:d6:a3:51:b5:ab:8a:
                    f0:7b:70:02:0d:d1:30:58:0a:de:41:5b:93:e7:e2:
                    1f:c8:e7:b3:1d:65:50:e4:8b:99:1b:56:1b:0b:34:
                    89:ee:8c:91:02:a4:e3:53:a9:e9:b8:31:79:d0:57:
                    f5:70:08:4e:85:d6:4f:b6:8c:ef:f7:85:6b:7d:3b:
                    92:60:fa:ea:f4:1c:9b:6b:3e:ca:66:78:50:da:42:
                    1e:f8:83:f0:a0:b4:14:1f:73:e7:5e:e5:d8:d5:9a:
                    ee:09:d4:ef:dc:e7:f6:17:91:35:9e:f5:2a:09:15:
                    ac:6b:b2:6c:7a:b3:bd:6d:d8:ae:2e:9c:00:dd:d6:
                    6b:9c:aa:06:38:f5:2d:d5:5f:05:ff:ac:62:22:24:
                    7b:fd:f2:1c:29:d8:9d:01:d4:ca:fb:9a:02:1e:47:
                    c1:9b:75:7f:a7:5f:4d:a4:fe:e0:8d:a1:06:18:f5:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D2:91:F5:43:68:02:D2:2F:D9:9F:8A:FF:62:54:DD:75:21:F8:AA
            X509v3 Authority Key Identifier:
                keyid:DA:44:6C:0C:D9:07:C6:5B:29:A9:D9:77:FC:7B:CD:9D:FA:62:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/93002fa04968e7f1c80d8da4b454bf5734100007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc6e842f-d789-4308-9f67-dc3fe4311837/165a2310cc55bf775bd8c9d5ba1511fd34da54bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:34c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:98:dc:a4:64:4f:02:7b:0d:3e:95:a9:b8:2e:d9:a7:1a:06:
         e5:91:27:13:fb:04:69:71:5a:c9:c1:a2:5d:8e:21:8f:3f:21:
         9d:72:5e:bc:cf:29:86:a3:69:eb:f5:92:09:0d:96:b7:9b:77:
         0e:5c:c2:e9:e3:df:ed:f3:90:79:b8:8e:e3:d0:12:89:b6:35:
         b3:0a:43:ec:0e:b8:90:c7:17:e5:45:72:6a:70:ff:17:c3:8d:
         2b:bc:1e:3d:46:be:d4:73:b8:48:4d:63:89:d4:60:9d:11:36:
         2f:2b:a4:ea:9f:74:ad:fe:cc:a3:41:49:7b:42:c3:1c:d3:58:
         af:5e:0d:29:ae:0a:9c:16:ae:12:5e:bf:f3:35:67:c4:a4:16:
         3c:bf:7b:39:b2:70:8b:52:ac:85:be:1c:f5:96:ef:ed:3f:b9:
         84:00:8f:87:54:7b:0a:d0:e9:a5:28:6b:3c:2d:54:6f:cb:79:
         a2:ba:cb:c5:59:96:a8:9b:d8:06:d8:a6:8f:da:14:04:13:a3:
         c9:df:9e:a9:c1:dc:c5:fe:3b:4b:38:b6:b2:31:54:bf:4f:5f:
         bc:e7:9f:7a:ea:33:52:6f:f7:d2:06:e3:e6:a5:e5:d0:a3:f3:
         12:c8:96:18:37:a4:1b:6e:89:ba:85:33:45:22:3f:9f:51:ff:
         9c:23:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----