Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/ca4b357d732a9a123c74e0d2e16c06bc3dbb779a.roa
File:                     ca4b357d732a9a123c74e0d2e16c06bc3dbb779a.roa (raw, json)
Hash identifier:          9k8zgrRnzOMjfR/5d7JicvT43Rtawl8bJmozFJ4ehiE=
Subject key identifier:   BB:FC:5E:C6:FA:59:E6:80:19:A4:3C:CF:5F:AB:43:14:5A:12:BD:C9
Certificate issuer:       /CN=731610640063561b294840cbdb7b67bb5e4dba3d
Certificate serial:       0D6FF2
Authority key identifier: 59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/731610640063561b294840cbdb7b67bb5e4dba3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/ca4b357d732a9a123c74e0d2e16c06bc3dbb779a.roa
Signing time:             Wed 24 Mar 2021 14:46:12 +0000
ROA not before:           Wed 24 Mar 2021 14:46:12 +0000
ROA not after:            Tue 24 Mar 2026 14:46:12 +0000
asID:                     265691
IP address blocks:        2803:f1c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880626 (0xd6ff2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731610640063561b294840cbdb7b67bb5e4dba3d
        Validity
            Not Before: Mar 24 14:46:12 2021 GMT
            Not After : Mar 24 14:46:12 2026 GMT
        Subject: CN=ca4b357d732a9a123c74e0d2e16c06bc3dbb779a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:23:a9:2d:f8:d4:d5:88:89:c3:8c:8a:95:
                    8e:b9:bd:37:2a:6c:3d:24:73:20:e8:27:51:15:e2:
                    5e:37:4c:c4:4f:39:be:09:34:f2:55:5b:85:e4:5b:
                    4f:46:4a:52:aa:64:ae:a0:ad:99:66:d1:24:e3:33:
                    68:b8:b5:a5:61:85:70:df:63:7a:0b:87:31:1c:89:
                    ea:3b:22:54:3a:9e:d7:c9:18:ae:e8:d4:a9:09:3e:
                    c5:70:2a:56:1a:58:fc:c6:ad:80:b2:ea:06:b1:8c:
                    1e:7e:d0:65:a2:76:7e:a1:10:af:a2:c4:1d:98:e6:
                    5b:25:b5:3f:37:7e:66:b4:72:bc:b0:41:f6:94:e3:
                    a2:70:7f:8f:92:b3:90:9e:12:4f:b6:8b:4f:53:35:
                    7e:4d:bc:d6:35:34:3a:65:0c:f2:ad:27:29:48:67:
                    9d:d5:09:07:2b:31:63:6f:a6:4c:32:24:14:3c:4c:
                    a0:fe:16:23:d2:0c:64:8f:0f:0f:60:f8:b6:de:a7:
                    e3:10:17:c7:f8:39:0d:c8:b9:18:7a:07:14:c8:e5:
                    49:ac:7c:2c:4d:fe:47:eb:94:e2:90:e8:02:94:2b:
                    6c:f1:d0:a6:51:b4:3f:64:fe:ba:29:29:5d:d3:da:
                    dc:91:48:18:35:b4:5b:83:01:51:5a:59:7c:71:43:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FC:5E:C6:FA:59:E6:80:19:A4:3C:CF:5F:AB:43:14:5A:12:BD:C9
            X509v3 Authority Key Identifier:
                keyid:59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/731610640063561b294840cbdb7b67bb5e4dba3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/ca4b357d732a9a123c74e0d2e16c06bc3dbb779a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/731610640063561b294840cbdb7b67bb5e4dba3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:24:63:b8:69:e5:5e:fb:69:c9:95:7f:60:c1:47:e6:39:
         8d:d2:e3:7b:07:06:69:cd:ee:5d:eb:2b:35:c8:e3:00:7b:b8:
         e4:7a:a2:ab:3c:59:cf:f1:7c:15:ba:34:df:62:3e:32:80:af:
         29:07:01:f9:3a:65:f6:68:79:14:dc:b7:04:bc:ce:a8:ed:0d:
         1a:c5:1f:e8:26:1d:c7:ac:66:1d:6b:ba:2d:bd:b1:59:a6:4d:
         b3:d5:a4:ca:c8:f2:5d:fe:29:88:0f:fe:82:50:da:3d:d5:b6:
         37:3f:07:96:da:ed:54:33:69:43:05:38:4c:3b:5f:c0:68:ef:
         40:f2:af:e8:bd:2c:b8:5d:23:2b:d2:cd:a8:b5:a9:d6:3c:34:
         9a:7e:a2:eb:3f:be:b5:b4:7e:16:fb:9f:51:09:46:fb:3f:42:
         0a:f7:cf:5d:74:25:4a:0d:87:7b:74:d0:74:02:d0:b1:02:ef:
         c6:e2:d7:b1:5a:01:3b:a0:c5:44:3a:65:e4:fc:b2:0c:e2:c2:
         3c:c7:6c:1c:63:90:2d:60:e2:ba:d9:1b:90:e9:bc:2d:11:ec:
         56:b6:1b:50:c7:0f:de:1e:bb:00:8d:ca:43:27:a5:e6:e5:2f:
         73:81:a0:7c:31:c8:df:cf:e8:59:b0:6f:c9:90:c6:69:31:9d:
         93:6a:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----