Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/6a554a8152454b6ffc8a1ecb1eaaec73bd49094c.roa
File:                     6a554a8152454b6ffc8a1ecb1eaaec73bd49094c.roa (raw, json)
Hash identifier:          RQlZ8gGyd+TpGHvkLFWySiIh1yyJz+cHW0N+kshMfBk=
Subject key identifier:   5B:5C:D5:CA:BA:67:D0:B3:02:2E:F2:F8:1A:4C:74:4C:C1:11:F1:27
Certificate issuer:       /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial:       0D4499
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/6a554a8152454b6ffc8a1ecb1eaaec73bd49094c.roa
Signing time:             Wed 24 Mar 2021 14:36:20 +0000
ROA not before:           Wed 24 Mar 2021 14:36:20 +0000
ROA not after:            Tue 24 Mar 2026 14:36:20 +0000
asID:                     262186
IP address blocks:        2803:a5c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869529 (0xd4499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Validity
            Not Before: Mar 24 14:36:20 2021 GMT
            Not After : Mar 24 14:36:20 2026 GMT
        Subject: CN=6a554a8152454b6ffc8a1ecb1eaaec73bd49094c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:73:1c:d4:e9:6f:c4:7b:81:a6:82:df:5a:
                    66:1c:38:b4:fa:90:7d:ac:86:5c:a8:7a:50:0e:0e:
                    66:d0:6a:59:6e:4c:22:68:09:2e:5e:3c:41:87:4a:
                    3a:20:4b:a4:4e:8b:26:c3:2e:69:2d:e9:61:39:36:
                    b5:bf:d0:93:6e:11:9e:bf:7b:2d:e2:93:52:5f:f1:
                    30:17:02:9e:cb:6b:01:1c:f8:1b:51:74:dd:87:a5:
                    b6:dc:a0:36:13:97:ca:ea:cd:59:31:b9:ee:6e:38:
                    2e:c6:73:7c:2a:8e:0e:52:9a:e6:a8:52:f4:82:94:
                    ef:c2:2d:94:98:d9:b2:b3:58:20:66:39:c7:f1:73:
                    1c:c9:42:7f:de:2a:31:08:9b:22:39:fe:c4:73:46:
                    50:b3:9b:5a:85:d5:94:91:9f:35:7b:52:af:46:a2:
                    e5:d4:10:42:53:84:6c:a0:33:84:32:fd:b7:06:a2:
                    1f:4e:0f:28:27:8b:04:2d:89:20:78:69:0f:3d:31:
                    a2:1f:35:12:e7:db:d9:c4:e0:c9:22:1c:a7:8a:8b:
                    2b:57:c5:89:2e:40:6c:87:ae:3d:1e:00:b9:0f:14:
                    40:eb:83:64:f1:55:1c:65:f1:7b:b3:11:95:95:0b:
                    a7:b1:a6:9b:7b:61:67:bb:1e:df:4a:41:3b:ed:2f:
                    65:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:D5:CA:BA:67:D0:B3:02:2E:F2:F8:1A:4C:74:4C:C1:11:F1:27
            X509v3 Authority Key Identifier:
                keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/6a554a8152454b6ffc8a1ecb1eaaec73bd49094c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:73:e2:da:9f:c6:57:6d:a5:8b:0b:b2:87:1b:72:5d:62:8b:
         c0:2d:ab:47:8c:d6:b3:01:9d:81:0f:8f:1d:6a:78:34:b9:f0:
         ed:6b:a9:3e:55:dc:bf:58:ba:76:ac:c9:5b:03:96:e6:63:3e:
         4d:ef:9a:3d:bd:25:18:14:ba:07:84:33:e1:25:d6:61:70:8a:
         32:7d:33:72:15:fa:da:f2:ec:36:3f:2c:43:48:9e:97:d6:1a:
         a8:e0:de:5e:b3:1f:d3:52:22:7d:cc:ef:9d:8e:60:c1:b4:83:
         6b:31:e3:c4:62:94:65:fa:ba:ee:a4:c0:19:14:a9:2d:46:52:
         1b:40:0d:73:81:45:fb:c8:1c:27:16:76:f9:16:98:79:68:e7:
         30:9e:44:e4:fc:8f:c5:1e:37:76:da:fe:72:9c:09:5a:c0:cd:
         66:99:be:79:63:cc:90:d5:de:78:aa:a8:ee:91:41:97:e9:dd:
         d1:db:3d:e0:a6:c9:19:ce:14:ce:43:e6:96:36:9d:69:a2:d0:
         2d:e2:49:21:76:4c:a1:72:b4:13:d5:2a:41:f9:39:d8:44:ac:
         65:1c:10:b5:92:7e:a1:b9:a2:12:f0:2e:f5:0a:16:91:28:18:
         61:ba:67:c2:9f:55:ae:12:67:a5:ac:78:bd:5d:16:fd:4a:18:
         4a:91:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----