Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/e4c94b9b04cc360691dde518605f569cd68d40e3.roa
File:                     e4c94b9b04cc360691dde518605f569cd68d40e3.roa (raw, json)
Hash identifier:          i+lDxAryxN5VgOqicpX/rd5t9NcRKVXxFuKi21gGtbk=
Subject key identifier:   06:21:17:C4:3F:A8:65:10:0B:73:00:9F:DE:C1:E4:FC:DB:0A:B7:F7
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       0D84AF
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/e4c94b9b04cc360691dde518605f569cd68d40e3.roa
Signing time:             Wed 24 Mar 2021 14:40:18 +0000
ROA not before:           Wed 24 Mar 2021 14:40:18 +0000
ROA not after:            Tue 24 Mar 2026 14:40:18 +0000
asID:                     266790
IP address blocks:        2803:a0a0::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885935 (0xd84af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Mar 24 14:40:18 2021 GMT
            Not After : Mar 24 14:40:18 2026 GMT
        Subject: CN=e4c94b9b04cc360691dde518605f569cd68d40e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:02:ec:08:69:c6:64:1c:d5:b0:6f:78:80:
                    80:fe:fe:4d:df:6d:ac:19:d7:8c:3f:b2:35:64:3c:
                    72:e3:37:c1:98:79:ea:d8:6f:d0:4d:39:29:c8:58:
                    7a:32:3c:01:39:4c:d7:ed:95:a3:51:4f:31:1c:0e:
                    de:a2:ed:9a:ab:44:72:5f:1f:a6:6b:21:67:6e:82:
                    26:20:53:28:c1:8b:ae:10:27:bc:b7:3b:70:9c:2f:
                    d6:be:f3:16:23:16:49:f7:40:ba:8e:c6:50:af:5a:
                    87:1d:e2:82:68:75:08:bb:51:06:c5:87:c0:d6:14:
                    ba:e1:1c:0f:12:b6:dd:cc:38:70:21:69:cb:a3:80:
                    34:cc:9f:29:0e:b6:54:40:d4:3e:17:16:f8:30:43:
                    96:ef:16:b8:e0:42:de:11:63:92:d8:f7:7e:34:1c:
                    77:3c:8c:d5:7c:e0:9e:30:21:45:7c:cf:c9:37:5d:
                    e8:b3:39:ac:c9:67:ea:2e:15:84:4f:56:b0:18:c5:
                    fb:d7:b1:d4:fb:0c:b4:62:c3:6e:e9:d7:9f:9f:db:
                    9a:0a:ed:ab:87:e0:30:bc:1a:83:6a:e3:2b:c8:0e:
                    03:6d:af:d3:62:39:37:fe:fe:14:30:69:af:35:45:
                    eb:5a:af:4b:0f:35:cf:3e:02:8e:cb:87:f4:ce:eb:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:17:C4:3F:A8:65:10:0B:73:00:9F:DE:C1:E4:FC:DB:0A:B7:F7
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/e4c94b9b04cc360691dde518605f569cd68d40e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:6e:62:ef:af:86:87:87:88:2e:f8:38:69:20:8c:37:ef:
         6e:e0:5c:d0:85:fa:35:fb:26:cb:09:b9:f2:61:10:f4:15:a9:
         c2:74:c5:05:69:49:3f:69:12:0e:0d:f0:c5:b1:b1:ad:28:7b:
         da:33:8d:99:f4:1e:3d:25:8d:be:f5:1a:58:3b:77:fe:96:3a:
         76:3d:5e:09:e9:0d:ff:93:85:85:d6:3d:21:50:4c:ad:3d:f6:
         d2:1c:34:b4:a8:72:24:d6:ce:3a:22:e9:de:5b:fc:90:fb:18:
         89:5b:f6:59:03:2b:38:4f:44:14:5f:6d:4f:7c:0f:d2:06:a6:
         c1:7f:99:ae:b9:f6:89:ec:62:5f:f4:e3:48:b8:ae:bb:14:92:
         a2:20:17:44:2b:13:fe:e8:84:b2:52:ff:b8:8a:58:d1:2c:c0:
         12:01:f0:64:1c:99:91:4a:e4:ae:b9:5b:99:3b:ea:8e:cb:e8:
         43:5e:b7:04:cd:19:de:70:70:62:e7:c9:3a:9b:ee:c2:c4:44:
         ea:a4:c8:f6:b8:81:18:ca:c2:d7:b3:0c:4f:4e:41:a2:c4:db:
         c8:4d:91:93:34:c2:ca:6c:09:47:1a:f0:5f:50:90:d1:a6:52:
         8f:f9:e3:46:06:d2:59:15:ac:2b:2a:c9:2f:3b:66:b9:96:17:
         ca:f5:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----