Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/bc9d27b4d8225a8485c57cba983d13150334cbb2.roa
File:                     bc9d27b4d8225a8485c57cba983d13150334cbb2.roa (raw, json)
Hash identifier:          hEKw7jxaw4s2xbbsJ5Oyfo6lVBMI77FPn+9rIoG+xYY=
Subject key identifier:   45:79:35:C2:AF:93:36:00:D1:75:B5:80:20:C8:93:CB:17:22:BC:58
Certificate issuer:       /CN=4765b8b9f74b776a4e530fc87f986c651911f727
Certificate serial:       06EFFB
Authority key identifier: F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/bc9d27b4d8225a8485c57cba983d13150334cbb2.roa
Signing time:             Tue 01 Jun 2021 17:55:33 +0000
ROA not before:           Tue 01 Jun 2021 03:00:00 +0000
ROA not after:            Thu 01 Jun 2023 03:00:00 +0000
asID:                     264754
IP address blocks:        2803:3f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454651 (0x6effb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765b8b9f74b776a4e530fc87f986c651911f727
        Validity
            Not Before: Jun  1 03:00:00 2021 GMT
            Not After : Jun  1 03:00:00 2023 GMT
        Subject: CN=bc9d27b4d8225a8485c57cba983d13150334cbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:74:08:85:f0:ca:39:ce:46:fe:29:85:6d:
                    ed:11:88:ef:d4:a5:e4:0d:7c:1c:1b:f5:1a:6e:f2:
                    8c:3c:2d:f9:bd:c6:5f:97:7c:aa:f3:32:03:a9:e2:
                    ea:f9:be:1b:d1:62:af:76:a7:e6:bd:e4:2e:10:fe:
                    31:70:10:02:b8:af:3d:ab:dc:89:83:85:ca:28:de:
                    d4:b0:bf:67:5a:e7:53:90:21:69:91:fc:3e:a4:7e:
                    0c:74:47:99:75:9b:82:e2:f6:61:4e:45:55:f5:67:
                    d3:f8:0e:b0:bc:c3:7a:60:03:78:15:d6:b4:be:07:
                    90:bf:87:6c:3c:a5:7a:71:30:5e:3b:64:6c:fd:ce:
                    6f:ac:77:a7:16:6f:19:f0:5b:51:11:8a:bc:cb:80:
                    ad:30:da:2e:ad:24:56:7e:8f:9a:51:98:b8:88:66:
                    ac:a7:07:04:60:cc:f2:8d:bc:65:53:ae:ce:bf:3d:
                    8c:39:6c:8e:61:4c:3d:4e:e9:a3:0c:0c:ff:ac:9b:
                    29:50:29:5a:9e:17:e8:1a:03:c2:95:9d:5a:e9:8e:
                    8e:a0:6c:45:11:35:54:6f:84:dd:73:8d:c1:9c:74:
                    37:50:26:8a:d5:2d:83:0d:fc:c5:43:c6:77:66:69:
                    4e:0e:e6:22:42:25:63:0d:c4:07:91:7c:6d:44:2e:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:79:35:C2:AF:93:36:00:D1:75:B5:80:20:C8:93:CB:17:22:BC:58
            X509v3 Authority Key Identifier:
                keyid:F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/bc9d27b4d8225a8485c57cba983d13150334cbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/4765b8b9f74b776a4e530fc87f986c651911f727.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:b4:11:74:31:cd:c6:06:62:84:93:39:4d:7d:dd:5d:13:
         b5:8c:3e:34:f8:29:46:f6:ba:6e:1c:81:ec:48:be:f9:c4:f8:
         eb:9b:00:71:b3:81:48:a8:20:0b:99:e3:c8:a5:cd:ae:71:c5:
         eb:be:4f:23:7d:82:a2:e0:62:eb:88:d3:32:7d:c3:0a:34:23:
         98:d3:b4:8f:43:f9:89:9b:3c:ab:2a:97:5e:03:38:ac:ad:a0:
         0d:3f:ac:b8:4c:b1:b6:9a:79:b0:75:f9:81:6b:d2:55:e1:c9:
         c6:66:13:8e:46:e6:02:a3:5e:9d:b9:33:80:1f:fe:c6:36:b2:
         72:be:00:18:a3:ea:d1:a7:cf:f3:25:ef:9f:ea:a0:11:ca:64:
         23:c7:dc:06:20:3d:b7:7b:d3:7e:44:63:c2:c1:d4:33:86:27:
         06:0c:b2:f4:c6:4b:bb:98:38:dc:94:5e:b2:3d:f8:ec:4d:89:
         11:7c:d1:a7:1e:2b:55:4d:14:17:26:a9:bc:4a:c0:bf:9d:c5:
         75:42:6a:23:fc:06:4f:e9:72:60:e4:2f:06:98:ca:a6:4b:86:
         f6:8a:ff:80:83:ed:5f:44:59:51:d3:5f:88:ab:b4:4c:d6:64:
         fd:3f:3f:ca:b4:08:fe:5b:44:a1:96:0e:65:71:b9:41:db:ac:
         02:36:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----