Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/d6a9eee89032e3cadd2d2016b55a6cb83e1220c0.roa
File:                     d6a9eee89032e3cadd2d2016b55a6cb83e1220c0.roa (raw, json)
Hash identifier:          D1+JXDUfptEspD0Olm59pG85Bzks1q8d/8cUXmolys4=
Subject key identifier:   7A:63:14:38:FE:6C:21:32:9E:7D:EB:27:D9:E7:B3:FB:05:CC:E4:DA
Certificate issuer:       /CN=1c726411b8b37f2fddf7b63e09523909f26f96b7
Certificate serial:       0D9020
Authority key identifier: 4E:75:D0:94:23:D9:BE:6A:E9:E1:6A:30:C5:39:D8:B0:06:10:AC:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c726411b8b37f2fddf7b63e09523909f26f96b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/d6a9eee89032e3cadd2d2016b55a6cb83e1220c0.roa
Signing time:             Wed 24 Mar 2021 14:31:08 +0000
ROA not before:           Wed 24 Mar 2021 14:31:08 +0000
ROA not after:            Tue 24 Mar 2026 14:31:08 +0000
asID:                     266768
IP address blocks:        2803:4f20::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888864 (0xd9020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c726411b8b37f2fddf7b63e09523909f26f96b7
        Validity
            Not Before: Mar 24 14:31:08 2021 GMT
            Not After : Mar 24 14:31:08 2026 GMT
        Subject: CN=d6a9eee89032e3cadd2d2016b55a6cb83e1220c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4d:3c:1c:31:46:d5:20:57:bf:fd:00:b2:8c:
                    c9:5c:48:b5:88:c8:00:13:a0:cd:6f:80:ec:a1:60:
                    b8:c2:c5:04:c6:8d:72:0b:aa:ab:a7:e9:c6:66:35:
                    4a:16:d3:cf:fd:53:97:8a:c0:6b:59:e7:23:d3:9e:
                    d1:52:58:2f:ac:26:8a:42:b6:17:19:53:2e:07:be:
                    d3:ed:2a:91:f7:b6:68:57:20:0d:07:70:a2:fc:2c:
                    32:24:11:33:dd:ce:07:5b:ed:e9:3a:94:87:59:b1:
                    d8:d7:7f:61:ef:cf:04:ac:46:3a:37:83:51:ef:ee:
                    15:74:b2:55:a1:38:90:33:c2:4f:1a:c1:0c:b3:be:
                    a3:84:8a:5a:bf:04:93:d3:13:9f:95:ca:6e:61:d3:
                    06:79:49:d0:f7:a6:61:51:81:a5:5f:a9:7a:27:3c:
                    cf:3b:0d:c7:a7:7e:56:ad:a6:c3:77:c5:15:61:cb:
                    21:f2:51:34:99:a9:62:67:c3:ab:ae:52:8e:59:c9:
                    39:e0:3e:3b:44:ad:19:0b:ef:51:3d:0a:ca:a5:94:
                    47:09:80:e5:3d:7b:12:27:f9:cc:96:91:28:2e:91:
                    33:7c:7e:85:f5:d2:3e:65:a0:4d:87:e7:04:e7:1d:
                    2f:66:38:d0:53:52:9e:ae:71:2b:95:03:78:ac:8c:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:63:14:38:FE:6C:21:32:9E:7D:EB:27:D9:E7:B3:FB:05:CC:E4:DA
            X509v3 Authority Key Identifier:
                keyid:4E:75:D0:94:23:D9:BE:6A:E9:E1:6A:30:C5:39:D8:B0:06:10:AC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c726411b8b37f2fddf7b63e09523909f26f96b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/d6a9eee89032e3cadd2d2016b55a6cb83e1220c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/1c726411b8b37f2fddf7b63e09523909f26f96b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:ed:a8:2c:56:fd:79:b1:67:7e:57:a7:cc:a0:76:5f:8b:
         75:af:1d:5e:43:5f:cc:0a:5f:49:ea:29:85:e4:c0:59:ee:cf:
         4f:0e:4b:cf:c0:7b:98:12:3f:56:12:d8:cc:86:53:5c:5c:11:
         e2:b8:e8:26:c1:5a:aa:8c:8f:5d:bc:1a:29:e2:d6:8d:5e:3e:
         13:bb:09:b0:cc:d4:5e:e9:bc:7b:52:7f:58:1c:c3:35:c2:ff:
         c7:2d:7b:32:71:09:7c:be:d5:ac:a9:dc:1c:f5:99:e6:e1:fd:
         2f:ca:28:04:83:63:6b:e3:6c:44:2f:69:25:00:e0:b4:40:b8:
         e7:7f:f6:3e:cc:72:12:d2:5b:0d:4c:fb:9f:b8:20:83:67:82:
         7d:ce:f6:29:3e:e5:40:05:1a:bc:67:e7:e6:01:90:1b:bf:64:
         1e:1a:83:7f:2f:7a:85:c3:9d:05:1b:d0:ea:37:95:a5:36:0f:
         cb:64:e7:c4:e4:88:6e:cf:24:ee:3f:4f:b0:99:52:59:96:04:
         ec:79:73:c2:25:12:02:ac:ac:5d:0a:b6:0e:25:91:32:e0:2b:
         9e:58:e1:2c:5c:2e:08:a8:a1:43:be:4e:86:db:ad:46:d8:00:
         3e:6b:bd:a2:11:64:f9:c8:40:f1:24:cf:ce:64:d8:7a:08:12:
         fc:ba:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----