Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/a2b3e56ed1dd0ac8c2409618631e8780f10b5a13.roa
File:                     a2b3e56ed1dd0ac8c2409618631e8780f10b5a13.roa (raw, json)
Hash identifier:          paPSH3mZcY7qVxmDk367ncNXQ5xLBDgakkBEAarw+nQ=
Subject key identifier:   BE:CA:AE:AA:A0:07:C4:21:67:12:7A:C5:35:33:C8:7F:62:DC:9D:FA
Certificate issuer:       /CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
Certificate serial:       036782
Authority key identifier: AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/a2b3e56ed1dd0ac8c2409618631e8780f10b5a13.roa
Signing time:             Wed 24 Mar 2021 14:42:06 +0000
ROA not before:           Wed 24 Mar 2021 14:42:06 +0000
ROA not after:            Tue 24 Mar 2026 14:42:06 +0000
asID:                     269745
IP address blocks:        2803:2620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223106 (0x36782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
        Validity
            Not Before: Mar 24 14:42:06 2021 GMT
            Not After : Mar 24 14:42:06 2026 GMT
        Subject: CN=a2b3e56ed1dd0ac8c2409618631e8780f10b5a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:e5:9d:45:ca:c3:7f:ba:5e:a4:8d:95:0e:
                    34:07:90:6b:a8:ac:79:41:10:03:1f:52:db:0f:ab:
                    77:fe:24:3f:4b:eb:6e:90:ba:2a:4a:48:02:76:45:
                    42:fd:05:cd:f7:9f:6e:25:3b:65:cd:10:57:d7:90:
                    88:a6:cb:52:bb:3c:dd:7e:6f:eb:95:d4:bb:7d:a6:
                    94:6d:b3:7c:ce:ea:01:e7:bb:66:8a:e5:55:56:eb:
                    ae:95:b5:24:2a:94:3c:26:d8:14:cb:55:7f:17:63:
                    1a:e7:77:67:1e:3d:3e:e4:37:5e:5c:5e:ba:62:e9:
                    1e:6b:91:73:b7:c8:e9:7f:24:71:18:08:00:ea:56:
                    05:f9:3b:82:98:ed:ed:69:66:ac:65:f7:20:b1:43:
                    a2:cc:d6:bd:ae:df:94:75:1a:3d:b5:b2:48:f8:5d:
                    22:cd:96:e9:ec:2f:84:02:a4:de:76:c9:4c:cd:ea:
                    57:9d:40:39:42:26:3e:d6:df:a5:dd:fb:c2:6c:e4:
                    a6:22:5a:eb:85:b2:7d:95:24:30:4b:1d:61:32:7a:
                    9d:37:27:63:19:32:27:af:59:3c:80:b4:d9:37:f0:
                    88:c9:db:6b:b4:6c:76:e2:3e:e7:bf:ed:ed:a7:83:
                    af:09:6d:08:01:c3:6a:a9:00:f1:7a:8e:27:6e:6d:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CA:AE:AA:A0:07:C4:21:67:12:7A:C5:35:33:C8:7F:62:DC:9D:FA
            X509v3 Authority Key Identifier:
                keyid:AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/a2b3e56ed1dd0ac8c2409618631e8780f10b5a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/b67a5716e00aeccf404a86a23559e2b4aa264abf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2620::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:35:bf:54:ea:ba:c6:d3:4a:5f:84:fa:6a:fe:58:c0:15:15:
         34:ca:74:0f:1e:54:7a:43:0a:d7:83:a0:2d:c4:63:26:74:74:
         88:ea:ab:51:0b:3d:11:ff:ec:f0:94:de:79:ed:d6:d0:84:c7:
         45:0c:90:16:d5:e1:4d:31:ea:6e:29:6a:24:87:41:40:6b:4a:
         b3:2d:43:4d:6f:80:c9:2f:ab:6a:14:7b:1c:6d:66:97:5b:19:
         d3:9a:ec:47:89:7d:05:df:fb:b6:b8:e2:90:3a:08:9d:21:21:
         8a:96:56:65:71:96:71:2b:c3:ff:bb:58:33:86:6c:50:05:53:
         d4:95:ba:20:6b:fc:52:a4:0e:f7:96:d9:b7:98:18:e6:6f:99:
         2a:45:d2:e6:0c:d4:af:f6:6a:8b:6f:55:16:85:4a:ae:e6:80:
         d4:13:f0:13:3f:ba:17:68:10:8d:17:26:60:57:47:c5:1e:83:
         48:87:23:6c:8f:4c:52:d8:d1:59:33:62:1e:72:53:c9:e8:c9:
         9d:b8:62:f4:08:ee:b2:dc:fa:b7:92:22:15:07:4f:25:fa:12:
         9c:56:a5:6c:42:36:3c:7a:af:3e:e3:a4:81:ad:c1:fc:6d:52:
         7d:d5:d8:8b:c6:ec:ba:5b:9b:24:d8:c6:82:04:57:a1:63:86:
         ee:4c:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----