Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/ed4c431d8444936eb8a571291595a4c6c3d7d5b3.roa
File:                     ed4c431d8444936eb8a571291595a4c6c3d7d5b3.roa (raw, json)
Hash identifier:          SrJR3IiOK9vQc41wzDclEuW/X3vRrP5+ynJSbSFMwk0=
Subject key identifier:   6C:BB:0A:94:5A:70:73:B6:EB:EB:E8:3F:E4:14:D2:D6:33:E4:EE:A7
Certificate issuer:       /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial:       0CAE94
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/ed4c431d8444936eb8a571291595a4c6c3d7d5b3.roa
Signing time:             Wed 24 Mar 2021 14:33:01 +0000
ROA not before:           Wed 24 Mar 2021 14:33:01 +0000
ROA not after:            Tue 24 Mar 2026 14:33:01 +0000
asID:                     265826
IP address blocks:        2803:7420::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831124 (0xcae94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
        Validity
            Not Before: Mar 24 14:33:01 2021 GMT
            Not After : Mar 24 14:33:01 2026 GMT
        Subject: CN=ed4c431d8444936eb8a571291595a4c6c3d7d5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:12:56:ed:a3:d2:6e:a6:57:32:da:c0:e7:
                    d5:41:a4:05:15:fa:a9:8a:55:e0:20:83:0c:0f:9f:
                    00:b8:35:7d:ed:cb:2f:57:9e:58:48:20:33:cb:28:
                    60:d5:5c:7f:c2:50:96:87:95:6a:8f:e9:5e:47:58:
                    24:6e:6f:36:8b:a9:8d:26:7f:a2:17:07:b2:d2:6b:
                    78:cf:59:18:5f:24:f9:bb:11:af:60:06:ee:e0:19:
                    3d:f4:f8:1f:ba:1a:ba:64:31:5a:66:e9:f9:39:77:
                    3b:78:ec:a3:a7:8e:02:25:2a:eb:0f:6e:a0:09:e0:
                    bc:ba:a8:df:12:a5:41:1a:e2:37:15:57:61:0b:45:
                    ab:cd:e1:70:70:75:cc:3d:ef:fe:db:9d:d4:84:a3:
                    c9:0c:f9:93:81:bd:47:fd:5f:6a:10:b1:b5:e4:53:
                    ac:cf:a1:ed:4b:a6:5a:a9:fa:fc:f2:fa:a1:6c:e1:
                    a9:73:1e:7f:f0:42:9d:45:46:c0:2c:1a:fa:1c:9b:
                    3f:76:c6:7a:d4:cc:03:29:f9:0a:96:2a:e6:db:10:
                    67:c7:d1:18:bb:ca:31:5f:86:7b:94:ff:ec:32:7e:
                    ea:52:53:cd:c2:97:5c:e3:3d:cf:f1:25:69:df:35:
                    54:5e:57:d1:32:8a:cc:54:b7:94:98:d8:40:c7:8a:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BB:0A:94:5A:70:73:B6:EB:EB:E8:3F:E4:14:D2:D6:33:E4:EE:A7
            X509v3 Authority Key Identifier:
                keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/ed4c431d8444936eb8a571291595a4c6c3d7d5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7420::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:a0:ac:2c:76:99:ea:ba:16:9a:c2:2e:0f:43:98:4f:b5:39:
         a0:bc:f5:5f:3e:7c:38:52:9a:e5:78:3b:cb:93:e0:b8:b0:00:
         9d:3a:1c:79:a8:26:50:fb:95:8a:11:35:63:84:1d:1e:9e:f8:
         0d:aa:a1:19:28:96:17:a0:95:65:d1:5a:46:38:22:f1:a2:30:
         3d:d8:25:71:cb:b3:5b:2e:b9:12:d6:fa:50:64:8e:7d:8e:5d:
         95:c4:a2:fd:53:b3:bb:28:8f:c0:21:58:9c:af:e9:16:12:c3:
         90:24:7f:3e:72:47:7c:c0:92:aa:89:7b:08:6f:17:d2:35:f4:
         e2:70:f1:c2:43:3f:e3:40:b6:4b:4f:71:2a:4b:58:ca:a3:f5:
         5e:e9:a1:c3:68:1c:1b:82:a6:16:62:a4:ab:d2:7d:e3:1a:c9:
         03:87:c1:fe:60:1e:ed:b8:b3:04:55:2d:64:bb:d1:c8:b3:29:
         b8:c1:e5:75:f2:c0:5f:48:cf:be:d6:92:91:a7:a4:c3:7b:be:
         e0:8b:1e:c6:66:24:44:5d:9c:71:53:41:89:d5:27:5c:74:71:
         f8:e0:da:8e:1c:76:1d:d1:41:5b:b8:58:0c:44:54:5f:4f:82:
         33:1b:b3:cb:94:a5:43:fa:e5:37:e8:7b:fc:74:e6:d1:59:47:
         18:c7:71:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----