Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/e82d7d734b20419c88968b4c85aef50dee28dda4.roa
File:                     e82d7d734b20419c88968b4c85aef50dee28dda4.roa (raw, json)
Hash identifier:          aQBzDbwuFkLw1Yuyt4njH1DL/oSctCNauzrp8bnjfF0=
Subject key identifier:   0B:70:DF:C2:B1:90:E1:89:01:3C:81:68:7A:6C:09:55:AA:10:59:C1
Certificate issuer:       /CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Certificate serial:       0D55CF
Authority key identifier: B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/e82d7d734b20419c88968b4c85aef50dee28dda4.roa
Signing time:             Wed 24 Mar 2021 14:32:54 +0000
ROA not before:           Wed 24 Mar 2021 14:32:54 +0000
ROA not after:            Tue 24 Mar 2026 14:32:54 +0000
asID:                     27839
IP address blocks:        2803:9400::/32 maxlen: 49

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873935 (0xd55cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
        Validity
            Not Before: Mar 24 14:32:54 2021 GMT
            Not After : Mar 24 14:32:54 2026 GMT
        Subject: CN=e82d7d734b20419c88968b4c85aef50dee28dda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:7c:6c:b4:e0:45:69:ca:44:0a:19:dc:10:
                    1f:bd:ba:55:3f:ea:5a:a5:e4:94:65:b2:65:86:11:
                    52:16:fb:33:ec:bd:a4:0d:a2:b1:39:21:bf:04:56:
                    fb:7a:9f:23:8a:9d:82:2f:30:d5:1b:41:e9:e2:36:
                    f5:26:20:cd:76:44:22:31:6d:54:5e:d0:06:13:0a:
                    b0:f1:bd:d8:13:a8:1b:1f:4c:95:53:24:10:44:d1:
                    96:c7:18:02:ad:15:af:8b:39:16:39:45:ad:20:10:
                    5d:25:97:7c:58:56:fe:26:ee:fc:8a:07:c5:33:6c:
                    ac:c9:bc:a2:37:0f:63:9a:84:fb:61:b2:db:10:92:
                    98:c3:b6:d6:c3:90:da:20:8f:80:e8:ae:91:d0:50:
                    e2:0e:d4:11:da:f8:1c:d9:36:04:68:ea:fd:d7:99:
                    71:3c:1c:19:5e:4b:e7:57:9b:80:77:4b:3b:ce:67:
                    7c:84:b7:4c:36:3a:8f:6a:0b:b2:e7:08:a2:51:fd:
                    1e:e1:fa:d0:e0:9b:90:ba:52:f0:59:c4:c7:66:f5:
                    f5:b9:19:d9:1f:0f:bc:2c:64:c3:9b:50:85:85:4a:
                    80:57:a7:c9:2e:47:01:c7:20:6d:d6:f7:65:17:59:
                    0d:f3:80:2a:5b:60:b1:87:73:a9:f0:d9:ae:d7:8e:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:DF:C2:B1:90:E1:89:01:3C:81:68:7A:6C:09:55:AA:10:59:C1
            X509v3 Authority Key Identifier:
                keyid:B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/e82d7d734b20419c88968b4c85aef50dee28dda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9400::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:fd:c8:fe:26:de:50:c4:3f:90:73:61:29:d1:26:8d:31:
         29:3a:7c:48:23:ec:4c:de:66:e5:97:7b:22:33:fb:d2:62:e1:
         5a:da:0d:92:cb:28:06:7f:ef:30:31:c9:34:65:0f:20:a2:c2:
         21:e0:b0:4c:d2:43:eb:78:fa:80:9b:b2:23:5f:c9:c3:84:e4:
         f8:57:90:18:c5:86:42:e8:de:d9:e9:8c:ad:98:50:33:44:f2:
         d8:2c:25:b3:c9:43:65:ef:72:d2:09:3b:d0:1f:0c:25:a1:c6:
         90:b2:00:ea:14:e9:88:40:31:5f:dd:58:b2:f4:90:5e:8b:be:
         62:dd:a9:83:19:55:44:c2:dd:70:d5:50:f4:61:5b:a1:96:ff:
         8a:64:33:34:da:35:76:89:4f:de:bc:57:29:81:5a:7c:fc:3a:
         79:df:d2:b9:1c:0f:08:46:36:f7:dd:82:22:bd:cf:ac:68:b8:
         b8:7f:d8:a0:15:2f:a2:06:f4:09:ce:a2:ec:cf:58:33:c5:84:
         3b:f2:75:30:8f:f3:a4:c6:6c:c5:a3:86:25:a4:66:83:1d:d2:
         eb:42:0f:5c:82:07:77:43:a6:a7:28:7d:24:06:c5:5d:14:fb:
         ec:30:61:dc:da:16:55:39:de:97:dc:96:f5:43:17:0e:fc:7e:
         c6:01:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----