Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/74eb59d62d2519cb34893290482aa9138a53d4e0.roa
File:                     74eb59d62d2519cb34893290482aa9138a53d4e0.roa (raw, json)
Hash identifier:          HUDNH/o5NyH7QcLZnGThhgeDyZwnBNWrcp9DyWUZ+m0=
Subject key identifier:   A9:1D:27:C7:7B:8E:9E:5E:BA:7C:CD:CA:F7:38:CC:30:26:F4:ED:50
Certificate issuer:       /CN=928723b4ebd5246c0aa94baeaa44572b7b3662b3
Certificate serial:       0D3BDE
Authority key identifier: 42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/74eb59d62d2519cb34893290482aa9138a53d4e0.roa
Signing time:             Wed 24 Mar 2021 14:32:35 +0000
ROA not before:           Wed 24 Mar 2021 14:32:34 +0000
ROA not after:            Tue 24 Mar 2026 14:32:34 +0000
asID:                     5692
IP address blocks:        2800:340::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867294 (0xd3bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928723b4ebd5246c0aa94baeaa44572b7b3662b3
        Validity
            Not Before: Mar 24 14:32:34 2021 GMT
            Not After : Mar 24 14:32:34 2026 GMT
        Subject: CN=74eb59d62d2519cb34893290482aa9138a53d4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:64:75:a2:29:3e:ec:cc:17:40:3d:aa:1e:
                    c0:64:ec:16:0f:41:1e:c0:b7:b9:21:1e:92:06:28:
                    a3:45:08:4b:34:52:c2:8e:ed:0d:7f:15:c7:1d:f8:
                    5d:e4:c6:2d:c5:a5:99:92:0f:bf:8c:a1:66:7d:da:
                    0a:e7:a4:6d:2c:2b:6f:94:c1:0b:d8:86:fa:ca:04:
                    3b:31:fa:f8:b6:2a:95:d3:db:18:91:2d:2e:b3:60:
                    a2:0a:65:68:00:c2:85:f6:e2:9c:bd:03:21:94:ae:
                    75:5c:87:86:93:f3:7d:b6:91:94:7d:77:80:c4:18:
                    5e:a6:87:2c:aa:f9:e3:ec:0a:83:33:5f:d4:95:fb:
                    b4:bb:f8:b5:e3:80:5a:71:fd:d5:2f:58:06:4d:3d:
                    7a:1e:e6:f3:a1:8a:79:b2:ee:e6:8e:86:ff:89:48:
                    19:aa:c4:a8:1f:b5:1d:b2:96:09:85:18:6d:5b:7f:
                    ad:cf:e5:d7:88:f4:8d:59:52:cb:4d:2f:ba:a9:c9:
                    8c:a3:8d:0b:fe:b1:54:a4:b0:d3:44:c6:bc:4c:2b:
                    6d:bf:9b:18:21:d8:e0:88:00:32:5c:bd:d2:48:35:
                    94:0a:d5:bc:c5:8f:dc:e3:b2:7a:f4:9c:ff:ce:aa:
                    7e:90:2f:80:26:dd:d3:a0:a7:05:7f:96:6b:8d:15:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1D:27:C7:7B:8E:9E:5E:BA:7C:CD:CA:F7:38:CC:30:26:F4:ED:50
            X509v3 Authority Key Identifier:
                keyid:42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/74eb59d62d2519cb34893290482aa9138a53d4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/928723b4ebd5246c0aa94baeaa44572b7b3662b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:340::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:8d:a5:95:0e:bc:df:66:48:a7:f1:b0:ad:91:80:27:8c:
         cc:b7:93:14:8c:59:8a:5e:03:34:7d:4c:bc:f9:76:31:09:30:
         0c:9e:26:ee:b6:e4:a5:29:5b:ff:74:58:db:68:a1:38:cf:bf:
         ff:38:d0:06:a0:b6:a8:47:53:0c:b6:3a:f2:f6:b4:99:95:08:
         ef:44:fe:86:17:c1:06:81:6d:3f:6b:c1:a2:56:f8:c3:fb:65:
         ca:d6:03:3e:20:58:c7:8e:35:bf:80:61:31:6a:21:f5:23:0d:
         e8:55:a4:bf:0a:df:59:f5:c6:90:33:8c:3e:56:c9:ff:ed:07:
         de:7e:59:f8:98:41:09:51:b5:8d:9f:fc:96:6c:d3:5c:db:3f:
         13:15:02:e8:4f:5a:d7:23:e1:0f:af:46:7f:93:da:d2:5e:9a:
         b7:79:a6:3e:3e:1f:0f:3f:5c:b6:e9:91:dc:4a:14:8e:7e:46:
         dc:5a:65:d6:ee:5f:64:5b:50:c5:fc:b8:cc:1d:7c:de:bd:3d:
         66:f8:73:50:37:60:90:f8:78:ae:40:d4:85:f0:28:71:fc:f0:
         7d:08:ca:b6:e3:2c:d3:1c:44:c7:28:1a:f0:c5:42:6b:9f:b6:
         2b:a7:67:f6:5b:f5:b3:55:ba:8a:45:b4:15:ef:4d:ed:81:b1:
         2b:fa:f6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----