Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/9f1d3fe4d08f4f2cd11b559a4574898c42400a7e.roa
File:                     9f1d3fe4d08f4f2cd11b559a4574898c42400a7e.roa (raw, json)
Hash identifier:          Xle1O7v6YD+fg2EEc+jBk7DSp4Jx1AjOnpisxk65VjQ=
Subject key identifier:   9C:EB:04:FD:CA:0D:94:8D:9F:DC:4D:0A:CB:A9:DD:DE:9A:05:C1:43
Certificate issuer:       /CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
Certificate serial:       0A0233
Authority key identifier: E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/9f1d3fe4d08f4f2cd11b559a4574898c42400a7e.roa
Signing time:             Wed 24 Mar 2021 14:38:20 +0000
ROA not before:           Wed 24 Mar 2021 14:38:20 +0000
ROA not after:            Tue 24 Mar 2026 14:38:20 +0000
asID:                     269921
IP address blocks:        2803:a2e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655923 (0xa0233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
        Validity
            Not Before: Mar 24 14:38:20 2021 GMT
            Not After : Mar 24 14:38:20 2026 GMT
        Subject: CN=9f1d3fe4d08f4f2cd11b559a4574898c42400a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:8b:df:5e:60:9d:37:97:f7:fd:2a:ea:38:
                    de:21:78:e7:c0:e6:63:db:00:4e:8b:97:13:10:52:
                    84:c4:1b:30:2b:45:15:c2:25:60:5a:59:65:1d:60:
                    39:20:f6:dd:47:3a:e3:93:8b:a1:10:c3:6d:5d:83:
                    1a:89:c9:91:60:f4:6c:46:b0:01:20:22:73:9f:93:
                    e5:64:4e:b0:73:38:e8:24:32:17:d6:f7:07:23:03:
                    45:f6:43:70:0a:22:91:62:0b:62:3c:e2:8e:1b:d3:
                    66:63:bc:d6:01:6a:93:04:d8:b1:bc:ef:ba:b4:ef:
                    27:b2:a4:c6:b0:a8:44:d6:99:33:e7:1e:fc:62:7a:
                    39:f9:2b:e3:44:71:8d:83:8e:ff:18:e4:24:51:c6:
                    2a:a2:c2:c7:e5:76:49:47:7e:5b:3c:25:fb:e1:08:
                    81:ec:a5:62:2e:dc:16:48:ef:0c:cc:f6:a2:75:88:
                    6e:65:ba:1d:52:06:01:67:1f:48:4a:20:55:ea:a0:
                    4c:ff:08:fd:35:bd:ef:63:7a:58:a2:84:bc:96:ad:
                    7f:5c:5c:68:1d:ca:3d:dd:12:61:e5:62:30:90:77:
                    d6:6d:7a:99:68:b3:74:91:67:24:65:0d:04:ee:8d:
                    8a:a2:72:ea:8d:84:0a:89:c3:9b:a9:24:b4:b5:f6:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:04:FD:CA:0D:94:8D:9F:DC:4D:0A:CB:A9:DD:DE:9A:05:C1:43
            X509v3 Authority Key Identifier:
                keyid:E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/9f1d3fe4d08f4f2cd11b559a4574898c42400a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/b1692ab68c975b69e2411b06e4249ca2f134a1c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:c9:d0:fa:59:75:87:77:3b:95:33:90:48:0a:48:a1:20:
         96:ac:03:99:63:68:d5:69:4c:f0:05:71:e9:8e:d5:74:76:2e:
         3b:28:46:f7:68:dc:c8:aa:da:0e:19:c5:4b:d4:2b:18:be:3f:
         c9:95:7d:0a:89:e5:18:c3:f0:23:94:5a:f5:5b:c5:88:67:86:
         fd:3a:18:ee:39:56:d5:85:46:1b:09:40:ce:c7:aa:1b:2d:c3:
         58:53:e2:0c:53:80:5a:48:1d:d5:71:cd:c3:26:94:cc:7c:2e:
         7a:b7:ba:36:49:03:57:26:92:61:ab:b2:1b:e7:73:06:55:9f:
         bd:46:af:fa:5e:5c:4a:f3:8a:2f:7b:90:0e:d1:c4:9c:b5:ca:
         d8:28:70:78:40:20:47:2d:99:78:b1:cf:03:56:75:c7:3e:ac:
         ef:a2:bd:16:b4:94:2a:2f:db:05:7d:a4:8c:32:ab:26:0b:ee:
         15:d9:84:ca:7c:cc:3f:15:e8:92:d5:93:b6:a3:9c:70:e8:51:
         70:33:83:7f:d9:09:a7:31:a5:0b:51:e8:7d:10:f8:39:b6:5c:
         da:65:d0:b8:58:d5:ff:30:de:e4:ad:74:7b:6a:4c:f8:f2:f7:
         79:e0:0b:78:50:e5:44:51:bf:e5:4c:e3:74:12:5f:dc:11:e0:
         93:ac:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----