Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/42badaeaead1c9c1f8f35043c51f0652574a10c2.roa
File:                     42badaeaead1c9c1f8f35043c51f0652574a10c2.roa (raw, json)
Hash identifier:          G0iGOq3klY2cDImSoH5POebxAol9vAZ+25+aOgdJ4/8=
Subject key identifier:   FE:83:69:1E:8F:8B:32:AC:78:19:48:DA:0C:18:BA:16:C7:CA:4C:11
Certificate issuer:       /CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
Certificate serial:       0D3BA0
Authority key identifier: C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/42badaeaead1c9c1f8f35043c51f0652574a10c2.roa
Signing time:             Wed 24 Mar 2021 14:42:21 +0000
ROA not before:           Wed 24 Mar 2021 14:42:21 +0000
ROA not after:            Tue 24 Mar 2026 14:42:21 +0000
asID:                     27696
IP address blocks:        2803:c7c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867232 (0xd3ba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
        Validity
            Not Before: Mar 24 14:42:21 2021 GMT
            Not After : Mar 24 14:42:21 2026 GMT
        Subject: CN=42badaeaead1c9c1f8f35043c51f0652574a10c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:ff:eb:9a:22:06:ec:91:a7:6c:e1:09:60:
                    58:6e:25:3e:fb:57:18:f8:44:95:04:7b:d7:e4:29:
                    b7:f6:d4:88:0f:a5:c2:bd:78:37:b8:17:b4:39:7d:
                    a0:91:c3:97:17:8b:ee:6d:b1:ca:c5:78:ff:50:b3:
                    9f:72:fe:ea:0a:1d:37:67:95:74:77:3e:f7:95:3f:
                    76:b4:a6:8a:bb:46:b3:b9:d1:28:9f:1f:e8:cc:99:
                    bf:a3:a1:2d:19:d5:a1:71:85:6c:89:34:7b:18:b9:
                    fd:bc:4b:d4:0b:51:b8:77:f4:51:bd:59:bb:6b:31:
                    67:c7:c2:30:a8:3c:a0:b6:e3:3c:5d:f0:97:12:a9:
                    13:48:3d:52:b6:55:8b:44:6e:e7:12:57:bc:ad:f7:
                    54:33:56:21:d5:2f:ee:e9:60:94:d5:f0:93:0d:9e:
                    2a:e2:2d:fd:e0:ab:99:d2:fb:42:2b:c2:06:a2:6d:
                    15:f3:18:25:40:56:a6:d9:ee:51:2e:5f:57:8b:d1:
                    bf:e9:28:00:8a:59:db:1c:e6:fb:34:65:e0:8b:1a:
                    a2:a8:c6:23:c0:0a:67:bb:22:db:ae:08:64:84:54:
                    83:4e:58:9e:2e:b2:c0:78:bc:1b:70:29:cb:d3:d2:
                    11:42:1b:e5:f9:a0:b6:f2:cc:09:6f:c8:de:dd:92:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:69:1E:8F:8B:32:AC:78:19:48:DA:0C:18:BA:16:C7:CA:4C:11
            X509v3 Authority Key Identifier:
                keyid:C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/42badaeaead1c9c1f8f35043c51f0652574a10c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/a5346d2ac1e2fe0a8450cb3df09c729567332040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:b0:4e:bf:37:4d:55:a5:cd:5f:2a:b7:70:87:8d:b4:6e:8e:
         db:ef:f0:16:c9:98:46:1d:ab:57:c7:7c:cd:92:9c:5a:6d:29:
         c1:e4:b5:40:88:09:8c:7d:fe:26:91:0f:0b:6e:3a:88:32:b4:
         bc:ef:b1:3f:22:06:d8:44:7c:8a:6e:46:88:4c:2c:2f:c0:b4:
         a4:56:bb:c6:fe:3f:aa:3c:9f:69:59:c4:f7:b4:54:b2:f5:89:
         6d:20:6e:d6:ee:61:82:79:20:36:4f:be:5d:e7:82:78:bb:63:
         5f:34:3b:24:39:dd:c6:e1:96:ff:ac:a3:e7:43:b4:ea:7a:bd:
         55:bf:10:5c:3e:bd:51:25:f6:5f:8f:c7:16:b8:d9:0f:ee:2b:
         c1:9a:22:44:39:e4:3f:91:7a:16:18:3b:ed:82:a7:ca:dc:08:
         da:ce:96:47:1b:ea:e8:af:fa:5f:6e:5d:ce:a6:75:de:f5:42:
         b3:d0:ac:66:e2:9c:b6:85:6e:bf:3b:d4:b3:5e:0a:50:b2:c3:
         61:b2:c1:7e:cb:d4:5e:6f:d0:c1:ec:1d:9d:62:fa:e2:e1:6f:
         36:54:c9:a1:80:34:59:9b:a0:0a:11:56:a7:69:f9:58:3f:84:
         8c:c2:2e:b6:37:f2:d4:15:67:2d:4e:d2:b4:76:80:d6:e9:a5:
         c4:49:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----