Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/e9962a5388a0bb29326da870d45cf5b2c0733549.roa
File:                     e9962a5388a0bb29326da870d45cf5b2c0733549.roa (raw, json)
Hash identifier:          89pa3YoiuouIsxgKAmu1dX4P0aZvQOXRzX28ILIuwFw=
Subject key identifier:   A7:A7:CE:5B:BD:C7:6B:9B:F6:2D:D3:6B:79:75:66:C6:61:1C:E0:50
Certificate issuer:       /CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
Certificate serial:       0D4EE2
Authority key identifier: 78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/e9962a5388a0bb29326da870d45cf5b2c0733549.roa
Signing time:             Wed 24 Mar 2021 14:40:47 +0000
ROA not before:           Wed 24 Mar 2021 14:40:46 +0000
ROA not after:            Tue 24 Mar 2026 14:40:46 +0000
asID:                     264668
IP address blocks:        2803:8c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872162 (0xd4ee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
        Validity
            Not Before: Mar 24 14:40:46 2021 GMT
            Not After : Mar 24 14:40:46 2026 GMT
        Subject: CN=e9962a5388a0bb29326da870d45cf5b2c0733549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:5e:af:fe:91:03:21:dc:fe:53:81:ff:b7:
                    02:39:d7:e0:fa:53:3a:df:02:5e:a5:36:1d:a9:f8:
                    c8:00:98:3f:ba:b8:85:3f:f7:50:1c:2a:56:8b:20:
                    04:21:3c:d7:b9:c6:6d:2e:d3:c0:99:ea:1d:8a:d4:
                    0b:a5:68:22:27:8d:3e:32:60:f0:17:de:a0:24:b5:
                    26:61:ba:22:96:05:33:c4:23:4b:24:22:ec:e8:8a:
                    b3:79:df:8a:b1:4f:74:61:77:a1:df:8a:9d:df:0a:
                    c4:11:2e:8f:32:d5:8d:d0:e8:a2:9d:66:36:1f:6e:
                    e2:73:20:bc:af:7b:d0:f7:ac:b6:77:21:3a:9c:fa:
                    50:1b:c2:61:e4:fd:e6:f1:6e:7e:e1:1d:a5:9e:92:
                    ed:63:71:6d:93:6c:05:81:84:13:3f:a2:b9:e1:27:
                    fa:4f:fb:b2:5a:4c:3d:6d:50:da:be:68:14:9f:c6:
                    3e:9f:f9:b9:2b:dd:89:a8:f6:46:71:aa:bf:b0:46:
                    2a:8d:72:d8:f8:46:a0:6c:f4:bd:0a:c6:f5:dc:4e:
                    65:32:b0:6c:7f:71:37:c1:5b:a5:51:04:e7:d4:6f:
                    3b:94:3a:b0:0b:71:60:1d:ef:81:78:4c:f9:50:4e:
                    32:f3:c4:19:35:c5:ad:af:73:fd:05:cb:33:4d:23:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A7:CE:5B:BD:C7:6B:9B:F6:2D:D3:6B:79:75:66:C6:61:1C:E0:50
            X509v3 Authority Key Identifier:
                keyid:78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/e9962a5388a0bb29326da870d45cf5b2c0733549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/c63b81088b8ee19ee848e7230778ed21342ec0fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:2d:f0:03:65:1b:21:a3:8d:45:18:14:b5:ab:0d:c8:50:
         6d:50:9a:6e:d2:dc:26:e7:ca:4f:10:30:4f:10:b3:1c:0e:45:
         d8:64:f7:0f:19:bb:c4:99:ba:a8:c7:68:bf:94:fe:21:63:80:
         18:90:44:5a:5c:d8:32:8d:76:d0:e4:f3:54:07:64:e0:42:11:
         6b:dd:a2:df:84:a7:b7:39:74:52:fe:f4:3c:ed:4f:24:be:4b:
         50:72:3a:7e:2d:13:cb:01:ae:d0:73:2d:a7:55:6a:69:58:e0:
         66:23:5f:da:2d:08:d9:b7:be:26:da:c7:3b:7c:ab:49:a2:45:
         d2:3a:e7:c0:c4:80:a3:ea:a4:ae:d2:0f:6d:b4:51:27:8d:63:
         a3:dc:07:60:64:21:07:3b:88:04:09:03:6c:6c:93:e1:fc:65:
         f5:b4:a8:14:b5:b8:f2:b6:06:07:80:52:14:c5:2b:2f:73:3c:
         14:ec:b1:46:87:f2:27:78:74:ba:5e:af:8c:9e:5d:33:88:fc:
         79:fa:3f:77:a1:c1:46:e0:0f:68:94:d4:f3:53:f3:d2:0c:fe:
         f6:0b:7c:ff:82:5b:87:b7:14:84:ba:96:1f:51:3d:20:a2:57:
         f3:53:d8:e4:60:fc:b9:51:fe:9c:30:05:26:37:b8:ba:40:34:
         63:37:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----