Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/3765e8e285738f8e8a6072cb085d89d17085ae53.roa
File:                     3765e8e285738f8e8a6072cb085d89d17085ae53.roa (raw, json)
Hash identifier:          zG2oluXs4PMMUpbPzybT/j+wppFOt8OnyKkWFRXN65o=
Subject key identifier:   E4:81:CB:AA:BC:E1:4E:C7:35:21:3D:C4:B2:86:62:33:EE:6E:D4:D6
Certificate issuer:       /CN=a5925846ddd27521ce64527a50820075bbf1e5b7
Certificate serial:       05AE04
Authority key identifier: 77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/3765e8e285738f8e8a6072cb085d89d17085ae53.roa
Signing time:             Wed 24 Mar 2021 14:31:17 +0000
ROA not before:           Wed 24 Mar 2021 14:31:16 +0000
ROA not after:            Tue 24 Mar 2026 14:31:16 +0000
asID:                     267798
IP address blocks:        2803:a160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372228 (0x5ae04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5925846ddd27521ce64527a50820075bbf1e5b7
        Validity
            Not Before: Mar 24 14:31:16 2021 GMT
            Not After : Mar 24 14:31:16 2026 GMT
        Subject: CN=3765e8e285738f8e8a6072cb085d89d17085ae53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:c5:1a:9d:06:68:eb:f9:cf:b5:49:9a:46:
                    3d:08:9e:4c:ea:31:8e:9d:5c:51:1b:54:ae:65:dc:
                    b8:f6:4a:10:f2:ae:2b:55:35:1d:a1:7b:d2:6d:ad:
                    cc:52:a8:ad:41:7d:7e:e9:a3:d2:64:50:1d:7d:3f:
                    31:0e:fe:0d:1b:d4:c5:f0:65:64:bc:56:ca:03:2f:
                    0f:f4:3c:a0:1a:a8:12:d0:b8:b1:23:e0:03:10:fb:
                    72:2c:64:4f:19:ed:06:39:9f:1a:6d:8e:58:2a:f4:
                    00:07:41:ba:c5:31:43:04:ac:1b:64:66:f5:c0:a6:
                    ed:8a:cf:e5:15:8b:b9:b0:ba:3d:c5:4b:77:2f:7a:
                    73:4a:9c:19:68:e2:31:47:6d:26:62:b6:6b:a4:72:
                    34:33:92:b0:a9:11:68:7e:46:81:14:0e:fb:ca:9e:
                    9c:e0:ed:4c:c1:e6:00:1b:37:5e:5f:24:76:89:a9:
                    1c:e1:73:b9:2c:1e:dc:c9:68:3a:e7:ca:df:08:f0:
                    cb:60:d5:96:e9:21:38:3d:9a:48:31:70:82:60:64:
                    83:05:95:19:ca:a9:5b:2e:9e:5c:09:39:9f:d3:25:
                    02:9a:a5:d1:75:9e:83:47:7a:3f:1f:b7:8d:c0:26:
                    96:5b:04:c1:b2:54:78:41:d9:47:e5:8f:06:ad:f2:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:81:CB:AA:BC:E1:4E:C7:35:21:3D:C4:B2:86:62:33:EE:6E:D4:D6
            X509v3 Authority Key Identifier:
                keyid:77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/3765e8e285738f8e8a6072cb085d89d17085ae53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/a5925846ddd27521ce64527a50820075bbf1e5b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a160::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:de:2f:e2:bc:32:35:77:eb:e8:f4:a6:a9:6c:65:11:d0:
         d3:c7:96:27:00:60:a1:ff:b4:3b:3b:3e:aa:d5:fc:68:c8:5f:
         e8:df:cd:0a:e0:6f:6e:92:c8:46:91:93:85:74:aa:71:ae:d9:
         00:ab:cf:b7:b0:6a:2a:13:92:5c:bf:ce:86:7e:69:6b:91:6e:
         d2:c0:83:13:e4:6c:82:46:34:89:03:07:a1:13:4f:af:0a:65:
         c4:47:b6:b4:a8:b9:d6:c6:0a:2f:f6:68:81:c6:40:76:c7:33:
         33:aa:f1:2f:90:ee:1f:ef:cc:f5:5c:7a:3c:3c:b9:f4:e5:c0:
         17:05:55:29:e8:69:6a:41:4b:c4:5f:f4:94:1e:a4:9d:09:1b:
         97:3a:03:5e:ca:83:d7:c4:f1:62:ad:bc:7e:89:91:ae:43:68:
         4d:c2:44:32:98:83:7b:a9:53:bc:a2:6a:d3:ce:d0:e4:5c:c5:
         ad:fb:3d:07:5d:1e:26:66:89:18:e0:8a:12:99:72:33:fd:b2:
         d4:84:33:8f:15:07:b7:75:da:88:75:dd:61:ae:71:7e:86:c8:
         7e:f5:6b:24:de:4a:7b:6e:66:10:88:71:15:bb:5f:99:3c:dd:
         e3:59:e6:37:5e:7e:4c:36:69:af:d3:16:0e:06:5a:b4:e3:1d:
         e6:45:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----