Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/c2a53ba497b71e7266dd2e1d0109058aa27a7079.roa
File:                     c2a53ba497b71e7266dd2e1d0109058aa27a7079.roa (raw, json)
Hash identifier:          Ypg6iwdj8KU9sZ+ZtWQXojnLZkceqzk6k3IAFmNxMKY=
Subject key identifier:   9E:91:00:96:45:A9:D9:90:D2:1F:B7:BF:0D:B9:BC:CD:C0:1D:CE:F2
Certificate issuer:       /CN=83e071b73134e99e61c3db9163fa966ff3118e3c
Certificate serial:       0B8F36
Authority key identifier: 45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/c2a53ba497b71e7266dd2e1d0109058aa27a7079.roa
Signing time:             Wed 24 Mar 2021 14:42:21 +0000
ROA not before:           Wed 24 Mar 2021 14:42:21 +0000
ROA not after:            Tue 24 Mar 2026 14:42:21 +0000
asID:                     264773
IP address blocks:        2803:bc60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757558 (0xb8f36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e071b73134e99e61c3db9163fa966ff3118e3c
        Validity
            Not Before: Mar 24 14:42:21 2021 GMT
            Not After : Mar 24 14:42:21 2026 GMT
        Subject: CN=c2a53ba497b71e7266dd2e1d0109058aa27a7079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c2:0a:51:08:db:fe:0a:e7:55:c0:9f:53:2a:
                    96:2e:9b:86:b2:ab:6b:0e:47:23:d4:da:00:e7:22:
                    49:47:a9:75:ae:a5:61:d7:eb:48:a8:e9:80:8c:59:
                    b8:0e:97:94:df:1e:19:12:51:3e:93:9a:95:88:3d:
                    96:1f:0f:4c:c1:95:21:0f:2d:ae:8d:1b:46:df:f9:
                    d1:00:47:20:57:d6:b6:81:26:87:72:6b:41:55:5b:
                    54:1e:a2:30:27:31:0d:3d:de:10:a4:84:31:76:c6:
                    8a:0c:34:c6:c0:49:ad:56:a8:27:91:82:1e:c6:e6:
                    71:78:43:f3:9b:26:e6:8f:28:45:ee:bc:20:94:ff:
                    59:ac:ff:5b:a2:df:b1:10:b4:53:81:bb:57:be:f4:
                    90:41:9e:2d:ff:32:14:aa:9f:dd:c6:76:7d:91:b2:
                    e8:02:ee:98:ad:eb:37:97:c9:17:bb:a1:e3:4e:b8:
                    05:0d:83:93:2d:c2:45:ac:ce:c4:19:46:1f:b2:72:
                    e1:fc:31:24:a5:4b:cc:86:8c:be:0e:29:0f:2d:2f:
                    7d:29:97:6c:07:33:1f:85:ea:dc:e5:f5:23:e7:6a:
                    15:a7:bc:15:ce:75:25:13:b6:37:2c:e9:a7:4d:4d:
                    c8:1c:4b:c5:79:2b:53:44:71:90:0e:a4:1f:30:ce:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:00:96:45:A9:D9:90:D2:1F:B7:BF:0D:B9:BC:CD:C0:1D:CE:F2
            X509v3 Authority Key Identifier:
                keyid:45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/c2a53ba497b71e7266dd2e1d0109058aa27a7079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/83e071b73134e99e61c3db9163fa966ff3118e3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc60::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:f3:1c:56:a7:80:52:b0:80:4c:d5:56:cf:cd:46:87:bf:44:
         0e:92:2a:dd:66:5d:9e:da:24:e4:ef:67:e2:ad:80:2b:cd:3f:
         84:08:dd:b8:44:1b:fd:d8:22:1a:45:ab:a5:09:84:db:de:af:
         c2:ea:7d:cd:b8:63:1f:aa:9c:8b:36:fb:a3:f2:b2:4e:4c:92:
         47:03:eb:31:d1:c5:aa:3a:4b:96:8a:df:e0:50:e6:45:c7:19:
         3f:18:ec:57:6e:f4:65:6e:19:15:7d:3b:4c:40:e7:bc:42:0f:
         1f:3f:18:0e:84:4d:8a:f3:a2:99:a7:7f:66:b0:c2:e8:d0:19:
         c7:c7:dc:69:00:e7:26:ab:1a:6f:29:36:36:bc:0d:de:8c:f8:
         53:c2:04:c7:65:93:de:34:18:b2:3a:06:91:7f:4d:b3:d7:00:
         09:59:ba:3e:e7:28:31:b6:02:d6:b4:cb:63:36:d4:8b:60:c6:
         6f:c6:b4:5e:85:ed:ec:a3:1b:ba:e4:cc:77:6f:90:68:d6:94:
         cf:65:70:72:1d:9d:08:4c:5c:b1:70:02:ba:cf:5b:53:63:d6:
         bc:02:11:e0:0b:62:60:ab:ab:4d:72:2b:78:10:5a:eb:42:d8:
         13:94:da:b2:f4:85:a9:c0:0f:fd:77:68:36:91:eb:71:cb:4b:
         89:7d:cf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----