Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/42ae2b56635615e7c5456721f1ef33be62fcb844.roa
File:                     42ae2b56635615e7c5456721f1ef33be62fcb844.roa (raw, json)
Hash identifier:          GKN4CKh0xVeA9zNjBE+XQPKQfTCZ6CeOnUMT25+tf7g=
Subject key identifier:   59:3C:52:00:C4:1C:45:90:31:36:07:05:86:C5:B2:D9:24:C4:E1:58
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       137906
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/42ae2b56635615e7c5456721f1ef33be62fcb844.roa
Signing time:             Thu 14 Oct 2021 13:48:20 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     28075
IP address blocks:        2803:6603:c000::/35 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276166 (0x137906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=42ae2b56635615e7c5456721f1ef33be62fcb844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:15:3c:97:31:8f:31:8a:9c:c3:62:44:6f:
                    9e:e6:ce:70:00:6d:8f:50:57:86:a5:bb:54:d2:c7:
                    d4:ca:55:3c:a7:33:3c:ce:08:55:9a:df:cb:f9:c2:
                    b2:d6:5e:85:f1:01:a4:66:bc:0d:25:67:66:91:db:
                    e6:03:49:49:31:a6:f1:b7:85:1c:44:a7:7a:f6:63:
                    26:d1:86:68:b2:a5:0e:9b:da:56:06:f3:ec:06:21:
                    e9:36:67:1b:d7:05:d9:86:9c:0c:69:fa:3d:3f:e7:
                    7d:18:df:6a:9b:e8:c0:3b:04:26:f6:fc:da:73:c1:
                    81:f7:0e:fd:20:8e:96:7a:43:cb:8e:b7:0b:f8:6a:
                    03:6f:60:c9:d5:e3:9b:d9:a3:a5:47:b3:8e:e6:fd:
                    10:bb:2b:2c:3b:6f:a2:b9:0a:31:96:eb:37:67:39:
                    74:10:1a:3c:b4:c1:6d:08:07:5f:38:b5:6c:08:87:
                    d1:69:e0:96:d3:85:94:74:09:40:ff:7b:5f:64:aa:
                    f3:af:74:40:ec:61:f8:79:3e:08:b0:82:d6:a6:b8:
                    30:52:a6:da:80:40:5d:aa:c1:f9:e2:82:00:8e:04:
                    90:f2:17:26:a4:a7:9e:4f:0b:af:b3:74:d7:07:7f:
                    59:70:ba:3b:00:a5:cc:18:60:99:a0:65:33:92:63:
                    31:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3C:52:00:C4:1C:45:90:31:36:07:05:86:C5:B2:D9:24:C4:E1:58
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/42ae2b56635615e7c5456721f1ef33be62fcb844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6603:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1a:a8:f5:b9:46:33:30:d8:f4:06:51:da:2c:3b:58:b7:db:de:
         b0:35:8a:0a:12:bc:df:5c:d4:23:61:a2:22:8a:ed:34:1f:29:
         9b:13:d9:18:3c:a1:98:8e:c8:ee:65:ee:62:dd:12:3a:40:4b:
         9d:46:20:31:eb:e1:e5:99:c3:70:c5:e4:a7:2c:84:2b:5a:10:
         03:5c:e1:c2:21:19:11:28:84:48:01:55:60:bd:f6:54:ab:44:
         2b:68:42:1c:95:1f:9a:fc:56:b7:69:c3:21:db:60:3a:9e:27:
         f2:52:17:ef:14:fe:65:aa:b4:77:17:d2:29:36:b9:6f:6c:4c:
         c2:96:d6:9f:d6:ba:a6:a8:5c:67:9c:c0:6b:fa:12:e1:1e:08:
         d0:a8:1d:42:4b:4f:01:2a:8c:fc:73:58:06:bc:5c:2b:4d:ff:
         e9:b1:b1:6f:0c:5c:21:70:e1:f1:9a:ed:2b:62:86:60:dd:a8:
         ed:3d:cb:c8:ae:53:40:8e:f3:21:33:17:30:34:fd:17:80:c4:
         d2:c9:44:dd:53:da:1c:e5:d5:72:a4:85:52:32:d0:ae:56:1d:
         c2:e6:d1:c6:46:dc:1c:96:bb:0d:b8:42:44:03:7f:56:5e:c5:
         bc:e8:9a:a3:86:80:2e:8c:7b:9a:ce:b1:cb:1b:21:65:d8:e7:
         f3:b4:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----