Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/6202f21222aab2d193a559c4788682894b9f950a.roa
File:                     6202f21222aab2d193a559c4788682894b9f950a.roa (raw, json)
Hash identifier:          vqZI9RPRWB8/f0EeW2pQh03sXz9KK6Nz0mIzwO4/6lo=
Subject key identifier:   C7:C4:80:94:19:2D:BE:A2:F2:A1:68:AC:64:DA:27:A0:64:77:0D:F3
Certificate issuer:       /CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Certificate serial:       1327BE
Authority key identifier: 6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/6202f21222aab2d193a559c4788682894b9f950a.roa
Signing time:             Wed 10 Nov 2021 01:00:33 +0000
ROA not before:           Wed 10 Nov 2021 01:00:32 +0000
ROA not after:            Tue 10 Nov 2026 01:00:32 +0000
asID:                     265524
IP address blocks:        2806:286::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255358 (0x1327be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
        Validity
            Not Before: Nov 10 01:00:32 2021 GMT
            Not After : Nov 10 01:00:32 2026 GMT
        Subject: CN=6202f21222aab2d193a559c4788682894b9f950a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:15:51:69:5c:4e:90:92:70:af:06:4d:97:
                    03:74:6a:37:8c:31:9e:8a:79:43:04:e7:aa:59:2e:
                    31:01:b9:cf:d2:46:89:a3:64:67:c1:74:95:5c:b9:
                    50:3a:2c:e1:8c:30:45:de:eb:30:b2:a1:d4:c2:16:
                    5a:80:48:80:02:6a:37:55:5b:d3:38:10:85:fc:83:
                    ef:13:ae:10:33:2e:b0:1a:24:02:d4:82:26:b5:40:
                    52:70:00:03:7c:8a:57:5f:55:9a:c2:93:4d:0a:80:
                    c5:88:bc:58:5b:0a:e8:14:0d:d5:cf:a7:96:1a:95:
                    5c:93:3f:26:42:fe:f4:da:2c:c3:a5:c1:d5:71:26:
                    6d:01:a0:5d:d4:12:e2:67:81:5b:42:03:d7:1b:4e:
                    e0:db:66:5f:1b:56:54:f8:4c:24:b1:1c:98:fb:d2:
                    90:39:15:51:16:87:45:b8:99:22:ff:ed:22:e0:a5:
                    b6:bb:cb:db:0c:d4:1c:2d:90:9a:d4:50:11:df:b9:
                    33:30:62:3c:2c:fa:54:c4:14:10:ec:f5:1f:53:87:
                    97:2a:0f:e3:88:b6:88:34:52:d1:e3:eb:5c:b5:f3:
                    73:f3:af:e0:5f:14:76:28:06:8d:f9:c8:e5:8b:af:
                    dc:d2:00:6a:ef:4c:bc:95:b0:91:f5:d3:13:bc:61:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C4:80:94:19:2D:BE:A2:F2:A1:68:AC:64:DA:27:A0:64:77:0D:F3
            X509v3 Authority Key Identifier:
                keyid:6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/6202f21222aab2d193a559c4788682894b9f950a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:286::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:da:8d:54:21:32:6c:01:57:41:f8:7d:c7:d0:ac:dd:d1:dc:
         f5:bb:8a:ed:f9:66:7c:f6:15:3c:e0:b1:0e:9b:47:ff:36:8b:
         d3:54:62:16:a6:dd:0a:41:62:0f:9c:74:38:ba:0c:63:13:3a:
         88:c9:70:68:5d:78:4e:6a:ba:63:d4:e4:25:49:b8:f3:10:79:
         b9:de:7c:f4:73:d7:aa:ce:da:30:dd:bf:1a:85:41:82:bf:26:
         d5:2a:68:71:2c:95:e7:37:ad:e9:24:0e:56:6f:0a:33:99:54:
         aa:d8:96:7b:c6:b0:be:36:76:39:0e:67:b4:75:25:c0:4a:de:
         4b:d5:90:bf:00:7d:19:46:f3:99:b1:52:a1:f4:4e:ba:f3:ab:
         fc:1f:42:03:da:e3:b3:cf:20:7b:31:97:7c:7a:92:05:26:0e:
         4f:35:32:80:c9:fd:7f:e0:00:7d:ba:97:96:6e:3b:06:69:98:
         ea:0b:4b:64:a0:27:ff:d8:bf:5a:4f:21:4a:56:88:4b:ce:c5:
         46:17:33:fc:71:d7:2c:de:6b:7e:4c:3d:95:ce:46:1f:31:fb:
         0e:f3:37:df:71:5e:49:39:1f:00:03:28:44:22:0d:d7:fd:1f:
         d6:d1:5d:64:41:48:7d:95:68:87:91:92:de:ca:4f:f3:1c:24:
         e6:c0:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----