Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/61b39673540798c96d277f3ebf24a70dcfa715f1.roa
File:                     61b39673540798c96d277f3ebf24a70dcfa715f1.roa (raw, json)
Hash identifier:          U/QErchPXo113UnfWS98toUerH0d6B2SAHLOhpZhmec=
Subject key identifier:   27:9F:53:A1:2F:D3:04:C6:D5:DA:FE:D3:E7:F4:FA:3D:56:4A:C1:D4
Certificate issuer:       /CN=da7e1e0969a850c5aa01b86fd390cf980dd8c296
Certificate serial:       0953F3
Authority key identifier: F7:5F:6C:67:91:04:33:82:42:23:86:0B:C5:F5:61:22:4E:70:62:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e1e0969a850c5aa01b86fd390cf980dd8c296.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/61b39673540798c96d277f3ebf24a70dcfa715f1.roa
Signing time:             Fri 18 Feb 2022 16:14:19 +0000
ROA not before:           Tue 15 Jun 2021 03:00:00 +0000
ROA not after:            Thu 15 Jun 2023 03:00:00 +0000
asID:                     265761
IP address blocks:        2803:7bc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611315 (0x953f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7e1e0969a850c5aa01b86fd390cf980dd8c296
        Validity
            Not Before: Jun 15 03:00:00 2021 GMT
            Not After : Jun 15 03:00:00 2023 GMT
        Subject: CN=61b39673540798c96d277f3ebf24a70dcfa715f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cc:2b:5f:1a:7a:4d:0c:d1:92:79:42:8e:6c:
                    be:8b:59:da:e0:e5:9b:9e:7f:69:da:3a:e9:07:15:
                    15:ad:6c:f0:1a:99:c5:9c:b8:3c:eb:58:7d:dc:c4:
                    16:a3:ab:58:1c:06:b9:c6:18:97:b9:03:c0:af:81:
                    63:48:66:61:6d:f5:6d:d7:da:2c:42:8b:27:1e:90:
                    5e:82:39:b6:6e:f1:6d:61:c6:ea:da:f9:cc:a5:3d:
                    ba:a3:4b:27:8a:b5:b2:18:18:92:9c:2b:11:71:04:
                    3e:06:c8:98:c8:17:eb:ff:11:ca:08:b3:40:fe:c8:
                    a9:b7:94:21:72:30:df:6c:d1:cf:4c:a4:3a:99:e3:
                    17:39:e9:35:f4:82:7d:56:e1:7e:4f:1e:10:18:6c:
                    c5:71:29:5f:16:8b:bb:bf:6c:91:0a:3f:c1:d0:78:
                    4e:e5:68:0e:23:46:3e:55:07:8c:fa:1e:01:e3:8c:
                    52:fc:2f:cd:c0:52:6e:16:7f:58:b4:b2:6a:6b:91:
                    a5:2a:87:ea:70:d8:67:ee:c9:2c:b7:68:ed:23:7b:
                    c4:92:f5:3c:64:d1:83:97:d9:6b:eb:96:ca:d6:80:
                    0e:59:d0:38:b0:52:2d:5e:dd:dd:c8:af:e6:f2:f3:
                    a6:cc:67:e3:9a:ea:29:9d:10:dd:8d:4b:04:b7:ec:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:53:A1:2F:D3:04:C6:D5:DA:FE:D3:E7:F4:FA:3D:56:4A:C1:D4
            X509v3 Authority Key Identifier:
                keyid:F7:5F:6C:67:91:04:33:82:42:23:86:0B:C5:F5:61:22:4E:70:62:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e1e0969a850c5aa01b86fd390cf980dd8c296.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/61b39673540798c96d277f3ebf24a70dcfa715f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12bf3bf1-819f-467e-82c9-b2da323a8073/da7e1e0969a850c5aa01b86fd390cf980dd8c296.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:87:3b:61:bf:a5:e6:a2:91:66:a2:23:2e:ca:31:fb:e6:
         0e:fd:fc:00:55:2c:ee:b0:0c:a0:c8:88:d2:9a:e3:9f:91:f0:
         a7:98:e1:19:8a:e8:69:c4:a9:b4:96:da:0e:52:f5:11:07:33:
         b8:84:5c:f9:a6:1b:4e:d2:a0:9b:39:13:1b:13:90:ad:9d:d2:
         47:6d:ac:b0:ff:9d:84:c6:92:9e:53:e5:4f:6c:68:c5:4a:d0:
         a8:8d:97:74:ba:9b:2f:94:9b:d4:49:8e:ec:d6:4c:4e:b8:40:
         61:7b:d3:66:6a:b7:4b:07:a7:6b:b6:95:37:0a:ac:49:da:4e:
         cd:fb:77:43:6a:1c:53:ff:96:7f:b5:bd:4c:6a:bc:e7:90:4f:
         c7:94:bd:a9:cb:53:1e:1c:91:b5:9e:e6:30:dd:62:db:97:db:
         a9:5b:2a:18:10:91:91:94:e1:67:cc:d5:b4:b3:84:f7:f1:0f:
         c2:e9:8e:90:60:64:62:80:18:d7:23:c2:6b:73:40:a2:27:56:
         b9:80:f1:c9:94:47:63:56:47:eb:3c:e6:45:3f:5f:80:5c:22:
         e3:d3:f8:7d:eb:e2:43:57:9d:f2:f4:5a:fe:4c:bc:d1:53:fe:
         5a:51:fa:b3:d4:32:19:81:3b:d7:49:47:5f:74:b0:fb:77:88:
         22:81:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----