Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/a0d6110917632625b2919f762604651625426219.roa
File:                     a0d6110917632625b2919f762604651625426219.roa (raw, json)
Hash identifier:          1ktnBg6IqVvlDMXyyec1esPK/0TxRF2VRCEEGDKy6wk=
Subject key identifier:   0F:E9:71:E1:79:15:78:ED:3E:EB:8E:48:07:18:31:11:8A:65:A1:6D
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       0D7BF6
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/a0d6110917632625b2919f762604651625426219.roa
Signing time:             Sun 14 May 2023 16:26:52 +0000
ROA not before:           Sat 13 May 2023 16:26:52 +0000
ROA not after:            Wed 14 May 2025 16:26:52 +0000
asID:                     272086
IP address blocks:        2803:21e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883702 (0xd7bf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May 13 16:26:52 2023 GMT
            Not After : May 14 16:26:52 2025 GMT
        Subject: CN=a0d6110917632625b2919f762604651625426219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:f4:1f:ba:98:56:3c:5c:69:5f:ed:b8:ff:
                    e2:f3:87:d8:c9:fb:f8:98:a3:65:bd:f2:0f:7c:99:
                    47:a7:22:3f:c3:49:2e:b3:cc:cb:ca:68:12:e6:41:
                    6b:c0:2e:f4:2e:a7:4b:86:30:df:90:f4:b3:5c:6b:
                    9b:f7:b1:55:05:2a:10:2e:c9:71:03:4b:e7:1f:38:
                    31:6e:b4:92:19:a5:9d:fe:f4:a6:ae:f3:d8:ad:69:
                    3e:46:45:ef:fc:a2:80:13:d1:8d:c0:b4:9b:a0:76:
                    46:18:91:86:6c:7e:ea:af:32:70:4e:cf:13:4a:e8:
                    ae:dd:a0:7c:7a:76:d1:84:5b:d6:62:bf:1a:46:cc:
                    e5:40:09:b3:c7:d2:af:c4:e8:86:e3:92:44:26:de:
                    41:3b:5b:20:08:d3:45:32:ca:45:9e:91:31:9c:3c:
                    df:3a:78:ed:36:25:79:80:9d:fd:d3:4b:4f:5e:34:
                    8c:b5:e9:23:67:44:88:73:9c:b5:75:bb:96:c6:b4:
                    ce:a7:90:1c:dd:99:10:a0:14:5b:b5:ab:61:29:e3:
                    1f:46:8e:2b:95:05:fa:10:75:d5:ec:47:bd:2c:e9:
                    8f:76:6f:dd:b6:a9:1a:a2:87:bc:5a:2a:41:be:6f:
                    9e:fc:4c:86:af:25:ef:e4:1b:d4:f4:c5:fe:0d:55:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E9:71:E1:79:15:78:ED:3E:EB:8E:48:07:18:31:11:8A:65:A1:6D
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/a0d6110917632625b2919f762604651625426219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:54:61:f0:eb:64:47:c9:61:00:7c:03:54:6a:c9:6c:bc:
         13:1a:a4:fc:a1:02:01:0f:5b:b9:64:b3:27:ea:69:06:c6:af:
         98:ba:c5:cd:b2:32:79:49:86:73:bd:70:6e:67:d4:43:41:4c:
         fc:ed:0d:d1:93:0b:76:a1:a7:a4:12:8c:df:ec:41:9b:93:16:
         44:b7:a9:8c:d7:ec:a6:0d:28:fe:46:a8:ab:04:4a:03:35:73:
         0e:41:17:62:a1:13:e8:da:39:2a:28:a6:e5:1e:48:30:c2:df:
         2c:3d:94:ed:68:ad:c9:ea:f9:4c:48:e1:28:ea:b9:b4:d1:e5:
         2e:bb:f1:b9:35:4b:d7:a2:09:30:3e:aa:52:6d:f1:a0:6d:fb:
         af:06:02:79:a4:4e:4d:72:8d:5f:c5:0d:6d:27:f2:67:ab:51:
         91:58:c3:24:6a:2f:3b:34:dc:da:58:70:d2:b6:72:3f:96:18:
         fb:b6:cc:87:d7:34:67:1d:cf:09:d3:07:ca:57:7b:a6:0a:6b:
         92:b3:e2:16:0b:b2:ac:57:7d:23:c5:e8:86:91:a2:8c:16:47:
         bf:b8:b1:86:8a:36:e5:96:0d:a4:9d:02:40:53:8e:c0:db:c9:
         72:0d:4f:ef:58:3d:4c:09:38:83:5c:26:8f:38:b0:2c:a9:1e:
         20:0f:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----