Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/21723b001b472875cd76a242b836472c14c36fd6.roa
File:                     21723b001b472875cd76a242b836472c14c36fd6.roa (raw, json)
Hash identifier:          j933Kge+d1rkqfmFuYm2jb01PGBSCTFWnsyovOuMVCI=
Subject key identifier:   74:95:66:FB:13:60:C5:0E:33:AF:68:6C:B6:C8:D0:0A:BC:A4:56:AF
Certificate issuer:       /CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Certificate serial:       1113B4
Authority key identifier: AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/21723b001b472875cd76a242b836472c14c36fd6.roa
Signing time:             Sun 03 Oct 2021 02:26:16 +0000
ROA not before:           Sat 02 Oct 2021 03:00:00 +0000
ROA not after:            Mon 02 Oct 2023 03:00:00 +0000
asID:                     269730
IP address blocks:        2803:5160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119156 (0x1113b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
        Validity
            Not Before: Oct  2 03:00:00 2021 GMT
            Not After : Oct  2 03:00:00 2023 GMT
        Subject: CN=21723b001b472875cd76a242b836472c14c36fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:5c:96:33:16:cf:ac:0b:e5:a6:f5:02:3f:
                    3d:01:17:d8:26:6b:c0:66:08:bf:f4:4c:18:54:6e:
                    72:27:41:49:23:29:47:d2:99:e7:ba:6d:14:bb:d7:
                    c9:56:34:04:19:b7:39:f6:0b:28:c3:4f:8e:50:47:
                    2d:ef:73:54:02:52:97:2c:b5:a7:c7:b8:9f:43:13:
                    3d:9f:38:da:9b:6b:56:49:6c:26:a0:1e:c0:f1:40:
                    a4:90:d8:43:9f:0b:31:ab:ae:bd:5c:b3:71:dd:d1:
                    0c:8c:e1:5d:53:f7:14:2a:24:cd:e7:b2:30:cc:d7:
                    2d:b3:c7:29:e5:06:17:f9:27:c9:eb:1f:e4:44:34:
                    2f:29:a2:ad:ea:60:31:5c:d3:1b:4e:42:68:8d:9b:
                    ca:d7:ad:d8:46:6f:eb:17:ec:70:5f:95:af:98:d9:
                    63:0c:a7:c0:b8:33:a2:18:b6:ba:4a:6b:12:72:4c:
                    df:ab:61:7d:7d:6f:b9:2a:24:a8:68:df:bc:28:3e:
                    d3:31:4b:09:6b:bc:7d:fc:fd:bb:76:7d:ac:a6:02:
                    1a:99:8a:22:c4:01:54:e4:4a:c5:25:81:bd:d6:24:
                    9f:6c:6c:36:64:44:ba:6a:bb:ff:57:2d:6b:c3:9d:
                    0a:72:63:69:0c:30:83:7e:a3:b2:48:a4:60:4a:49:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:95:66:FB:13:60:C5:0E:33:AF:68:6C:B6:C8:D0:0A:BC:A4:56:AF
            X509v3 Authority Key Identifier:
                keyid:AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/21723b001b472875cd76a242b836472c14c36fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:72:3c:f8:5c:86:5b:aa:37:33:47:72:3d:8f:1b:0c:43:cc:
         80:70:fd:42:ab:c1:8b:18:06:ba:05:55:4c:1b:5c:47:af:86:
         66:de:21:07:00:01:f2:6a:18:a8:48:93:c4:17:6f:10:90:42:
         08:20:40:c9:99:4e:07:8f:87:63:74:86:a4:2c:cc:04:0b:61:
         7e:ce:79:2c:2d:7f:01:80:13:96:6a:a8:13:88:29:60:02:5e:
         26:73:c1:a4:4b:44:d1:a9:15:a1:58:b6:63:a6:4e:d1:c4:a7:
         67:d7:8a:a2:82:ae:c0:28:66:31:68:93:12:1c:44:c8:73:6d:
         af:2e:33:24:d4:b2:1f:b3:71:0c:bf:13:2d:29:88:0d:f4:3f:
         c3:60:5b:be:99:3d:90:b0:33:fc:ba:79:22:32:6c:06:5c:10:
         6c:87:c8:0b:e6:24:c0:e9:85:6f:15:fa:e2:fa:d7:ba:2b:1f:
         e3:e6:31:12:ef:5e:cc:af:c9:c0:4f:67:c4:71:ef:4c:de:2d:
         4e:12:22:0d:53:b7:d2:6b:0c:ec:77:03:fc:fb:8b:1b:f8:f3:
         fb:78:4d:7f:ec:02:10:79:5d:9a:47:8c:68:56:71:ba:45:ba:
         86:02:e7:c9:3f:12:23:ed:6b:ab:14:76:1b:ce:3e:14:26:01:
         4d:e9:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----