Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/d7a9031bda1d110d4cc29f296e86182f239a0bc0.roa
File:                     d7a9031bda1d110d4cc29f296e86182f239a0bc0.roa (raw, json)
Hash identifier:          jusTrAaOp3NqWo+tcBw2XkDD5smgEjbCNLT1vP1CDGQ=
Subject key identifier:   F9:64:97:F0:83:5F:97:1C:24:DE:19:FD:5C:16:70:7C:5B:E8:2D:D6
Certificate issuer:       /CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
Certificate serial:       3D0B
Authority key identifier: D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/d7a9031bda1d110d4cc29f296e86182f239a0bc0.roa
Signing time:             Thu 25 Mar 2021 01:29:27 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     267686
IP address blocks:        2803:bea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15627 (0x3d0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=d7a9031bda1d110d4cc29f296e86182f239a0bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:22:c1:fd:ce:a9:5b:33:ff:f1:85:09:85:
                    12:86:62:d9:e0:bd:7c:90:3e:d5:30:48:c1:6e:ce:
                    79:2e:6b:9f:32:66:5e:9a:8b:74:4a:19:ac:18:28:
                    19:f8:02:26:67:8e:9c:eb:4b:85:03:c8:1d:93:10:
                    0b:db:e0:0f:49:b5:94:35:25:32:1a:aa:eb:c0:53:
                    e4:42:be:03:ea:41:7b:51:6b:bb:0a:c9:c7:f5:2a:
                    24:c3:fa:1b:62:4c:66:c1:14:ac:f7:98:72:f8:54:
                    70:e0:22:ed:12:ab:5c:98:bb:48:3e:6c:4c:23:9d:
                    84:ce:69:a6:8f:6c:37:1b:73:39:20:7b:6a:7c:bd:
                    93:c3:0d:66:cd:97:ca:5f:e2:84:c6:7c:1e:28:ae:
                    1d:7b:e6:ba:25:a7:4f:86:4f:dd:69:31:1e:e1:ba:
                    3c:36:a8:ad:d6:af:b3:d3:f1:a8:16:07:4b:e9:3a:
                    d8:d8:93:6b:fb:5c:d7:ac:4f:06:69:d1:a0:dd:c9:
                    c1:2e:bb:2f:03:b6:22:78:77:23:76:03:f8:0f:48:
                    50:0a:2b:b7:15:a9:19:bd:f2:36:94:a9:83:64:bb:
                    b8:64:96:61:5a:c8:40:a1:a2:56:d3:8e:1b:42:38:
                    fe:53:4f:27:75:b0:82:fd:07:c2:eb:d1:a8:31:51:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:64:97:F0:83:5F:97:1C:24:DE:19:FD:5C:16:70:7C:5B:E8:2D:D6
            X509v3 Authority Key Identifier:
                keyid:D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/d7a9031bda1d110d4cc29f296e86182f239a0bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:75:16:39:08:47:c4:3a:c9:08:9b:6e:e3:b0:f0:5c:72:
         d9:e3:14:ff:c0:47:af:62:93:d3:79:63:ad:d0:58:6a:c5:41:
         b3:2d:e4:98:03:21:e3:0b:59:7d:fa:4a:65:41:fe:b2:95:b6:
         5c:97:eb:de:56:34:32:4c:e0:e8:27:18:0e:fb:9f:bc:74:b2:
         22:95:b2:d4:42:df:e6:21:94:8f:12:d5:e6:ee:b7:6f:18:e8:
         ed:1d:21:40:4b:71:39:cb:03:da:75:a2:30:f4:75:9d:42:93:
         63:d0:ef:f9:20:32:32:6c:c4:69:f0:a4:37:91:d9:fd:07:28:
         9e:7e:19:18:a7:93:b3:e5:6e:2d:a7:95:90:da:1b:29:30:1c:
         91:53:15:45:ab:21:6b:0d:30:56:09:e5:44:b8:52:26:57:78:
         99:12:88:ad:d2:d8:a8:85:94:4a:1d:c7:61:5b:9e:99:6c:01:
         fc:4f:b9:53:cc:42:68:b1:06:ab:f0:1f:1e:eb:d1:f9:1a:1a:
         73:86:6a:38:2e:d0:2b:7d:6a:fc:25:94:6b:4e:4f:90:af:b9:
         27:2a:2c:ec:d0:40:83:5e:17:fb:57:46:17:11:bd:f1:03:0a:
         a3:51:90:8f:d5:e4:59:7d:fb:0b:32:47:b2:e9:da:47:a1:28:
         bc:8c:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----