Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/9399bdbbd31802efb00c049c8237fcabd2b0d706.roa
File:                     9399bdbbd31802efb00c049c8237fcabd2b0d706.roa (raw, json)
Hash identifier:          S7CpfYCg8/dM+pOy8S9n7HbGEj5/Y3J60D4Dhd7ueRM=
Subject key identifier:   3F:69:B3:FD:C3:03:2D:04:51:CE:01:03:2D:3E:93:8B:0F:6F:38:83
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       011246
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/9399bdbbd31802efb00c049c8237fcabd2b0d706.roa
Signing time:             Tue 03 Aug 2021 01:08:48 +0000
ROA not before:           Tue 13 Jul 2021 03:00:00 +0000
ROA not after:            Thu 13 Jul 2023 03:00:00 +0000
asID:                     271927
IP address blocks:        2803:ea10:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70214 (0x11246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jul 13 03:00:00 2021 GMT
            Not After : Jul 13 03:00:00 2023 GMT
        Subject: CN=9399bdbbd31802efb00c049c8237fcabd2b0d706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:29:e5:a3:49:dc:0e:68:64:65:17:32:39:
                    3f:46:df:89:ce:9c:53:d0:9c:2a:9c:40:f4:cd:ad:
                    e8:9b:a0:c0:27:46:aa:d1:67:44:76:db:fd:5e:62:
                    b4:ca:ec:24:c1:56:54:0b:0f:8f:d1:aa:c5:41:0e:
                    72:6a:72:04:0b:2a:f9:0d:fb:e9:f4:45:ca:83:5c:
                    b6:57:7f:70:9a:f4:76:4f:74:1b:85:ab:9f:95:6e:
                    bd:88:68:84:98:e8:30:83:ca:59:60:2e:75:09:bf:
                    31:fd:47:77:ef:22:86:d2:ac:42:47:f7:a3:0e:74:
                    03:80:f0:e5:e7:88:8a:a8:d4:49:df:6a:73:b8:d5:
                    7c:f3:fa:7c:6f:30:a3:74:12:c7:34:3e:cf:d2:a5:
                    3c:b6:75:a3:30:5a:00:b7:2d:56:fd:a3:dd:7d:1d:
                    89:a2:07:c5:d8:17:a0:4f:27:61:a6:dd:b5:4a:96:
                    fb:cc:6d:7d:96:32:97:24:e9:65:b8:fe:79:9f:80:
                    18:52:71:ee:aa:e4:d6:8b:ca:68:6b:57:cb:80:12:
                    e6:9c:98:86:a4:ab:81:31:d4:ac:7b:3c:10:df:88:
                    a2:87:0a:e7:d5:f7:cc:88:fc:f6:34:68:76:09:08:
                    af:24:ce:e8:ba:47:61:80:9d:b5:fb:4b:af:a0:f8:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:B3:FD:C3:03:2D:04:51:CE:01:03:2D:3E:93:8B:0F:6F:38:83
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/9399bdbbd31802efb00c049c8237fcabd2b0d706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:a2:35:05:17:5b:57:21:4c:3e:1c:c8:98:84:ac:b1:ac:
         5c:f5:da:07:58:04:cd:62:ce:a2:f0:3a:7a:56:5a:b5:9c:b5:
         cf:42:61:5b:78:77:89:11:93:df:4a:37:11:31:c7:66:9f:39:
         9b:90:4f:a1:cc:a8:f7:ed:07:1c:e6:ea:9f:18:31:e7:9c:7c:
         1d:61:5a:ea:58:85:ed:a9:48:4a:63:d2:02:27:f8:0c:43:a4:
         ff:df:ee:2e:db:13:13:d6:16:03:8d:f4:90:34:cd:15:e3:c2:
         ab:6d:9f:c2:cf:ef:7c:d0:6c:08:0f:e9:cb:51:5e:e8:92:c4:
         f4:b7:9a:8d:4b:79:7a:2f:7f:17:7c:b3:59:c5:30:09:a1:12:
         00:88:e4:89:82:ed:69:56:56:a0:11:69:fa:21:75:69:60:98:
         e8:99:b1:2c:a9:14:01:e2:60:b3:0d:23:21:f4:b8:20:24:c2:
         da:7c:a7:0f:fa:e7:a6:8d:3e:de:c3:29:18:e1:3b:ea:bb:af:
         f3:5e:d1:4e:81:c5:a5:7a:2c:bd:52:de:e9:df:d6:1c:f3:86:
         21:f9:24:62:f6:76:31:30:aa:b7:fb:29:9f:d3:9f:b2:ff:30:
         7d:48:d6:a9:f2:97:af:42:68:ce:6f:a2:93:5d:9e:43:4d:64:
         83:c3:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----