Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/d017f9d3dd0b5b7efc03976c68cb17c57d74eefd.roa
File:                     d017f9d3dd0b5b7efc03976c68cb17c57d74eefd.roa (raw, json)
Hash identifier:          HShJp8deaj7erzsgvFE8ATSuVKksZX/iqPTLzd355Z4=
Subject key identifier:   2F:A4:E7:5F:B3:9B:EC:C8:44:E6:EF:76:E3:13:C6:81:D7:71:48:BF
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       A6D6
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/d017f9d3dd0b5b7efc03976c68cb17c57d74eefd.roa
Signing time:             Sun 18 Jul 2021 23:16:57 +0000
ROA not before:           Tue 13 Jul 2021 03:00:00 +0000
ROA not after:            Thu 13 Jul 2023 03:00:00 +0000
asID:                     271927
IP address blocks:        2803:ea10:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42710 (0xa6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jul 13 03:00:00 2021 GMT
            Not After : Jul 13 03:00:00 2023 GMT
        Subject: CN=d017f9d3dd0b5b7efc03976c68cb17c57d74eefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:88:c1:f2:65:06:57:73:1d:56:5b:e7:79:
                    e3:be:cc:2a:9b:80:bf:d4:fd:b1:ed:09:d7:ca:c8:
                    fb:8b:d4:8f:0f:b2:05:c6:c9:ec:28:ac:71:ce:71:
                    a9:cb:d5:33:6f:aa:a7:35:01:3f:8b:c4:d8:99:01:
                    99:87:34:ab:49:e3:40:27:a9:8e:91:70:13:e8:f6:
                    73:eb:e8:dc:db:de:63:83:52:4c:88:21:a6:8a:c5:
                    3c:68:20:21:a9:bc:4e:fe:3d:01:3d:c6:20:22:10:
                    2f:e6:55:b9:ff:b6:c5:48:61:be:35:40:45:3b:e7:
                    91:38:45:0a:11:6d:b1:bf:2c:38:8b:1f:62:c5:77:
                    3f:aa:f6:b1:40:50:93:bf:fa:73:17:98:e9:9f:a5:
                    90:19:ec:db:a1:ad:84:f9:9b:c0:94:9e:80:a7:6a:
                    4f:3f:94:ce:74:58:7f:b5:e4:81:4b:86:a5:d4:e4:
                    0b:45:67:c5:69:b0:fd:d5:0d:95:d2:86:21:d7:79:
                    96:1a:6a:9e:c1:82:01:13:f7:aa:ad:90:52:3d:db:
                    80:8a:22:cc:cd:81:02:60:dd:9f:1d:62:33:06:c3:
                    07:fe:35:5e:5a:94:57:32:aa:f6:cd:c5:f0:a1:a7:
                    90:9b:89:35:84:24:aa:a5:06:be:f2:41:63:64:1a:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A4:E7:5F:B3:9B:EC:C8:44:E6:EF:76:E3:13:C6:81:D7:71:48:BF
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/d017f9d3dd0b5b7efc03976c68cb17c57d74eefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:f7:e6:71:12:72:d7:80:ed:ff:a2:ae:09:95:94:7a:89:
         08:8c:a2:58:65:c8:f3:e4:bf:7b:b8:43:83:1f:13:47:5a:c2:
         0a:c9:35:9b:2a:4e:0d:2a:25:4e:9f:74:8e:5d:47:b1:cc:7c:
         59:f5:07:38:0e:73:1b:e4:0e:94:f5:bc:b5:ce:86:86:54:9f:
         4f:a0:09:22:5f:6f:df:90:ec:71:10:d4:dd:50:3c:75:c3:5b:
         48:c6:dc:a3:9a:b7:46:59:a2:ac:2a:5f:26:93:3d:89:59:67:
         f8:32:3b:ae:db:f9:f9:08:82:98:e8:c4:f3:88:fa:31:44:89:
         92:85:22:97:26:7e:37:11:b3:b9:8e:b5:96:c0:7b:bd:6d:d4:
         5f:75:68:1c:8d:fb:bd:8e:90:1e:d8:34:f8:31:71:68:82:b9:
         4b:c9:32:8b:65:2d:c6:b5:03:3e:71:fc:45:1e:d0:08:61:f3:
         16:f6:3a:a7:93:20:3d:a5:cd:67:43:cd:be:23:63:c3:3e:d0:
         32:d0:15:4c:53:af:c7:16:79:85:41:65:39:60:2d:a0:22:f1:
         96:cc:a6:84:42:7c:c6:58:17:eb:6d:57:01:9d:a4:60:fb:da:
         26:bb:99:af:2d:7a:6d:b8:08:33:70:01:37:29:79:d5:e6:37:
         7f:7b:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----