Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/b48f8f816e863897f8deefbbdef7bcb0f282f123.roa
File:                     b48f8f816e863897f8deefbbdef7bcb0f282f123.roa (raw, json)
Hash identifier:          hAbZXxh/sm3m43k3yicY2qE6vB5kW6WA4zOHjVSx/90=
Subject key identifier:   2A:0C:62:89:F1:0B:18:B2:69:2B:97:BB:A4:31:46:C5:D6:28:84:F9
Certificate issuer:       /CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
Certificate serial:       0D2ECE
Authority key identifier: F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/b48f8f816e863897f8deefbbdef7bcb0f282f123.roa
Signing time:             Wed 24 Mar 2021 14:39:35 +0000
ROA not before:           Wed 24 Mar 2021 14:39:35 +0000
ROA not after:            Tue 24 Mar 2026 14:39:35 +0000
asID:                     263238
IP address blocks:        2803:81c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863950 (0xd2ece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
        Validity
            Not Before: Mar 24 14:39:35 2021 GMT
            Not After : Mar 24 14:39:35 2026 GMT
        Subject: CN=b48f8f816e863897f8deefbbdef7bcb0f282f123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:98:71:c0:0b:a9:4b:15:84:b8:38:96:79:
                    72:42:10:6b:e6:7d:d3:26:13:c2:c9:6f:ed:52:48:
                    c9:ca:67:11:12:ec:a4:d8:3f:31:3e:68:47:67:f7:
                    0b:99:6c:27:d0:df:ee:49:f3:2d:ee:69:d4:5d:c4:
                    ad:52:85:fe:12:e9:b9:02:b8:ac:fe:22:b0:e2:ca:
                    14:af:a7:54:28:cb:26:38:28:99:46:21:20:94:c8:
                    c8:d7:ff:3a:02:0b:6a:5e:a7:df:2c:84:26:8f:21:
                    8b:6b:7d:98:0c:46:1f:a0:08:b3:19:7b:49:e7:80:
                    2c:da:53:03:54:12:f5:29:b6:6f:cd:a2:55:c0:51:
                    d2:8f:81:07:31:d7:0a:0b:a4:d1:bf:a7:7d:09:78:
                    b3:79:1f:00:8f:e6:e2:2f:1a:0d:ae:46:85:75:54:
                    ec:3d:13:85:6c:d8:07:29:c9:56:54:ac:4f:95:9b:
                    bb:04:3b:67:2f:26:f2:d1:cf:40:9f:11:1f:e5:da:
                    70:1b:12:56:58:42:2e:bf:ee:b2:48:99:89:6d:8c:
                    4d:c9:2c:65:5a:36:04:e8:b7:a9:82:c8:f9:07:78:
                    67:ca:35:ca:a4:7c:cf:3c:4f:c4:ac:8e:7d:9e:b4:
                    29:6d:f1:92:cf:58:9b:9a:b4:e5:8c:7e:7d:10:57:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:62:89:F1:0B:18:B2:69:2B:97:BB:A4:31:46:C5:D6:28:84:F9
            X509v3 Authority Key Identifier:
                keyid:F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/b48f8f816e863897f8deefbbdef7bcb0f282f123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:81c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:71:87:89:de:0f:b9:30:1c:17:c9:a4:a4:5c:ff:69:db:a2:
         ad:8a:08:24:e6:71:b1:92:49:2b:1d:e5:f6:ca:8f:6e:aa:f6:
         20:7d:f2:01:90:d4:27:db:5d:81:6b:2f:07:f2:70:cc:a2:f3:
         c5:98:92:30:ed:80:d8:93:76:8b:de:a2:06:5c:2d:b8:9f:5d:
         a2:e8:19:97:e9:48:3b:e6:46:26:2b:84:aa:ed:f2:22:70:0b:
         f8:c4:2a:a1:3f:41:2c:0c:e5:c7:14:bb:50:57:8f:b7:e2:b4:
         5d:b2:bb:65:d5:0c:5b:0b:ad:b2:88:7a:6a:6f:ea:81:63:ec:
         9c:5c:be:f2:67:e4:83:3e:0d:0d:ab:21:3c:a6:cb:09:df:b2:
         c2:f6:29:9b:45:a6:4c:0b:45:7a:40:a3:8f:8c:41:2f:05:9e:
         26:fe:2b:f4:14:10:49:1f:2a:c7:2e:e6:d8:d1:b2:41:c3:9b:
         42:da:21:f0:af:6d:90:09:94:8a:3d:3c:12:ca:c6:74:2a:82:
         c7:e2:8f:66:61:1e:cd:c1:ac:1d:c8:96:d6:9f:07:e7:c6:aa:
         f6:0c:a8:72:e6:1f:9f:de:70:07:5c:d1:fe:9c:f9:f2:13:35:
         e1:9f:91:39:51:b9:0f:1e:9a:e0:d9:6b:da:b6:87:7e:ae:de:
         db:80:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----