Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/c569600a282526fdc1bc89f90d5c515ab642fc60.roa
File:                     c569600a282526fdc1bc89f90d5c515ab642fc60.roa (raw, json)
Hash identifier:          c1JsfREQxMaqGBLAGEoQtRYud7HZOpCa4L065spkcvk=
Subject key identifier:   F9:15:35:A8:07:58:C9:E3:C1:B6:EE:96:34:2C:F8:95:C6:91:58:01
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       0CA511
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/c569600a282526fdc1bc89f90d5c515ab642fc60.roa
Signing time:             Tue 30 Nov 2021 16:09:03 +0000
ROA not before:           Tue 30 Nov 2021 03:00:00 +0000
ROA not after:            Wed 30 Nov 2022 03:00:00 +0000
asID:                     269862
IP address blocks:        2803:b0e0:9989::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828689 (0xca511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Nov 30 03:00:00 2021 GMT
            Not After : Nov 30 03:00:00 2022 GMT
        Subject: CN=c569600a282526fdc1bc89f90d5c515ab642fc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:c4:d0:b7:66:ab:b4:51:b0:65:79:f6:36:
                    eb:d2:54:6d:1e:1f:33:ef:0a:92:e0:d5:f4:9e:d5:
                    4e:1d:9a:aa:fb:64:56:51:cd:80:20:c0:b8:71:07:
                    5e:7c:40:6c:bf:10:df:9f:9a:12:0f:a0:24:80:d4:
                    95:fb:d3:29:39:d2:0f:c2:9a:4e:b6:9d:8e:e3:91:
                    a1:07:e3:df:40:c3:e6:56:1b:f3:46:7f:d7:ae:05:
                    07:a6:7f:31:73:6c:91:f0:45:fb:e5:06:70:ab:8a:
                    16:14:74:17:c5:86:89:0c:32:ef:2d:7b:7d:ef:43:
                    7a:e0:dc:d1:21:90:ac:ec:15:e3:d2:76:8f:9b:37:
                    cf:19:37:c6:c9:f0:f1:7b:13:b3:08:91:bc:c2:3e:
                    e5:ab:a1:10:0b:36:4c:ce:c0:05:90:3e:e5:70:e6:
                    cc:a7:69:b4:1b:cb:8b:54:14:42:fa:27:49:08:c4:
                    eb:e3:1d:a4:01:ba:50:d7:d1:a4:8a:86:95:43:05:
                    d0:e1:15:d4:ab:8d:e0:94:9f:82:6e:5b:97:1f:22:
                    40:8c:e4:06:ca:bb:ca:4c:75:5b:61:82:b8:25:78:
                    73:3e:f9:12:f0:53:ea:4e:a2:78:20:22:1a:b6:77:
                    68:cd:3f:a4:d4:e3:76:61:44:03:5c:63:73:c5:91:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:15:35:A8:07:58:C9:E3:C1:B6:EE:96:34:2C:F8:95:C6:91:58:01
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/c569600a282526fdc1bc89f90d5c515ab642fc60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9989::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:dc:c4:3d:fc:60:47:76:84:9d:b4:78:ac:ab:37:9c:c0:dd:
         6d:0a:b5:9a:54:68:3d:13:8d:2a:47:9c:33:35:e3:71:1e:6c:
         d6:c1:e8:5a:0e:a3:31:54:ff:f2:e3:93:d8:e6:26:d7:77:0e:
         aa:21:c1:84:07:9d:28:70:22:a1:56:7c:49:26:48:9f:be:01:
         6c:3f:e4:85:cf:67:a6:d4:e1:a1:10:1e:ba:19:f5:70:19:76:
         e7:3f:8d:d8:40:0c:5a:de:51:be:fb:2a:69:3b:dc:1f:dc:13:
         ad:ba:cd:8d:2f:b7:d4:14:c8:cd:ca:88:51:47:f1:88:f4:5b:
         c7:44:35:97:59:c1:28:c5:cd:09:ee:16:58:0a:46:f6:45:d5:
         33:6e:26:4d:b4:a1:44:68:c1:99:b4:74:9e:2a:8a:44:10:8e:
         04:34:fe:cc:1d:0e:dc:8a:48:c3:37:03:84:ff:bb:a7:e0:53:
         b7:e3:07:2d:64:bf:8c:3b:f9:ba:1c:d3:07:63:8c:a1:df:a7:
         f6:88:a2:bb:43:95:e0:a8:7e:4b:0a:2b:43:fd:8e:a5:07:95:
         92:6e:82:89:1d:13:08:33:58:1d:48:70:aa:8e:b1:c4:71:bb:
         b9:a2:17:6a:d1:51:26:75:7d:e3:3c:1d:ab:d1:89:d0:b1:e2:
         50:6f:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----