Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/95a881a9b1ec918f67eb49ace5c8a64f1117e06d.roa
File:                     95a881a9b1ec918f67eb49ace5c8a64f1117e06d.roa (raw, json)
Hash identifier:          HstrcghFXDHPSJFKISMGzsaPbWUF8uXCYGrnn0smuUI=
Subject key identifier:   8C:5E:E5:7F:E4:33:D9:DD:C2:56:B2:C2:DA:52:12:BC:33:B3:51:8C
Certificate issuer:       /CN=6d59ff2e00d62c0168d26ff5076e70835729c2de
Certificate serial:       11D6E7
Authority key identifier: 2A:89:9D:7F:A8:C3:2A:28:50:10:DC:8C:BD:F9:4B:54:5A:4A:79:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d59ff2e00d62c0168d26ff5076e70835729c2de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/95a881a9b1ec918f67eb49ace5c8a64f1117e06d.roa
Signing time:             Fri 17 Sep 2021 16:43:36 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271971
IP address blocks:        2803:32c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169127 (0x11d6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d59ff2e00d62c0168d26ff5076e70835729c2de
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=95a881a9b1ec918f67eb49ace5c8a64f1117e06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:37:af:68:0f:60:d1:ec:7b:cf:46:a1:83:
                    18:3a:03:c9:7b:c4:c4:9f:fa:d8:93:2b:db:ee:5e:
                    b2:9d:09:6d:0b:44:0c:0b:f8:dd:ca:db:26:8a:6d:
                    94:c3:30:62:05:74:10:43:fa:9e:49:b1:50:26:cd:
                    af:2f:79:d5:6b:5b:0f:33:6e:69:0a:09:fc:45:56:
                    82:9d:91:d7:b1:c4:e3:ca:d1:60:cd:c3:ec:ea:b6:
                    32:fb:ef:b5:1b:b6:ee:7e:f1:fa:54:d2:60:16:65:
                    68:a0:d5:60:dc:29:eb:a9:2a:0d:33:44:ce:de:c2:
                    0b:67:0d:33:15:4a:16:26:91:8c:96:4f:ba:79:26:
                    8f:58:14:cb:be:78:dc:d3:0d:e2:c3:8e:81:6f:1f:
                    c8:a4:d8:5e:9a:53:b3:f6:b3:da:81:f7:f2:96:ae:
                    54:1f:79:0c:75:29:71:ec:3e:c2:dd:a9:c7:a1:a8:
                    2f:40:9e:ad:6b:50:bd:93:fb:f6:f0:a3:f4:a8:1c:
                    dd:19:c8:cc:09:7c:f9:64:f4:a0:76:1a:14:84:24:
                    f0:f0:3d:95:54:60:bb:bd:25:06:47:0f:c6:90:c5:
                    14:79:f0:7d:85:69:61:d6:a6:a6:75:a4:5f:f3:92:
                    21:de:26:2a:0f:ef:2d:cc:9b:41:d8:da:0d:8d:86:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:E5:7F:E4:33:D9:DD:C2:56:B2:C2:DA:52:12:BC:33:B3:51:8C
            X509v3 Authority Key Identifier:
                keyid:2A:89:9D:7F:A8:C3:2A:28:50:10:DC:8C:BD:F9:4B:54:5A:4A:79:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d59ff2e00d62c0168d26ff5076e70835729c2de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/95a881a9b1ec918f67eb49ace5c8a64f1117e06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/6d59ff2e00d62c0168d26ff5076e70835729c2de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:b0:b5:4b:5c:60:78:b2:81:e7:70:94:e3:60:6f:b7:a2:38:
         69:a8:28:61:9a:86:03:57:02:f9:97:0b:9f:8f:a4:82:a5:65:
         c0:c8:78:e3:67:f7:98:92:d3:67:35:c4:eb:27:11:87:1f:9b:
         3c:dc:48:50:78:0d:1a:fb:84:e2:fc:a0:41:90:f3:f7:62:1d:
         e7:78:3b:9e:63:35:bd:f3:dd:62:b4:cd:35:b4:2b:90:0b:47:
         3b:de:c2:82:84:b1:70:37:da:0c:7e:66:c2:a7:c0:d1:90:6c:
         44:49:4e:ed:57:00:e7:7a:a2:31:89:4c:b1:97:64:05:6b:20:
         90:a9:d2:cf:dc:dc:44:53:d3:de:0f:5b:5a:85:83:ef:a1:f0:
         bd:ca:9c:75:b0:e4:e1:c3:c1:7c:a4:5f:80:55:8f:68:e5:6b:
         46:4c:c4:9b:80:93:69:af:87:0a:16:15:42:1a:11:66:9b:50:
         86:cf:9e:5c:89:96:1a:41:3f:c1:3b:b0:68:25:8b:a0:e7:84:
         98:28:ef:da:a3:7b:3b:8e:da:f2:96:9c:7a:9c:89:db:22:d5:
         2f:66:f2:7a:5a:47:20:a7:04:a6:a1:25:b5:89:8e:79:df:0b:
         ae:32:c8:2d:cd:6f:6f:ee:37:4d:73:25:9a:0c:f1:a2:f0:ba:
         f0:e4:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----