Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/4352cbb9ec4c5c5604d894868d57d21716c3cfd7.roa
File:                     4352cbb9ec4c5c5604d894868d57d21716c3cfd7.roa (raw, json)
Hash identifier:          Ja+UHlKf16aI3vEidAvndOtVUVgOGpA1dol4VmmwIcg=
Subject key identifier:   A2:EA:84:26:39:EA:A6:40:6F:C9:BB:90:67:B1:69:4E:24:E7:76:0C
Certificate issuer:       /CN=0355d87e3448f414f994660978ab87d5ff78b854
Certificate serial:       10FC52
Authority key identifier: 6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/4352cbb9ec4c5c5604d894868d57d21716c3cfd7.roa
Signing time:             Mon 25 Oct 2021 22:05:26 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     52486
IP address blocks:        2803:1700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113170 (0x10fc52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0355d87e3448f414f994660978ab87d5ff78b854
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=4352cbb9ec4c5c5604d894868d57d21716c3cfd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c8:72:d7:f3:de:9b:c4:3e:16:74:98:ad:d8:
                    82:90:a9:83:c8:99:f3:50:75:ab:30:bf:f0:f6:7e:
                    d4:92:97:54:28:9d:16:85:9e:49:24:32:e2:de:c8:
                    92:e9:4e:61:a9:d2:01:f4:c8:dc:d0:94:0b:9b:ee:
                    15:75:83:c3:9f:2d:c6:71:3e:8b:4f:53:fb:c5:3e:
                    7b:99:08:0e:9d:b5:bb:43:a4:92:79:ac:f6:dc:54:
                    7f:73:9a:50:81:13:15:01:d5:44:e5:7e:a4:91:47:
                    1b:f0:1e:26:3e:56:6f:d1:36:dd:e0:4e:9d:8d:7f:
                    e2:1d:4f:81:f6:8f:51:f3:2f:5c:ef:b2:3b:cd:72:
                    ce:82:27:30:c7:8e:f5:3f:f3:82:31:48:0d:e4:8a:
                    a9:3a:a5:62:b7:64:9c:fb:3a:a5:04:bd:8a:07:ff:
                    9b:72:22:cd:e1:83:43:f0:6e:7d:7b:9e:50:e6:6b:
                    fc:68:e5:73:0c:36:78:18:1f:13:a8:15:63:65:dd:
                    83:c2:90:37:ab:2a:cb:b4:b1:7e:f5:0d:0b:96:07:
                    40:bf:72:d6:f8:3a:48:80:26:42:aa:55:30:2a:2c:
                    86:49:b9:4e:41:32:4c:3d:15:80:a1:ed:7c:1d:41:
                    77:4f:d4:34:1f:e0:3c:a6:9f:d8:66:6f:07:8c:85:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EA:84:26:39:EA:A6:40:6F:C9:BB:90:67:B1:69:4E:24:E7:76:0C
            X509v3 Authority Key Identifier:
                keyid:6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/4352cbb9ec4c5c5604d894868d57d21716c3cfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/0355d87e3448f414f994660978ab87d5ff78b854.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1700::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:9e:f4:14:31:5b:e7:26:0c:cb:b2:3e:cc:61:50:95:2f:
         45:b5:ab:1d:d8:35:40:32:94:af:f5:ff:58:94:3a:d2:71:8c:
         d3:bc:43:f4:ec:6a:2d:78:82:ab:f0:27:10:a6:4c:24:7d:83:
         99:8c:18:09:b3:0a:6b:9e:58:ad:db:94:1a:2f:77:a7:2c:bb:
         a7:1d:e8:30:8c:35:7e:18:40:c7:15:64:ab:65:67:a3:8b:d5:
         fb:52:ed:e4:17:c2:d1:5c:55:2f:43:b8:f1:83:df:19:c4:cf:
         29:09:85:ce:53:99:03:58:5c:29:91:34:93:00:ef:ae:a1:99:
         8a:52:c3:8a:a7:9c:e3:c9:ba:b4:3b:77:f1:b5:23:6f:34:d2:
         89:2e:b6:95:52:ff:16:1f:c0:59:ad:f9:52:56:e0:8d:fe:9d:
         a5:0d:a6:c2:d6:d9:77:b0:d8:8e:f0:88:57:b9:a1:9d:7f:3a:
         6f:7d:8f:be:52:85:72:b6:f6:50:c0:f7:27:a0:81:8f:c4:ce:
         1a:b3:57:c5:37:d7:22:18:3e:a2:b4:fd:7b:3e:47:6b:75:90:
         02:66:74:8e:a3:79:6a:fd:ac:70:a3:48:bb:8e:52:19:82:77:
         76:d9:07:bb:6b:5a:8c:e0:bd:3c:68:a6:b0:8f:3f:8a:1c:90:
         1d:35:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----