Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/fe500fb31174c9b64c476e5147af8027846eefb3.roa
File:                     fe500fb31174c9b64c476e5147af8027846eefb3.roa (raw, json)
Hash identifier:          McawV48xaL8KgiJS2RyFARVDr/ck0k864fuNL+3ohbw=
Subject key identifier:   D7:18:A9:1A:7D:9E:8A:0C:9B:5A:33:8E:1D:34:B6:AB:92:DB:55:0A
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       090A56
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/fe500fb31174c9b64c476e5147af8027846eefb3.roa
Signing time:             Wed 24 Nov 2021 17:18:17 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271837
IP address blocks:        2803:5810::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592470 (0x90a56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=fe500fb31174c9b64c476e5147af8027846eefb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:ea:50:d3:38:62:c6:66:47:d0:0d:31:a6:
                    c0:ca:8f:db:37:52:1e:ad:f6:d4:9a:0a:b1:d4:a9:
                    05:ab:63:6d:b3:c8:cb:92:80:57:8b:bc:95:43:ae:
                    19:47:37:da:16:ab:10:50:ea:99:46:e9:33:3b:52:
                    c0:e7:61:ff:b1:0c:67:59:0e:cb:af:b6:55:46:2f:
                    58:b8:db:5c:d4:fc:cc:82:c6:94:4e:ad:29:b8:c6:
                    c4:90:ed:21:5f:08:19:f5:dd:98:3d:83:13:ab:47:
                    cc:e6:f7:7a:06:bf:4a:6b:90:fe:45:38:c4:d9:89:
                    4b:b7:27:d4:1f:e8:f0:8e:1d:ad:0c:e7:95:38:db:
                    26:6d:38:aa:32:b4:64:f1:4b:ab:cb:4d:ba:38:27:
                    87:5b:e3:26:a2:cd:c6:55:2c:a6:f2:26:94:45:b1:
                    3f:e8:35:3a:01:05:0b:26:43:2c:d5:09:69:ba:d2:
                    9d:70:2f:8a:5e:83:57:b1:86:77:b5:55:da:cc:5e:
                    f1:33:7b:03:62:c1:eb:81:f2:6e:9b:8a:63:46:bf:
                    8b:8c:fc:52:c6:97:5a:af:f6:67:04:e7:a8:03:ee:
                    8d:cf:09:4d:a5:96:3c:12:aa:8a:41:bd:02:d3:a7:
                    1f:7a:67:39:43:a1:bd:f7:f8:fc:59:dc:82:bf:d2:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:18:A9:1A:7D:9E:8A:0C:9B:5A:33:8E:1D:34:B6:AB:92:DB:55:0A
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/fe500fb31174c9b64c476e5147af8027846eefb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5810::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:c8:e1:b6:f2:28:87:83:20:2c:58:2d:b2:53:bd:dd:e8:
         20:da:f8:7c:39:95:6a:40:ee:ca:b9:ad:26:ac:a8:4f:74:30:
         20:44:15:19:fe:41:b9:36:33:58:0c:db:17:04:19:b8:f2:28:
         60:9f:a4:70:71:b1:ed:c9:68:d7:eb:a6:63:33:ba:22:af:d2:
         e0:5d:07:cc:ca:ad:46:64:7a:0c:2f:54:32:13:78:f5:27:6c:
         8d:fe:23:5c:f3:54:7e:8d:e2:a6:59:a3:7e:21:b9:6e:c0:3e:
         e4:ed:e1:22:cd:dc:75:55:d3:c0:1f:3a:70:bf:95:4e:67:c0:
         ee:42:8d:13:7d:41:2c:52:02:5e:64:04:e2:c6:14:96:46:5e:
         cd:a0:fb:28:3c:75:dc:87:aa:65:b5:34:70:28:e7:1d:44:e5:
         ec:2a:20:48:7c:c2:7a:9d:34:a4:0c:7c:08:46:74:ed:1b:0f:
         4c:0d:97:92:bc:df:10:64:4c:11:a5:cf:0e:b0:f2:02:07:90:
         22:6e:0e:15:a3:36:15:f5:32:e3:ad:4f:2f:a3:61:6b:a5:eb:
         c1:b9:bc:a0:f3:2c:8a:37:be:55:40:83:4f:d8:17:9f:d6:fc:
         43:44:0a:e6:76:77:66:1b:51:29:60:6d:ea:09:64:b6:48:dc:
         1b:f3:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----