Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/95fb3601f3d0fbf82d928ccdd592107838cdf533.roa
File:                     95fb3601f3d0fbf82d928ccdd592107838cdf533.roa (raw, json)
Hash identifier:          PL6Dn0OhJ/DPGME4pCtxVKgFMbrk30zbjZeKosMlEjk=
Subject key identifier:   A4:A0:72:59:6A:B8:D2:1B:64:26:44:4B:7D:C0:FF:C7:5D:4E:81:0C
Certificate issuer:       /CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
Certificate serial:       0EBDDB
Authority key identifier: 51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/95fb3601f3d0fbf82d928ccdd592107838cdf533.roa
Signing time:             Thu 19 Aug 2021 02:23:46 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     12956
IP address blocks:        2803:4e60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966107 (0xebddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=95fb3601f3d0fbf82d928ccdd592107838cdf533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:9f:3d:9e:db:96:97:94:b9:28:7f:5f:6c:
                    ea:96:0b:a7:95:40:64:db:ef:e5:ce:50:94:be:c2:
                    c1:2c:c8:18:fe:8f:a8:0b:78:2e:ee:fe:77:2b:fb:
                    33:11:f1:ba:58:9e:b1:98:af:d7:61:6f:52:98:25:
                    07:8e:d4:14:72:77:87:28:b6:9f:66:03:59:d8:5f:
                    6f:97:b7:09:21:d8:32:ed:68:ba:12:9b:27:38:ee:
                    0f:43:b1:cf:4f:1e:41:0c:b7:2e:ed:67:cc:d0:a9:
                    ca:aa:98:0c:22:07:d4:26:2c:da:57:7e:be:eb:73:
                    01:12:f8:d5:3a:07:3a:0c:a5:f5:4e:3a:4b:1c:68:
                    67:c9:85:f1:46:a1:71:17:9d:12:93:bb:50:07:f4:
                    37:79:5b:fa:27:29:72:e5:0b:88:8a:04:6d:3a:ef:
                    47:9c:da:ba:06:5d:64:bc:eb:5d:b8:b1:7b:6e:a3:
                    d3:a6:31:fb:9a:ba:2d:a0:7b:6f:a2:e1:f7:23:62:
                    b4:eb:b0:2c:9e:3a:ab:9c:dd:c5:98:bd:ab:6f:b2:
                    70:b3:57:14:ac:a5:e1:95:b1:e3:02:2a:a2:0f:0b:
                    d0:92:40:0d:b3:f5:74:c9:58:59:35:33:75:c1:af:
                    be:4d:8f:eb:43:49:12:b7:2a:2e:01:ee:66:bd:78:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A0:72:59:6A:B8:D2:1B:64:26:44:4B:7D:C0:FF:C7:5D:4E:81:0C
            X509v3 Authority Key Identifier:
                keyid:51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/95fb3601f3d0fbf82d928ccdd592107838cdf533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:7c:57:db:57:c4:cc:9f:32:34:36:9e:0f:9f:7a:4f:f3:67:
         78:e5:9d:54:bc:d3:80:22:90:9f:12:71:47:1d:be:9a:5b:49:
         d2:58:d1:23:28:d1:e3:91:8c:b5:35:89:05:e0:55:bf:d0:ee:
         43:c6:9e:2c:a2:09:80:7f:1c:70:ef:25:41:73:e8:27:55:1d:
         96:35:e1:f3:89:90:ec:9f:9b:f3:ea:e1:19:aa:0b:5b:3c:03:
         ff:5e:41:2f:e6:b4:cd:fc:7b:71:8f:77:0c:9f:7d:67:d0:09:
         b6:66:b2:d2:dd:19:58:24:60:23:ea:a8:15:a8:19:be:ff:a8:
         1d:67:ef:23:14:c5:e4:58:9c:1c:33:ab:51:b4:e6:8d:db:80:
         3f:1d:62:f3:07:8a:d1:1d:b3:05:0b:8c:c8:5c:1b:dd:cf:73:
         8b:0f:32:41:5f:8b:5a:3a:b0:23:54:ea:88:cc:73:09:bc:55:
         61:0f:b0:65:27:4f:99:a2:d0:67:e2:04:cc:c2:4e:1a:16:b8:
         fb:62:31:d3:b9:7a:29:49:48:53:87:b8:73:a3:f5:71:e0:e2:
         a0:f0:4c:f4:7d:d2:7c:40:19:f6:6a:a4:db:b7:36:c6:f7:1c:
         48:44:00:64:5b:5f:57:8c:3d:54:2e:0a:77:eb:18:89:cf:b9:
         94:a7:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----