Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/c428e33840b7630657f872e2aa0f3cb3d9ddd3e6.roa
File:                     c428e33840b7630657f872e2aa0f3cb3d9ddd3e6.roa (raw, json)
Hash identifier:          EI9WcF02mDBOtfMwWKIt0htlbx/HHpeS8TVVPYXyMAQ=
Subject key identifier:   C4:C6:91:FD:3D:D4:50:84:8F:2D:5E:A0:F3:1C:4F:55:98:6F:48:0C
Certificate issuer:       /CN=f60c96e228a75d53e32c9d1316102ef48949b6f0
Certificate serial:       04D7
Authority key identifier: B4:D4:C5:91:67:E9:EB:F7:2F:B3:C3:B5:2A:D1:27:7C:20:71:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f60c96e228a75d53e32c9d1316102ef48949b6f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/c428e33840b7630657f872e2aa0f3cb3d9ddd3e6.roa
Signing time:             Wed 12 May 2021 16:32:07 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     271913
IP address blocks:        2803:3210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c96e228a75d53e32c9d1316102ef48949b6f0
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=c428e33840b7630657f872e2aa0f3cb3d9ddd3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:aa:02:f0:17:ac:2d:89:8d:bf:5c:fb:2e:
                    cf:f6:12:99:d9:e1:e5:b9:e5:c6:00:ef:37:3b:d8:
                    9e:9e:38:3d:73:12:c0:5e:ca:45:c4:eb:ef:2e:64:
                    69:31:04:05:ea:60:1f:49:a4:27:34:cc:39:fb:e5:
                    3f:c1:49:44:21:5b:06:c4:b9:81:3b:25:a5:fd:ab:
                    9d:ad:bf:38:a5:64:c6:9f:50:a0:c7:99:18:6e:13:
                    0d:d9:58:0f:78:ab:e1:82:1e:7d:58:44:27:cb:a4:
                    7a:0d:19:46:df:c6:6b:64:11:4f:be:5d:c3:a3:b3:
                    72:9d:96:ac:3a:11:93:17:11:c0:01:37:32:16:94:
                    66:24:6c:5c:c6:f6:8f:5f:fa:e9:d6:53:92:72:be:
                    bd:65:6e:62:20:f5:65:70:96:9a:67:15:d5:94:33:
                    c9:60:6e:86:57:5a:a4:7b:0a:9a:38:48:a5:6c:50:
                    8b:a7:e1:a9:84:79:ac:c6:bb:29:49:37:b9:95:58:
                    02:30:6d:51:ca:dd:7d:dd:4f:59:f7:25:d6:67:b8:
                    42:ea:6d:75:77:79:38:ba:5f:f8:69:ea:9a:f3:4a:
                    4e:ca:2d:41:80:ef:4a:78:64:e2:7c:0e:c1:0e:0d:
                    56:e5:cd:4d:40:08:40:4d:20:2d:d3:6e:1c:bd:44:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C6:91:FD:3D:D4:50:84:8F:2D:5E:A0:F3:1C:4F:55:98:6F:48:0C
            X509v3 Authority Key Identifier:
                keyid:B4:D4:C5:91:67:E9:EB:F7:2F:B3:C3:B5:2A:D1:27:7C:20:71:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f60c96e228a75d53e32c9d1316102ef48949b6f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/c428e33840b7630657f872e2aa0f3cb3d9ddd3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ecd41e8-97d7-41ce-a6a8-739c3db73a0d/f60c96e228a75d53e32c9d1316102ef48949b6f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3210::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:39:2b:da:63:d4:84:8b:76:03:bd:b0:10:81:3d:bf:7e:
         be:03:3f:f8:4d:da:df:3f:25:a3:1f:c4:e3:93:24:ba:28:fb:
         d0:c9:21:36:17:c3:cc:11:20:53:c0:ce:70:b1:54:55:10:20:
         d7:ae:cf:fa:77:b0:9e:24:17:11:e2:e6:8e:cd:63:54:75:11:
         22:68:69:6a:90:ac:d9:e1:5a:51:fb:3a:3b:d9:43:07:e3:71:
         a6:bc:90:5f:f3:8f:14:03:46:f6:42:ad:c4:1b:2d:11:cd:86:
         d3:94:f8:3f:85:2e:e4:6d:7c:e2:fe:62:d3:74:5e:ab:27:ce:
         07:7c:c6:60:8d:ef:80:cd:95:56:86:79:57:b3:7c:96:ed:72:
         45:2e:b1:0d:b2:51:49:1c:ae:63:66:38:65:e8:c4:72:8f:db:
         af:1e:60:ce:ff:35:4c:65:f5:ca:aa:3b:4d:11:ab:8e:c9:35:
         88:b8:fe:8f:94:ad:dc:36:9c:35:8e:24:0e:c2:19:6d:a9:3e:
         a3:e4:45:95:a6:89:7d:78:27:c1:35:fc:b9:13:db:fb:3e:f5:
         4a:2a:60:04:7a:e0:b3:4d:8b:1a:af:44:49:34:fd:d0:d7:8d:
         4e:86:7c:be:66:ad:c8:bf:cc:f1:44:a9:51:2e:03:ae:75:07:
         61:5b:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----