Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/05808df6c80bb57cd6d24df1e638dbd8875ca68c.roa
File:                     05808df6c80bb57cd6d24df1e638dbd8875ca68c.roa (raw, json)
Hash identifier:          MhUwMEjELXwfTtFFWKg3y76y/hlTEwhP9eXL9zaN9hw=
Subject key identifier:   60:DB:95:3B:AA:C1:10:A8:8B:EC:DF:EE:62:0A:C1:33:EC:26:01:2E
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       010A9B
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/05808df6c80bb57cd6d24df1e638dbd8875ca68c.roa
Signing time:             Tue 26 Oct 2021 11:34:02 +0000
ROA not before:           Mon 20 Sep 2021 03:00:00 +0000
ROA not after:            Wed 20 Sep 2023 03:00:00 +0000
asID:                     271956
IP address blocks:        2803:7610:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68251 (0x10a9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 20 03:00:00 2021 GMT
            Not After : Sep 20 03:00:00 2023 GMT
        Subject: CN=05808df6c80bb57cd6d24df1e638dbd8875ca68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:1f:3e:ad:3a:eb:22:2d:ee:e8:e0:de:87:
                    5b:07:22:d3:e1:44:68:da:d4:a5:0f:24:a0:ce:d3:
                    1b:44:a3:30:0d:04:27:75:5e:20:d4:08:90:db:21:
                    71:de:0e:b4:19:a4:ac:e4:46:a0:0b:69:1c:c4:3d:
                    da:ed:14:4c:46:37:7b:f8:e9:70:83:de:63:a3:07:
                    95:20:40:14:21:f8:d4:4a:03:20:6f:72:f3:d3:0d:
                    03:31:c6:84:12:2e:29:36:49:82:e6:0f:d2:57:b7:
                    db:83:59:f9:97:c6:b8:c7:ce:fc:10:8f:2a:f7:f3:
                    aa:d8:bf:d6:3a:1d:53:cf:a1:cc:24:24:11:b6:7a:
                    83:44:76:58:b7:cf:26:e3:58:c6:9c:57:e6:63:e6:
                    70:fd:60:3c:c3:a9:8c:35:97:46:66:ca:36:66:f3:
                    de:e0:8d:1a:c2:b0:0c:76:41:71:63:c4:98:a9:dc:
                    f6:5a:54:62:ad:6e:77:3e:2d:bd:8b:90:15:fe:37:
                    64:b8:08:26:40:a6:76:2a:fe:13:40:31:bf:fc:b3:
                    61:f5:d9:ab:28:59:39:ef:9f:73:0c:d5:42:4c:11:
                    81:37:c7:86:d2:d1:4a:33:67:ef:42:6e:f8:19:4c:
                    54:38:88:42:ce:76:b3:8b:c7:bd:c0:1d:0e:75:53:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:95:3B:AA:C1:10:A8:8B:EC:DF:EE:62:0A:C1:33:EC:26:01:2E
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/05808df6c80bb57cd6d24df1e638dbd8875ca68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:f6:ea:a1:7d:18:6a:b4:14:78:e3:ff:9e:39:12:d1:ac:
         94:a0:65:8e:b1:a2:60:f7:ec:b8:92:35:18:7a:13:0a:80:ba:
         ba:c0:0b:70:4c:a5:be:48:36:a7:9e:2a:c1:6d:5f:14:78:4a:
         37:45:83:f2:b4:0b:77:6a:ab:38:3b:49:02:60:93:22:db:9b:
         d5:1a:2f:6c:d9:b3:22:a2:20:1e:30:ec:38:a1:ed:7a:11:a8:
         8e:2f:47:37:a0:29:82:a2:17:fa:f1:82:9e:fa:55:56:cc:bf:
         28:2a:d7:76:ef:af:2a:01:01:78:43:63:7b:4d:66:0f:41:dc:
         cc:d3:a7:e8:89:9e:c8:85:6d:c0:f8:cb:85:23:74:c4:61:e7:
         d0:36:65:e3:bb:1b:58:21:3c:f8:71:ea:53:43:85:f5:dc:52:
         5b:f7:9f:23:2c:92:66:9e:52:58:43:e6:39:1c:02:5a:b6:d0:
         0b:64:b0:95:44:48:ac:60:62:d3:09:03:3a:54:43:54:a7:7f:
         27:d5:36:f4:69:83:62:6f:e0:0c:3d:19:01:53:3e:a9:43:6d:
         97:d2:ca:2b:5f:63:11:69:b8:17:0f:ca:f1:56:61:4a:9c:48:
         8a:24:6b:f4:0d:ae:b4:22:cd:cc:3b:b7:c2:5a:ad:cc:78:2d:
         47:d5:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----