Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/f8a22c642296ca54920d44798e752410bfc7a0da.roa
File:                     f8a22c642296ca54920d44798e752410bfc7a0da.roa (raw, json)
Hash identifier:          iktH03DodpWb7/0B/PrYhlmLh/n2/DG0UFU/Eixt5BE=
Subject key identifier:   00:E9:31:79:15:AE:D4:AB:B4:59:99:41:91:8D:62:0D:2C:95:42:A0
Certificate issuer:       /CN=9d85ce0d434273e623cb46add718a5d62e967fd1
Certificate serial:       0D6607
Authority key identifier: ED:8D:8E:6D:4B:82:4C:B3:59:AC:E3:13:E5:A0:AD:3F:01:A1:E9:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d85ce0d434273e623cb46add718a5d62e967fd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/f8a22c642296ca54920d44798e752410bfc7a0da.roa
Signing time:             Wed 24 Mar 2021 14:28:52 +0000
ROA not before:           Wed 24 Mar 2021 14:28:52 +0000
ROA not after:            Tue 24 Mar 2026 14:28:52 +0000
asID:                     263221
IP address blocks:        2803:a680::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878087 (0xd6607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d85ce0d434273e623cb46add718a5d62e967fd1
        Validity
            Not Before: Mar 24 14:28:52 2021 GMT
            Not After : Mar 24 14:28:52 2026 GMT
        Subject: CN=f8a22c642296ca54920d44798e752410bfc7a0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:9b:92:ad:14:c5:dc:97:a4:ce:a4:c2:c1:
                    d5:b0:99:ab:b3:5e:0e:4e:29:b8:c8:6d:0f:71:22:
                    2f:a3:27:5e:a1:e8:b8:02:1f:52:6b:5f:1c:a7:f5:
                    d3:61:f9:9c:98:0b:91:9e:72:a3:da:73:21:8b:f6:
                    5b:d5:f5:8c:7c:1e:fe:3d:1d:3e:d5:75:35:be:19:
                    80:22:ae:fb:67:d2:d9:0c:cb:24:fa:11:dc:74:ef:
                    09:f2:9a:5d:f4:e5:70:7d:2e:2e:25:b3:6d:bf:5d:
                    ad:21:5b:2c:06:50:64:82:6b:d1:ff:c9:d8:b1:39:
                    3f:df:85:f6:cb:da:3e:52:55:45:b8:82:c6:9b:93:
                    6b:08:f4:86:2d:33:0d:67:b3:a2:e8:ab:42:d8:7e:
                    1e:0f:45:7f:64:c1:e1:f1:8b:e0:91:d0:2e:60:7d:
                    53:69:8a:33:92:e4:8f:93:ca:9d:ee:0f:12:3f:6f:
                    80:7c:04:3a:fa:8d:b1:31:7b:5d:54:ad:bb:49:7f:
                    a9:e2:68:8a:39:4f:37:2e:44:46:48:cf:6e:69:fe:
                    e2:c2:d4:c7:1d:f3:b8:de:2b:ec:65:e7:46:2d:c9:
                    62:c7:eb:50:5e:3a:3d:d0:fa:90:c7:85:cc:4b:3b:
                    c0:b7:a9:c1:51:f6:68:13:7b:67:5d:d5:6e:e1:ca:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:31:79:15:AE:D4:AB:B4:59:99:41:91:8D:62:0D:2C:95:42:A0
            X509v3 Authority Key Identifier:
                keyid:ED:8D:8E:6D:4B:82:4C:B3:59:AC:E3:13:E5:A0:AD:3F:01:A1:E9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d85ce0d434273e623cb46add718a5d62e967fd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/f8a22c642296ca54920d44798e752410bfc7a0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8032544b-7a43-4110-8325-a3c7a15e2015/9d85ce0d434273e623cb46add718a5d62e967fd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a680::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:c7:1b:55:ef:dd:dc:f2:fe:fe:b4:ba:10:4e:fa:a0:0d:
         ad:4f:36:31:bf:c4:ab:fd:76:eb:ce:41:a9:d1:37:5f:4b:42:
         37:bd:f5:f6:11:78:38:25:b1:b4:34:3c:5c:79:98:4c:55:9c:
         e3:73:a6:e7:87:c1:00:1b:ac:46:56:e1:c4:14:18:43:34:67:
         e6:0e:47:5e:c2:d5:21:d4:45:57:6a:9d:8c:09:e7:65:de:52:
         56:75:db:83:9b:ac:8f:69:bf:0c:42:d7:87:b4:af:f0:41:db:
         21:9e:36:80:6c:f0:78:ce:a4:da:f4:a7:36:a5:d3:0a:a7:2a:
         5d:5b:6f:34:96:fe:98:1b:e0:2c:1c:06:ac:18:1a:03:87:6e:
         4c:ac:8c:be:d5:60:ca:e8:32:2b:89:ea:1d:78:75:67:77:bd:
         2b:0d:b3:3f:c4:07:b3:1b:d2:5f:a0:cc:9c:82:8b:ff:0d:3f:
         5b:a0:0b:3a:e8:1d:b3:81:93:79:2d:ff:83:b6:10:79:81:35:
         83:9e:af:1f:e9:b0:dc:98:68:ee:e8:0e:63:31:8e:b6:99:18:
         0a:07:07:1e:83:fb:a6:ab:94:e0:61:b0:eb:a7:57:bd:c9:15:
         07:98:ea:f6:d5:04:1a:0b:14:df:1b:75:cb:40:9f:7f:24:6a:
         4f:73:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----