Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/c533a29fda46976d9df5869569f9539cea5b874e.roa
File:                     c533a29fda46976d9df5869569f9539cea5b874e.roa (raw, json)
Hash identifier:          B/fGON6zlTCPdllvZpIaddknNj/PIOacXhoBGABOVwk=
Subject key identifier:   C3:7A:2C:34:7E:55:33:D7:D1:D3:18:A4:12:E7:49:66:7D:79:B9:9A
Certificate issuer:       /CN=0cbb85e42b2f4026a791ab4ac115547607eff761
Certificate serial:       7F54
Authority key identifier: 5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/c533a29fda46976d9df5869569f9539cea5b874e.roa
Signing time:             Wed 01 Dec 2021 01:16:04 +0000
ROA not before:           Tue 30 Nov 2021 03:00:00 +0000
ROA not after:            Thu 30 Nov 2023 03:00:00 +0000
asID:                     272013
IP address blocks:        2803:b910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32596 (0x7f54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbb85e42b2f4026a791ab4ac115547607eff761
        Validity
            Not Before: Nov 30 03:00:00 2021 GMT
            Not After : Nov 30 03:00:00 2023 GMT
        Subject: CN=c533a29fda46976d9df5869569f9539cea5b874e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:31:fe:79:f7:94:ad:f0:0e:b8:1e:f0:8c:
                    ea:96:28:3d:de:bf:64:cf:86:2e:2b:46:db:69:d9:
                    c2:86:ae:e9:22:73:a2:12:cb:1d:2c:28:4d:8d:5b:
                    03:3e:a4:24:2b:e4:15:0a:36:d8:fd:0b:51:14:a7:
                    66:ad:b5:dc:aa:3a:4c:4f:1b:0d:9b:ed:ec:01:03:
                    fa:59:90:56:d7:31:62:70:cc:72:ee:81:84:d9:9c:
                    fd:1b:f8:24:24:5e:d2:83:32:27:9a:c3:c5:39:9b:
                    09:58:9e:84:05:cc:7c:3e:c9:ba:63:4e:75:89:3f:
                    9a:48:8f:f5:d9:37:61:eb:6e:33:7a:aa:8a:42:98:
                    42:78:6f:2b:32:40:24:f4:b9:e7:cd:43:c8:6a:5f:
                    d3:83:4b:a4:a0:00:09:0b:3a:69:a2:a7:03:03:e8:
                    2e:4b:ef:6a:8b:ef:65:ef:74:32:2c:56:7b:da:4a:
                    77:bc:78:bf:00:c1:2b:5e:2c:d8:78:d7:c3:09:57:
                    bd:01:d8:61:c1:e1:c9:7e:55:ac:9c:0e:d3:40:fa:
                    a8:3c:bf:a3:39:7f:94:eb:82:fe:24:28:ca:39:31:
                    63:a2:e6:93:87:80:8e:95:b2:ef:cb:b3:2f:6a:38:
                    95:52:54:b9:b3:75:44:51:a9:f7:5a:1d:26:35:a1:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7A:2C:34:7E:55:33:D7:D1:D3:18:A4:12:E7:49:66:7D:79:B9:9A
            X509v3 Authority Key Identifier:
                keyid:5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/c533a29fda46976d9df5869569f9539cea5b874e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/0cbb85e42b2f4026a791ab4ac115547607eff761.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b910::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:76:ec:d9:71:fa:25:96:f8:8a:d1:a9:49:27:68:1d:43:44:
         4a:77:73:b6:b9:51:41:2d:d1:8e:bc:21:ce:25:fa:79:12:e6:
         54:5f:c5:53:b5:f5:f5:c6:9c:93:b4:1d:e5:33:03:d7:fd:50:
         c2:c7:6b:e0:d5:90:7c:dc:58:15:f3:d9:8c:96:b7:b9:ec:04:
         7d:19:ca:c1:6a:dd:f0:81:1a:f6:d6:6d:4e:af:9a:6d:f7:a7:
         f8:e0:fa:d6:28:10:5a:36:99:aa:ba:90:23:94:a4:c4:55:9b:
         18:0f:0c:ab:95:3f:60:39:52:50:3c:84:85:ed:0c:d4:b5:5a:
         5c:b6:66:c3:f5:cc:0b:fe:74:3f:30:ab:62:16:ae:7f:e0:8c:
         28:37:c0:ee:bc:8a:48:f2:b5:de:12:d3:9d:bd:0d:d3:97:cb:
         f1:6b:56:a7:e6:7d:dc:ef:05:55:27:c0:03:e5:f2:92:37:15:
         20:e0:1e:43:7b:1f:21:75:0e:d5:2e:f2:bc:8a:6c:2e:4a:02:
         a3:fc:54:58:04:57:5f:1c:54:22:51:05:71:aa:7f:94:8c:ba:
         cf:75:e9:0c:6c:57:50:62:9a:8a:f8:25:69:ab:3a:a8:7b:7f:
         f4:10:1d:b3:9c:c1:00:74:12:2c:af:2c:e0:7e:96:e8:31:77:
         24:62:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----