Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/a8c8620c1a29ad27f12c15655feb13245108f655.roa
File:                     a8c8620c1a29ad27f12c15655feb13245108f655.roa (raw, json)
Hash identifier:          yq9s+knjLY1qP3Zt1ICeH0wQZRC0TLmtHHasnDX6+6U=
Subject key identifier:   4C:E9:F5:12:70:20:F2:4D:E4:F4:BE:13:22:45:2A:85:A1:D5:D9:63
Certificate issuer:       /CN=baeea1c2e5b60654afd780eaa676eed50b19b634
Certificate serial:       0315
Authority key identifier: 53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/a8c8620c1a29ad27f12c15655feb13245108f655.roa
Signing time:             Fri 15 Oct 2021 05:29:28 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     271889
IP address blocks:        2803:210::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baeea1c2e5b60654afd780eaa676eed50b19b634
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=a8c8620c1a29ad27f12c15655feb13245108f655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:0c:e2:a8:9d:20:b4:76:dc:73:fa:be:d7:
                    cd:51:99:97:c8:60:7b:39:39:43:3d:47:f7:85:a2:
                    f3:30:a8:f4:f2:a5:53:fe:a5:16:1c:bc:b6:1f:0f:
                    68:fd:74:45:ac:88:3b:ab:3c:71:44:56:ab:5c:4a:
                    28:5e:71:ed:cd:1d:1a:30:3c:fa:c4:2f:97:37:7e:
                    07:ca:84:e8:26:2e:69:bf:e3:0d:f0:6e:e4:43:5a:
                    77:f1:15:27:19:c6:cf:20:e3:61:cb:39:f6:e2:02:
                    1e:86:80:1e:36:39:68:87:1c:8e:99:68:3a:66:2a:
                    b9:cf:2b:63:6e:10:0d:5e:0d:af:e2:1e:9d:12:02:
                    f2:0b:72:a0:0d:30:b9:66:3d:81:f8:62:da:0e:51:
                    3a:e4:47:41:1f:bf:43:4f:e6:5e:14:36:e3:ba:c0:
                    e2:42:58:7b:61:cb:c6:da:0b:79:11:86:70:69:5c:
                    db:e7:a7:29:5b:71:93:4e:01:ab:bc:05:34:e7:dd:
                    a8:62:71:15:f1:5e:87:c0:5a:7e:be:3d:6c:49:3c:
                    5e:91:ef:03:38:3d:4f:1e:c5:fd:ff:5d:53:90:b2:
                    96:90:74:56:a3:3a:23:09:bb:67:fb:4f:4f:d1:e4:
                    bd:b4:cd:ee:16:4c:0d:f8:90:25:88:cc:2b:a1:e2:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:F5:12:70:20:F2:4D:E4:F4:BE:13:22:45:2A:85:A1:D5:D9:63
            X509v3 Authority Key Identifier:
                keyid:53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/a8c8620c1a29ad27f12c15655feb13245108f655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:50:f6:cf:c0:df:18:04:f6:45:b9:c9:7c:a5:64:b5:ea:
         90:a1:eb:3b:c3:b0:08:3a:36:8c:07:37:1a:5e:89:5c:59:6a:
         e4:29:9a:cb:6b:82:21:5a:0d:19:95:a3:22:1d:57:10:c9:83:
         5e:24:bc:20:db:8f:13:de:00:06:a3:ae:70:d6:ae:56:6f:26:
         07:73:07:55:ac:61:e8:d5:1d:f1:ac:13:af:16:51:3f:44:3f:
         a0:5e:20:c2:2b:61:7e:a9:0d:b9:dc:a0:cb:ee:94:38:c1:c9:
         b1:af:d0:78:bb:20:2f:be:2f:bb:fb:68:28:24:94:7d:ff:bc:
         b1:59:2d:d0:76:38:60:91:b6:70:c4:21:22:da:5b:52:7f:5f:
         52:b7:88:50:51:43:10:fd:a1:31:6a:13:52:e1:a3:d9:04:4e:
         bf:cb:6f:2e:07:d3:e9:7e:8c:dd:ba:aa:64:23:7f:ba:39:04:
         8b:22:78:1e:38:9c:39:06:bb:11:c5:21:fb:99:38:90:5d:36:
         fa:e7:07:d4:df:06:f6:ee:88:6c:d0:c3:e0:f7:87:8c:66:58:
         eb:32:e2:7c:0b:45:d3:6d:83:30:6f:dc:32:a2:d2:c2:7b:96:
         f8:fb:47:8e:f9:b7:17:8e:56:58:6c:f2:7b:3c:cd:78:a0:b6:
         b2:ca:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----