Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/b5b1819d56501356370161284f99e4a06ebe3849.roa
File:                     b5b1819d56501356370161284f99e4a06ebe3849.roa (raw, json)
Hash identifier:          abTobaFoTDvzQcfG8t9eSularL0hy6L5fNAhveF9Wi8=
Subject key identifier:   CF:C9:11:60:CD:D7:71:A9:8F:FD:81:57:B0:D1:8E:38:97:32:B2:A3
Certificate issuer:       /CN=baeea1c2e5b60654afd780eaa676eed50b19b634
Certificate serial:       1ABE
Authority key identifier: 53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/b5b1819d56501356370161284f99e4a06ebe3849.roa
Signing time:             Fri 15 Oct 2021 05:34:19 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     271889
IP address blocks:        2803:210:3::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6846 (0x1abe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baeea1c2e5b60654afd780eaa676eed50b19b634
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=b5b1819d56501356370161284f99e4a06ebe3849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:2c:82:0d:f1:0d:b2:25:59:93:50:89:4b:
                    06:b3:95:c6:60:76:88:72:25:88:2d:69:31:ed:2d:
                    60:0a:b1:89:5b:95:fe:fc:8c:18:f6:6d:46:9e:05:
                    89:37:da:16:06:d5:d1:17:48:d8:d4:f8:c7:70:ba:
                    54:90:1d:6d:61:b3:7d:c4:0b:d2:11:be:d8:2d:e2:
                    58:b7:ca:6d:55:70:ae:85:08:9a:30:a6:3f:9a:2c:
                    2c:67:42:89:2d:6a:6e:7c:9d:d6:c1:80:eb:98:fa:
                    3f:e0:8b:dd:3a:ef:45:fa:47:e9:3b:06:57:46:70:
                    3d:73:34:73:d1:d6:06:97:14:bf:8a:05:ae:b5:b0:
                    fb:24:d7:50:42:80:09:d0:d9:91:ef:fd:6c:6e:d6:
                    e7:cc:d4:b3:98:15:64:42:62:26:69:7b:7e:6f:65:
                    f0:2c:a2:4c:09:db:26:26:b4:98:ad:99:5f:7b:57:
                    52:14:bb:80:cd:01:ea:20:0d:d0:e4:38:74:69:dc:
                    2f:a4:34:95:d5:68:5c:df:c8:50:76:a4:37:13:70:
                    98:49:72:d3:de:93:bf:49:2c:44:46:e0:5a:cc:c5:
                    f0:42:25:f9:31:05:8f:37:64:a2:55:86:44:67:3e:
                    e9:cd:17:96:ee:f8:83:70:f6:fd:6f:52:89:ec:51:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C9:11:60:CD:D7:71:A9:8F:FD:81:57:B0:D1:8E:38:97:32:B2:A3
            X509v3 Authority Key Identifier:
                keyid:53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/b5b1819d56501356370161284f99e4a06ebe3849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:64:a6:7b:a4:23:bc:85:eb:4d:7d:3f:e9:e2:b8:f4:72:
         72:3a:66:c2:b0:23:ad:65:19:0a:c2:eb:32:3b:7f:cd:3e:3b:
         6f:25:5a:8b:77:77:21:a6:5a:7c:1a:51:17:20:ca:d5:54:ae:
         db:25:d1:86:c7:79:7e:6d:1b:61:63:ca:06:06:44:e3:b5:f8:
         8a:03:c9:a9:53:16:a7:f8:b0:ac:50:9e:28:5c:45:c5:11:00:
         c1:a7:d2:a9:f2:3b:a7:56:66:6a:0e:74:3e:8a:63:91:fc:eb:
         1e:66:8a:aa:5f:0f:5c:ea:51:3e:7f:f5:5b:d7:52:58:c0:f1:
         34:8d:b8:f7:77:49:84:7c:e5:09:2d:53:6c:a1:37:0a:1c:d6:
         2d:10:8f:51:d7:1a:85:aa:00:ca:e0:58:bb:83:e3:66:09:62:
         85:a6:11:f6:50:6e:42:36:5b:98:95:0e:e1:36:0e:bd:4c:43:
         77:23:51:78:7f:3c:07:c6:46:ad:48:de:0d:99:24:7e:27:7e:
         a4:08:1e:c6:83:97:33:84:d7:6e:22:9c:1b:eb:d5:2f:e7:b0:
         bb:54:aa:e8:d1:d0:ad:25:74:01:3e:f9:e4:3c:75:45:08:43:
         36:48:38:aa:40:2a:7b:5a:8c:b2:6c:34:4a:4e:ae:45:b7:83:
         a7:96:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----