Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/fd4ce211eb7faa6f2ae7d627ef26eb202f557486.roa
File:                     fd4ce211eb7faa6f2ae7d627ef26eb202f557486.roa (raw, json)
Hash identifier:          CALb6mLYcYmhnpTsG2RCanIyQxfNsDb4dxr6R2Swlh8=
Subject key identifier:   CF:65:73:7B:1D:5C:44:77:9F:E3:23:D2:85:82:A8:90:66:BF:8E:A0
Certificate issuer:       /CN=baeea1c2e5b60654afd780eaa676eed50b19b634
Certificate serial:       24C6
Authority key identifier: 53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/fd4ce211eb7faa6f2ae7d627ef26eb202f557486.roa
Signing time:             Fri 15 Oct 2021 05:35:17 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     271889
IP address blocks:        2803:210:2::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9414 (0x24c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baeea1c2e5b60654afd780eaa676eed50b19b634
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=fd4ce211eb7faa6f2ae7d627ef26eb202f557486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:11:30:b5:f6:7f:c3:93:d3:8f:f8:fb:13:
                    c4:66:22:e5:78:2a:5a:bc:ad:c4:93:51:b7:73:22:
                    e1:15:20:a9:69:7f:fb:a9:48:d7:9b:fe:8f:87:b2:
                    a4:16:72:8c:d3:f0:4d:13:fa:0e:cb:77:49:50:4b:
                    cb:55:60:bc:2a:04:06:41:f7:e9:9e:73:a1:40:25:
                    32:0e:ab:9f:c7:1d:79:94:c0:65:32:7b:fb:da:cd:
                    ae:8b:e2:e8:14:f9:bc:7c:ec:43:69:61:2d:7a:61:
                    4c:42:21:8a:b0:62:24:d3:7d:10:93:19:56:8a:b9:
                    79:53:b1:9c:c6:7c:2d:4b:3b:75:54:5a:1f:e2:27:
                    32:ef:cd:6f:56:83:81:b1:48:c5:16:63:dd:eb:b0:
                    e4:b6:e5:7b:ba:23:20:b3:69:6e:bf:37:d3:9c:f0:
                    0d:88:4a:6e:83:48:4f:a3:68:e1:03:a8:ce:e9:19:
                    a6:b7:25:4c:ae:d2:5a:90:e8:8d:e4:94:ba:7c:af:
                    29:11:79:12:26:db:fe:24:d7:09:d3:54:98:53:53:
                    4e:61:95:c1:4e:df:ef:61:ab:55:62:76:2b:54:2b:
                    ee:6c:04:c3:df:fa:e7:f0:0d:35:ce:bb:71:8d:1f:
                    8c:73:88:b9:64:9d:c5:88:db:8b:4a:66:ed:04:bf:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:65:73:7B:1D:5C:44:77:9F:E3:23:D2:85:82:A8:90:66:BF:8E:A0
            X509v3 Authority Key Identifier:
                keyid:53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/fd4ce211eb7faa6f2ae7d627ef26eb202f557486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:3c:3c:a7:75:97:4a:c5:08:a2:94:10:65:4b:7a:e0:e8:
         36:b7:96:89:46:7f:d0:70:48:28:32:c1:a5:66:b5:c3:0d:22:
         dc:90:56:ff:25:e4:2e:b4:df:47:ce:05:ae:7b:6a:18:ea:6e:
         3f:1d:0e:92:ba:8d:8f:c8:e2:93:e6:9f:01:ee:a8:bf:24:b8:
         c5:37:2d:c9:66:e1:d1:08:c5:0a:e9:cf:21:3a:af:07:f5:c2:
         0a:56:70:ca:2b:d9:61:87:f0:b3:2f:8a:6a:ee:6c:a6:06:e7:
         d7:5e:58:6a:b3:fd:de:8f:26:1f:5a:53:ff:00:16:b1:1f:3f:
         55:d9:2c:6c:8f:fb:ca:44:08:7a:fb:20:aa:f3:7e:b4:8a:90:
         8d:56:f4:1f:4e:9a:5b:b2:ad:e8:d7:1f:50:a1:dc:d1:b0:10:
         cf:5f:af:97:9d:c4:a3:ea:15:59:9b:09:57:ae:ce:b8:0e:91:
         cf:1e:b7:30:ab:05:84:ff:ea:38:da:b4:1b:4c:10:8c:a2:70:
         cf:f9:98:ad:8f:d9:ab:32:d7:65:6b:2c:5d:79:ba:49:df:35:
         55:cf:80:93:53:73:bf:28:ed:41:31:77:0b:92:fb:46:03:a0:
         94:24:ae:5d:ff:49:d0:9b:fb:95:bc:53:c5:d5:61:a2:bd:59:
         33:f6:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----