Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/c474cecf22bf9044faf67c54a7a016ace4143349.roa
File:                     c474cecf22bf9044faf67c54a7a016ace4143349.roa (raw, json)
Hash identifier:          UJWwD/rTxlu1nkUG/IKW9467yFw4y4YQR1LKtaNKGHE=
Subject key identifier:   3F:A4:B6:01:B4:49:73:1E:19:EE:A4:88:BC:24:F7:46:90:BE:E1:B9
Certificate issuer:       /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial:       0ED573
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/c474cecf22bf9044faf67c54a7a016ace4143349.roa
Signing time:             Fri 14 May 2021 17:16:46 +0000
ROA not before:           Sat 10 Apr 2021 03:00:00 +0000
ROA not after:            Mon 10 Apr 2023 03:00:00 +0000
asID:                     12956
IP address blocks:        2803:b2c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972147 (0xed573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
        Validity
            Not Before: Apr 10 03:00:00 2021 GMT
            Not After : Apr 10 03:00:00 2023 GMT
        Subject: CN=c474cecf22bf9044faf67c54a7a016ace4143349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:d1:47:10:b9:c9:65:a2:72:6d:40:a3:f3:
                    69:e0:c9:ce:fb:ee:f4:96:1d:e1:12:52:7a:47:45:
                    74:47:a6:73:7b:33:a6:9d:54:db:17:09:0f:a7:46:
                    72:ff:c2:f2:f4:29:3e:68:b4:3e:1f:9f:db:7d:41:
                    09:76:a1:64:c2:e5:27:13:e5:89:9f:83:27:59:63:
                    55:1a:f5:b5:7b:7b:fe:8e:f8:f0:43:dc:0d:ef:aa:
                    67:ee:91:6f:94:d8:37:ce:d7:78:b5:7f:d6:83:ba:
                    2e:72:a5:c0:64:be:77:a4:93:c6:0d:74:90:68:0b:
                    c6:88:d5:aa:50:ae:6f:cf:a8:e0:c6:69:68:ff:d8:
                    2a:d3:a3:a2:63:06:3e:71:85:32:63:19:2e:39:b9:
                    07:ba:61:36:86:ec:47:17:9a:b0:39:ca:33:bb:67:
                    4f:31:83:c5:a2:71:ed:54:0f:00:ed:01:ae:01:95:
                    0d:1f:13:a1:36:25:c6:f1:51:28:3a:9c:40:ca:bf:
                    a6:58:30:fd:51:20:56:08:a5:75:c7:d2:0e:0c:28:
                    4e:e5:59:4f:23:2b:ca:42:a3:e6:d4:e7:ef:40:f9:
                    e6:55:4a:d1:5c:e0:8b:44:99:10:8a:3a:bb:9a:a5:
                    88:80:49:eb:da:29:a0:9c:49:6f:55:15:4c:ff:26:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A4:B6:01:B4:49:73:1E:19:EE:A4:88:BC:24:F7:46:90:BE:E1:B9
            X509v3 Authority Key Identifier:
                keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/c474cecf22bf9044faf67c54a7a016ace4143349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:99:7e:ac:f2:8e:bc:42:c1:b2:ec:81:7a:71:5b:78:cc:17:
         fd:15:18:7e:50:ef:8a:bf:6a:d6:e3:fc:c7:4d:d0:51:f4:b5:
         15:13:a1:d7:9e:84:c0:f9:9d:9b:b0:39:27:15:85:9e:b0:f9:
         ba:58:4d:67:20:51:1f:5e:92:fc:cf:06:e1:9f:3a:eb:63:74:
         0f:61:be:2d:02:a4:f9:e5:84:25:53:6c:1c:c4:82:19:9a:1c:
         91:ec:86:8a:9f:3a:39:df:15:60:3a:a9:2d:c9:c6:39:de:33:
         ec:5f:4b:47:03:40:10:06:eb:18:61:cc:d3:86:4f:aa:ad:29:
         b5:b1:ad:b2:8d:86:19:5c:a7:49:41:bb:1d:67:60:d1:e8:10:
         35:ed:c1:5c:56:6e:5a:bd:9c:c1:6f:99:18:e6:03:2e:ee:fa:
         28:43:86:60:e6:30:5b:d8:7b:fe:dd:af:d9:8f:58:5f:12:ab:
         54:7d:3c:ea:8e:28:5e:44:da:23:b9:d3:80:6c:23:6f:75:74:
         14:3e:be:b7:96:60:d9:5f:b5:27:d8:d4:75:9e:77:bd:93:e7:
         a7:75:39:5e:94:42:79:e2:ea:90:a2:39:e6:20:e6:a2:f7:c9:
         12:f0:1d:c8:a1:5d:42:fa:f2:78:7b:64:a7:91:4b:c4:24:9a:
         d9:71:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----