Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/02ea0bd38fc8ae049be6611f3a78edb45a3ff10c.roa
File:                     02ea0bd38fc8ae049be6611f3a78edb45a3ff10c.roa (raw, json)
Hash identifier:          5SCdh25nQ9Wbx6ESjSBlIu7Lrv6Vk4YzKnAInYLAzUE=
Subject key identifier:   9D:53:9D:AD:45:D3:CF:63:ED:83:52:96:DE:BA:27:4E:AB:92:CD:0A
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0A9C5B
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/02ea0bd38fc8ae049be6611f3a78edb45a3ff10c.roa
Signing time:             Fri 15 Oct 2021 07:51:17 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0:600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695387 (0xa9c5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=02ea0bd38fc8ae049be6611f3a78edb45a3ff10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:a5:c5:dd:eb:4a:7f:73:7e:6b:d7:bf:70:
                    03:43:8a:e6:ea:ea:7a:2d:3c:e0:b2:a8:47:70:86:
                    8d:cb:b5:2b:8e:f8:36:15:d8:34:2a:04:8d:9d:5e:
                    4c:db:60:82:cf:9b:74:aa:78:60:35:97:e9:9f:a8:
                    1a:d1:9d:f8:8b:97:3c:9e:08:f3:12:4a:da:b6:71:
                    b1:5f:e2:e6:83:0c:0b:86:78:34:3f:e7:c4:ee:05:
                    a5:a5:0a:89:4b:0e:84:fa:e3:ec:f0:b5:e3:6f:e2:
                    e3:b6:5e:7f:e4:26:be:3c:74:01:0e:1f:d1:4f:9b:
                    9b:ae:19:43:8d:64:d0:6c:fa:e4:77:ed:bb:f1:e7:
                    6a:9b:e4:3d:14:3e:95:8c:21:ad:8d:39:8c:f1:8f:
                    69:19:84:28:65:92:fb:83:a8:8e:6c:dc:4f:86:04:
                    fb:9c:8d:23:72:62:5a:95:77:23:a4:8a:0d:f6:8b:
                    86:80:4c:ae:70:11:9f:e5:fb:ea:ba:34:87:6f:6b:
                    12:bc:b2:3e:e9:38:b0:03:c8:ff:30:cb:fb:72:82:
                    ff:8b:16:89:ab:9e:4a:d0:35:e9:3e:18:5f:df:c8:
                    71:1b:c4:5d:78:05:e4:c2:63:fd:a4:5d:de:59:80:
                    8f:3b:95:c7:15:84:1a:fe:53:24:e1:4b:76:09:65:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:53:9D:AD:45:D3:CF:63:ED:83:52:96:DE:BA:27:4E:AB:92:CD:0A
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/02ea0bd38fc8ae049be6611f3a78edb45a3ff10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:8e:ab:f9:a6:1e:6f:c1:2a:9a:9b:c4:43:57:46:53:fa:
         10:dc:2a:e6:09:79:2c:a4:d1:ff:e6:88:ac:a8:02:66:f6:df:
         ee:d9:ce:97:9d:fb:7f:12:66:7c:35:f8:45:47:53:af:02:29:
         60:f2:ab:c5:cc:ac:1e:ba:f5:19:c9:65:61:c1:43:82:3a:2e:
         fc:0a:8f:89:f6:f0:ce:fe:6a:60:5e:17:35:86:87:28:be:d6:
         71:f3:3e:21:6c:ba:4b:fc:a5:4e:da:96:f6:e9:9a:17:48:b7:
         c0:aa:45:89:18:34:fd:a2:79:09:e3:02:01:83:29:33:58:74:
         c8:98:0d:91:82:29:c1:fc:84:51:5c:8a:4a:58:93:40:5e:bf:
         88:70:3a:c2:be:e8:b0:8f:f7:00:5b:fe:00:a4:9e:07:03:1f:
         4e:e3:55:c0:43:c8:26:1a:89:50:95:99:8f:e7:d8:7f:a0:fd:
         4e:06:9b:a9:16:8b:84:f1:7a:ca:16:de:a8:b7:eb:2f:28:e3:
         e8:ce:23:cb:fc:5b:34:71:e6:6a:ab:14:46:10:7a:f7:e1:37:
         4a:83:2d:64:3b:db:80:10:e1:67:65:e0:b7:6f:2a:b2:e4:29:
         d8:7c:00:8d:6f:88:9c:7a:94:dd:4a:f3:3e:66:96:c7:32:b6:
         bf:85:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----