Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5ccf031543552233dd25d28fddc0bfdcc95afe05.roa
File:                     5ccf031543552233dd25d28fddc0bfdcc95afe05.roa (raw, json)
Hash identifier:          bJEs2RpeFKwPrGQipe2IiLpw45BqW6tHtLK4RvDJvzI=
Subject key identifier:   A0:26:FD:43:E9:FD:5C:AF:BF:5F:D0:59:99:A0:30:2C:A5:4F:C6:B4
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       065BF9
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5ccf031543552233dd25d28fddc0bfdcc95afe05.roa
Signing time:             Fri 30 Apr 2021 09:23:56 +0000
ROA not before:           Fri 30 Apr 2021 03:00:00 +0000
ROA not after:            Sun 30 Apr 2023 03:00:00 +0000
asID:                     271809
IP address blocks:        2803:5ce0:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416761 (0x65bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Apr 30 03:00:00 2021 GMT
            Not After : Apr 30 03:00:00 2023 GMT
        Subject: CN=5ccf031543552233dd25d28fddc0bfdcc95afe05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:5e:8d:da:9c:4b:b0:78:e5:4d:c1:6d:4c:
                    98:f6:fe:ed:6e:af:86:bb:5c:89:85:2a:7e:5a:a6:
                    6f:a2:ac:d1:5a:d4:0d:2b:d0:ec:f0:19:77:00:57:
                    7b:0b:3a:e6:0f:e6:1e:40:fa:db:06:50:68:7b:3a:
                    7f:01:89:d1:cd:a4:86:08:a8:53:d1:00:9a:46:6f:
                    30:ad:8f:2a:27:b0:94:bc:eb:4e:9d:16:00:a7:b2:
                    fa:9f:00:d5:6f:50:e9:6c:d7:14:da:e6:4e:db:8f:
                    41:d6:76:8a:4f:4c:58:64:54:d8:06:6d:d6:b9:0c:
                    9a:5b:00:e9:57:09:19:aa:58:ff:d5:9b:d2:73:4c:
                    78:c7:2a:6a:f7:58:13:40:21:1d:c7:85:7c:02:9d:
                    4c:04:58:e5:32:49:31:5f:16:12:7d:f3:2b:59:12:
                    8e:1d:28:b7:d2:28:e8:5c:a7:ad:f9:a4:58:b9:30:
                    2d:cb:a6:cf:ab:18:70:98:c1:60:ee:5b:18:26:50:
                    b6:76:d5:ed:df:66:95:68:1e:b5:df:81:31:dc:4f:
                    40:da:f7:df:c9:91:56:86:d4:85:88:93:b9:98:fd:
                    29:40:42:89:60:a9:c4:2e:52:47:75:e8:50:3b:b8:
                    97:fa:63:b3:dd:8d:0e:36:48:9c:75:4f:18:2c:dd:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:FD:43:E9:FD:5C:AF:BF:5F:D0:59:99:A0:30:2C:A5:4F:C6:B4
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5ccf031543552233dd25d28fddc0bfdcc95afe05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:2e:b2:45:2c:e3:20:3b:41:32:31:d3:92:c4:c7:02:8e:
         5a:b5:0f:d2:be:b5:9d:1e:dc:32:5f:10:11:de:df:82:be:2f:
         55:b0:37:bb:ce:3c:26:32:96:e3:b8:70:68:dc:c6:a2:09:8f:
         18:e7:e8:35:7a:66:82:ab:81:10:5c:13:e8:eb:c0:6d:f1:0a:
         a6:58:da:3b:fc:e5:33:31:c2:7d:41:3d:58:12:76:d5:26:34:
         5b:67:55:15:6c:2d:92:72:de:e3:1a:97:f9:d5:b8:66:3f:c8:
         c0:10:54:8d:33:b7:d9:83:40:e9:32:59:1e:34:9a:a3:9f:3f:
         01:c9:3a:3e:cc:98:23:1a:75:55:9a:5e:92:9b:11:ae:9e:92:
         8d:12:33:2e:23:c4:40:be:85:00:38:51:53:d6:3f:ea:b2:dc:
         94:cf:9b:33:d8:c6:9b:2e:39:53:b8:c6:52:3d:3f:9a:21:ce:
         27:b1:a6:be:32:23:23:d3:96:84:34:57:d8:1a:69:bc:fd:4b:
         84:a9:14:4f:d2:eb:24:2b:c2:9f:bb:8d:94:66:ef:22:0a:f9:
         9e:b1:4b:05:c3:9e:98:35:26:9a:f5:93:67:be:8e:30:8c:0c:
         60:45:8c:ff:9d:2d:78:3f:81:a3:78:38:57:56:20:75:93:7e:
         29:5b:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----