Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/68dd382462b0345be493dd9c266908942052620f.roa
File:                     68dd382462b0345be493dd9c266908942052620f.roa (raw, json)
Hash identifier:          JvSZlE7jVra1nExvhVZmPMcBpEPapMXcC9Yo7X3hWwM=
Subject key identifier:   70:C6:06:17:B2:B9:89:11:45:D2:1A:89:A8:4D:06:DB:6A:6E:10:93
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       09466D
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/68dd382462b0345be493dd9c266908942052620f.roa
Signing time:             Tue 24 Aug 2021 13:04:32 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607853 (0x9466d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=68dd382462b0345be493dd9c266908942052620f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:5e:eb:16:3a:3b:cb:3c:f0:70:1e:af:b2:
                    08:88:af:79:cb:69:bd:35:cd:cd:6b:d4:c0:3d:08:
                    d5:bd:f7:28:0f:f7:1d:6c:85:8a:ea:c2:06:95:74:
                    a6:b5:e3:99:06:69:71:0b:6f:14:88:c2:49:e7:73:
                    9b:2f:be:8c:4e:5a:f6:c0:e5:31:0c:a5:91:bb:08:
                    ce:91:e8:79:ef:09:4c:43:96:57:83:3b:40:b1:73:
                    c6:bc:00:e4:d7:ea:18:16:93:65:be:1b:00:be:22:
                    b8:82:a2:2a:65:d6:23:a5:04:4d:6a:bd:1a:8e:fc:
                    75:0a:db:6a:49:dc:5a:44:b9:01:9e:aa:a7:5b:a2:
                    b0:a7:5b:f7:0b:66:90:64:29:8b:16:ef:4a:1a:57:
                    c8:97:b4:c1:6d:bf:fc:27:ab:ea:46:8e:71:d6:6f:
                    3e:09:cd:5a:cc:4f:36:97:d3:7a:1e:bf:59:af:7e:
                    29:61:5c:0d:e3:03:00:11:01:db:a2:ac:cd:2b:e0:
                    b0:51:3a:61:cc:d7:d1:04:60:31:d1:a6:8d:7f:aa:
                    07:fc:12:a9:76:78:e8:e5:13:ab:14:db:3f:ab:be:
                    0e:b6:0f:c6:2f:70:a7:6a:86:ec:89:24:f3:30:70:
                    36:f4:93:a6:c5:a0:f5:29:ed:23:5d:f3:92:3d:28:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:06:17:B2:B9:89:11:45:D2:1A:89:A8:4D:06:DB:6A:6E:10:93
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/68dd382462b0345be493dd9c266908942052620f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:b9:93:01:ea:3a:96:86:fe:ad:65:b9:8b:4d:1a:96:9f:53:
         d0:39:29:5c:37:46:c4:bd:9d:58:08:1b:ee:73:3b:5f:fb:9b:
         38:fb:6c:00:cb:e0:8d:82:33:7f:45:aa:0f:cb:eb:41:12:09:
         4d:d6:18:65:a8:a1:30:c5:16:75:0b:3c:6c:26:85:e0:34:24:
         3c:c5:8e:1a:fe:03:f8:0e:51:95:32:82:fa:aa:72:aa:a8:c1:
         bf:4b:7a:78:33:9c:49:6e:be:be:09:e8:87:98:ae:f6:3b:c0:
         56:45:91:a6:e6:5b:b2:8c:3d:25:c4:40:54:da:e3:5f:57:bf:
         21:bd:14:3a:2e:2f:71:54:13:ba:1f:ed:84:9f:3a:5d:9a:b1:
         8f:f3:9c:ab:b7:e4:8c:f3:97:99:53:04:b0:ca:a2:d8:3c:da:
         8d:0f:74:14:09:4b:82:e5:79:1b:3a:be:b5:64:82:7a:2b:38:
         36:cb:c1:98:84:34:14:9b:14:79:9d:88:d1:de:d2:b8:24:0c:
         1e:63:85:e3:d3:27:ed:85:f8:8c:8f:4e:da:10:6d:24:ad:d5:
         2e:a2:da:b8:f9:14:32:c5:8c:bd:2b:0d:c9:5f:3a:b3:40:26:
         09:5c:5b:4c:87:0a:c9:55:0c:79:93:f6:f8:5c:76:3f:18:c4:
         ff:d8:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----