Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/b3f2c9fcbd2f676b47f2e607632e61c76b03f665.roa
File:                     b3f2c9fcbd2f676b47f2e607632e61c76b03f665.roa (raw, json)
Hash identifier:          +I0h148n5RUET+ReDnWzsfuFMH/CbTIxmZ7/zUe9b2Q=
Subject key identifier:   E7:F4:EC:70:0C:C6:EA:29:B9:E6:DF:3F:6A:16:5B:82:6D:35:92:46
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       095062
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/b3f2c9fcbd2f676b47f2e607632e61c76b03f665.roa
Signing time:             Tue 24 Aug 2021 13:07:57 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     270066
IP address blocks:        2803:5ce0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610402 (0x95062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=b3f2c9fcbd2f676b47f2e607632e61c76b03f665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:6b:84:2d:af:a7:ce:0b:f5:75:65:3a:cc:
                    46:95:97:21:9b:9b:32:e7:df:88:7f:01:70:4f:07:
                    6b:6e:60:1e:15:6c:13:ab:a5:cb:87:19:43:37:19:
                    96:28:4f:bf:52:af:46:ad:d7:fb:d4:b2:25:28:0b:
                    ae:9c:e5:b0:28:fa:f0:a7:9d:c5:be:17:76:42:f7:
                    a5:c4:bf:6a:d9:c1:13:6a:87:41:4c:a2:b7:7c:7d:
                    c0:47:62:eb:e8:38:65:94:8d:42:98:4b:e5:19:e4:
                    b2:de:07:72:f9:ab:12:d3:61:51:7f:4d:3e:e1:83:
                    54:c3:3b:bc:21:4a:e0:6e:50:b2:6e:d8:9d:b6:c7:
                    5e:23:69:53:0b:4a:11:b1:ad:85:2a:fb:ca:f2:c9:
                    60:5a:8f:ee:d7:5f:19:2c:c0:93:8d:ba:c5:5b:e5:
                    0c:df:e4:05:ee:a6:02:d0:a7:d4:ef:7c:80:39:c9:
                    4b:5c:51:f5:61:a0:a4:85:4a:f1:69:df:3a:7a:39:
                    3d:b5:43:11:71:85:60:31:8b:10:3b:1c:3a:c7:2e:
                    2b:df:0e:00:6f:dd:28:a1:a0:87:87:91:d5:1f:db:
                    c6:03:e7:03:93:4f:c4:de:f0:6f:45:ef:d3:b7:93:
                    18:44:34:16:6b:f4:6e:6d:42:e9:d2:71:e5:6e:21:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:EC:70:0C:C6:EA:29:B9:E6:DF:3F:6A:16:5B:82:6D:35:92:46
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/b3f2c9fcbd2f676b47f2e607632e61c76b03f665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:57:8d:57:4b:e6:94:84:19:fd:47:98:04:1c:52:6e:8d:
         47:2b:b0:1b:4f:2b:e0:57:80:e7:64:92:d9:1c:98:7f:1c:28:
         76:0e:38:d3:39:b4:99:86:67:02:12:0c:f8:94:f2:76:38:91:
         5f:13:c9:2f:59:c7:27:60:2b:20:4b:f9:a7:7a:1e:4c:5e:a6:
         3e:3d:60:d0:00:eb:23:9c:b0:b8:b7:6e:61:a3:49:78:47:6c:
         22:c9:f9:e0:01:f2:87:a9:70:49:56:fc:d5:f1:a6:58:af:cd:
         1d:50:b4:4e:62:48:df:8e:f4:27:9b:5a:d4:1f:5c:c8:a0:f1:
         78:e1:5e:64:fa:8c:09:9c:ba:64:13:65:b6:92:15:dd:3e:15:
         5c:39:fc:b3:b0:aa:a2:9e:48:2c:49:98:b3:fd:39:59:3c:5d:
         46:93:65:9b:68:fb:7e:ca:73:89:82:92:93:0c:4b:92:ea:b0:
         bf:2c:fe:72:72:26:8b:35:0e:69:38:43:a4:c2:60:3d:a6:df:
         f8:08:21:d4:f6:42:c5:9b:e7:90:86:93:5c:e5:16:45:55:9a:
         c2:a5:1f:c5:c9:23:6b:26:54:f2:bb:52:2b:07:1c:13:33:fe:
         00:b1:d2:81:5c:a2:1d:56:02:a0:d2:6e:9c:ac:c1:06:fb:22:
         c1:0c:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----