Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/443a4d146b97aefa83249fd59d5ef29fdbedcee5.roa
File:                     443a4d146b97aefa83249fd59d5ef29fdbedcee5.roa (raw, json)
Hash identifier:          o8e38KXVK3YNuS5f/nQiiM96poo1W3Cg+zB9hxZLZbk=
Subject key identifier:   5C:80:55:3C:FF:C5:62:8D:6A:A0:39:0D:C2:EC:3A:B8:16:38:20:4E
Certificate issuer:       /CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
Certificate serial:       0F34DB
Authority key identifier: 44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/443a4d146b97aefa83249fd59d5ef29fdbedcee5.roa
Signing time:             Tue 15 Jun 2021 14:22:44 +0000
ROA not before:           Tue 15 Jun 2021 03:00:00 +0000
ROA not after:            Thu 15 Jun 2023 03:00:00 +0000
asID:                     52238
IP address blocks:        2803:7260::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996571 (0xf34db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
        Validity
            Not Before: Jun 15 03:00:00 2021 GMT
            Not After : Jun 15 03:00:00 2023 GMT
        Subject: CN=443a4d146b97aefa83249fd59d5ef29fdbedcee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:57:c2:77:c1:f9:c1:0c:28:d7:81:15:c2:
                    a6:ce:ce:4e:55:91:29:31:11:1a:e2:b1:f6:cd:74:
                    3e:0e:96:c2:bf:dc:6c:6f:b1:e7:11:bf:70:48:af:
                    6b:ae:30:df:95:4a:3c:f1:c8:7f:94:bd:96:5a:e3:
                    ec:a6:05:77:55:79:8c:a5:db:95:af:72:bc:98:9e:
                    f8:39:64:a6:e2:2a:40:e6:3e:62:5c:28:21:15:73:
                    8d:f5:0d:1b:89:d0:26:ca:c5:f0:3d:0e:38:ec:ca:
                    d3:fd:a0:9a:a7:e2:cd:c1:de:a7:83:00:5a:d0:ff:
                    a7:62:68:ea:90:88:f8:55:86:8d:3c:d2:3c:1f:d2:
                    8f:bf:d0:28:34:3a:b6:53:f6:5c:42:66:f7:97:cf:
                    d1:72:a5:24:4b:d2:70:83:2a:c3:a9:96:83:d3:95:
                    b3:21:66:07:4a:37:80:dd:32:e1:1c:c6:15:c4:25:
                    fc:c9:0d:e9:51:55:59:ce:b2:24:ca:19:f2:82:af:
                    f3:6f:d3:a2:d5:be:ee:bd:7a:7e:0f:41:53:79:e6:
                    9b:cc:65:5d:59:1c:1d:0b:55:34:25:07:f1:e8:1c:
                    a6:84:cf:18:54:2d:e5:24:58:e3:8a:26:27:9b:9d:
                    77:5c:37:8a:f3:83:9e:e5:f3:91:93:01:ad:d9:d4:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:80:55:3C:FF:C5:62:8D:6A:A0:39:0D:C2:EC:3A:B8:16:38:20:4E
            X509v3 Authority Key Identifier:
                keyid:44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/443a4d146b97aefa83249fd59d5ef29fdbedcee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7260::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:cf:51:29:18:7a:93:fd:c9:f3:be:56:bb:d7:9e:81:19:
         42:d1:c1:3e:fe:d8:7e:ee:b3:76:21:ef:d4:ad:1b:58:4b:c9:
         8d:3d:03:0f:1b:59:1b:c0:21:4f:2e:07:57:58:bf:13:4f:95:
         a5:21:01:e3:70:62:44:ad:80:34:cf:98:28:4e:26:6a:24:53:
         f5:68:7d:64:11:1b:ee:c1:f7:34:81:a5:72:f5:99:86:df:91:
         6f:4b:39:3b:c7:2f:35:aa:cb:35:89:73:98:02:d3:98:df:b6:
         da:e2:0c:b8:af:67:d6:94:92:08:84:69:3d:df:94:b6:57:82:
         ec:9a:43:f5:49:f3:21:f2:30:4d:88:ba:b5:01:e1:b6:1a:61:
         74:5b:42:1b:b3:da:e0:9e:a0:1b:21:6c:81:33:70:5a:e1:af:
         db:bc:cd:3a:ec:85:ea:81:31:ad:c2:12:1d:1f:af:7a:51:78:
         b9:cd:27:df:5e:d3:68:77:7f:9b:e0:3a:d8:7d:26:75:f5:5b:
         4e:9d:aa:f8:b7:e6:10:85:f6:a6:3d:27:50:71:a9:ca:99:65:
         63:fc:b1:b6:6e:32:00:7e:e8:27:a7:ae:1b:3f:b0:69:2d:6b:
         fd:32:55:99:6f:b4:48:95:1f:59:9f:25:91:18:5f:af:27:9d:
         cf:2e:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----