Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/4f57a93f06b8809e04fbd9b2f7cadea6999010c4.roa
File:                     4f57a93f06b8809e04fbd9b2f7cadea6999010c4.roa (raw, json)
Hash identifier:          4ouYck7bRE/0ZY6cQvtK2WIlsv+IiU95qZH/ziLr8dg=
Subject key identifier:   B9:F5:AD:F9:83:FC:51:8E:71:B2:D9:CE:25:E6:23:B4:DB:A7:20:5E
Certificate issuer:       /CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
Certificate serial:       0DAE32
Authority key identifier: 40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/4f57a93f06b8809e04fbd9b2f7cadea6999010c4.roa
Signing time:             Tue 25 May 2021 15:27:37 +0000
ROA not before:           Tue 25 May 2021 03:00:00 +0000
ROA not after:            Thu 25 May 2023 03:00:00 +0000
asID:                     265867
IP address blocks:        2803:3620::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896562 (0xdae32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
        Validity
            Not Before: May 25 03:00:00 2021 GMT
            Not After : May 25 03:00:00 2023 GMT
        Subject: CN=4f57a93f06b8809e04fbd9b2f7cadea6999010c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:67:bf:cc:69:d0:a2:0e:42:77:23:74:bb:
                    2c:3c:de:7b:09:25:fd:7c:2d:e3:56:69:34:0f:07:
                    13:9c:14:42:9c:d1:64:5a:c0:64:49:3d:95:0c:42:
                    20:81:de:3f:a1:c7:9f:bd:22:2d:76:01:72:b5:3d:
                    e3:4b:d5:5c:72:bd:20:3a:9b:f0:8c:72:5e:c2:43:
                    bc:fa:de:05:0f:57:41:a6:a6:5a:e7:0d:b8:14:87:
                    9a:ff:38:3c:b4:64:75:47:cc:70:cd:3b:34:1d:6b:
                    e8:aa:06:fc:9e:80:3c:4a:55:d1:98:2e:4b:d7:15:
                    8f:f9:3d:3b:b8:32:46:78:55:60:9a:51:c4:32:2a:
                    cf:d2:9f:d1:a1:52:d0:3a:07:a7:f7:82:6e:ec:03:
                    6b:cb:71:77:fb:f7:ef:11:0b:83:5d:ab:c7:60:75:
                    39:07:52:87:c4:5e:47:25:6b:68:03:9a:76:77:8b:
                    c0:b7:e5:41:3f:a8:78:8a:7d:39:55:be:b8:23:fc:
                    ff:59:1f:bc:27:3d:a9:b7:0d:c9:ed:12:7b:89:eb:
                    f3:3b:52:86:8c:ea:38:e4:e6:6f:09:b6:36:3c:92:
                    0e:a5:0f:19:8c:e5:49:99:0d:09:71:07:6b:e4:10:
                    18:7f:b8:f7:5b:2e:d1:e4:12:78:7a:59:01:39:24:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:AD:F9:83:FC:51:8E:71:B2:D9:CE:25:E6:23:B4:DB:A7:20:5E
            X509v3 Authority Key Identifier:
                keyid:40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/4f57a93f06b8809e04fbd9b2f7cadea6999010c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/e968e7767f9eef64694a8a23c6caf72aa6d20432.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3620::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:64:c0:b6:64:a5:5b:4d:ae:41:f9:8a:80:8b:27:2c:07:bb:
         8a:18:cc:38:a2:db:61:d6:1f:ef:cf:0b:40:76:9c:b1:ed:66:
         69:e2:61:70:11:e5:a6:96:de:13:70:80:90:e5:40:18:fc:fb:
         90:1f:0f:34:17:ee:a4:0e:a5:86:f3:7c:11:9e:5b:a0:c7:75:
         e7:c5:4f:46:aa:5e:0f:7b:33:61:1f:77:02:ee:5f:98:1c:98:
         40:18:46:7f:c3:ab:f5:77:11:37:0e:8e:65:60:8f:f1:a5:29:
         a5:c7:11:ec:02:1d:97:40:fd:5d:51:02:07:95:52:06:30:ce:
         ab:6a:ab:d7:16:fd:1a:a0:97:23:06:76:06:fc:a1:7e:f1:1d:
         ba:80:ba:6c:ac:c7:df:62:41:11:fd:c9:7c:20:38:a1:5b:3f:
         b9:f4:4f:4d:ae:4d:28:42:0a:a1:0a:88:4b:64:89:0b:c3:4f:
         ba:8d:ce:2b:e6:67:84:c8:0a:12:9a:4a:8f:6f:64:00:ca:9a:
         f5:25:fc:d1:e9:54:70:4f:16:d8:3a:4e:9b:39:3a:9a:42:56:
         3c:1e:72:75:e5:f3:46:37:2b:d7:81:c9:19:91:cb:c6:a1:94:
         61:29:c1:6b:11:19:a9:ce:9e:dc:67:b2:28:8f:f9:15:d1:c6:
         f3:26:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----