Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/2febbac343915f54262ad14dead9bbab4a026c5b.roa
File:                     2febbac343915f54262ad14dead9bbab4a026c5b.roa (raw, json)
Hash identifier:          UEb8WUfzBJUlXZvaprweE/ZsI/wcI+2uUdp7V6K04js=
Subject key identifier:   F0:DF:D8:EF:1B:74:86:07:AE:1F:26:91:92:5D:88:4D:68:9B:C1:70
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       111A21
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/2febbac343915f54262ad14dead9bbab4a026c5b.roa
Signing time:             Fri 29 Oct 2021 18:23:51 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        2803:7860:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120801 (0x111a21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=2febbac343915f54262ad14dead9bbab4a026c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:d2:9e:99:25:cb:79:f1:0a:d7:3c:8b:20:
                    e1:c8:77:5b:23:63:d7:48:20:68:af:de:ae:d5:70:
                    33:d0:18:a9:e1:17:2f:cf:ce:88:01:e8:cf:14:eb:
                    42:65:23:e7:0d:2d:23:f2:2d:6d:66:b4:58:df:84:
                    58:a7:d9:6d:a4:d2:9d:fd:a6:92:7f:04:6d:48:c0:
                    a3:4e:2d:19:cb:2d:2c:45:a1:aa:b0:e4:d9:5a:71:
                    99:56:17:d5:94:fd:0e:bd:3a:e9:bc:34:c0:b2:cb:
                    b1:32:fd:ad:7a:eb:e6:99:a2:ec:2b:4a:63:df:f6:
                    be:1f:8b:53:29:f4:5d:ba:70:26:62:66:4e:e4:0f:
                    3b:24:f1:46:dc:44:0e:79:32:5b:0d:c2:58:29:2c:
                    7d:6c:62:a3:82:7e:f4:d4:74:c5:1e:bc:73:1a:19:
                    c4:bd:de:9c:aa:a9:1c:30:c9:74:41:ed:ea:89:fe:
                    77:10:89:9a:c2:79:10:8a:f0:7d:03:9d:e3:bf:20:
                    0a:c9:15:c9:a5:88:e5:94:21:dd:d6:4a:9a:e3:ba:
                    78:86:52:1e:e4:cf:44:01:0c:79:ed:e2:b9:a0:a0:
                    c9:8b:7c:ef:1a:83:15:8d:3c:f7:2c:13:88:b4:21:
                    95:af:14:19:71:28:06:9d:9a:18:81:71:9a:0b:0a:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DF:D8:EF:1B:74:86:07:AE:1F:26:91:92:5D:88:4D:68:9B:C1:70
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/2febbac343915f54262ad14dead9bbab4a026c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7860:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:a2:d9:44:5a:93:31:1a:5c:d7:37:e4:40:71:b5:ef:46:
         32:0f:5b:2e:c0:a2:19:af:ee:11:38:78:39:7c:8c:f2:9f:0b:
         1d:98:79:78:01:46:81:74:ea:77:f9:00:bc:78:3b:c5:6a:c8:
         bc:53:e6:04:7c:38:56:c7:75:fe:9d:d6:d6:17:ae:17:a8:af:
         28:2e:2a:ca:3a:9d:bc:66:ad:4c:69:82:01:de:08:08:cc:75:
         93:fa:a5:aa:1a:f7:a0:c4:c6:44:93:34:16:5b:fe:38:d0:93:
         14:34:6b:cf:2e:26:3d:43:bb:98:d3:2b:3b:5f:40:a9:c1:44:
         04:07:d0:5a:28:b5:2f:b9:25:1e:dd:77:4d:9d:f9:ed:37:59:
         79:dd:25:d4:89:00:84:02:91:1a:35:2a:c7:8a:22:a6:af:57:
         7c:f7:b1:1d:47:95:ee:88:dc:f7:df:2f:a3:d8:16:80:51:88:
         be:be:2e:6c:78:53:c8:26:22:e7:37:a9:c8:cd:f6:4e:fe:8a:
         81:97:52:9f:d7:86:95:9d:1e:dc:fe:57:9e:fd:2b:2a:99:5b:
         d5:0e:f2:7d:ac:65:13:d5:c1:e1:54:b8:ab:3f:92:a2:4a:85:
         bc:4f:09:96:1a:44:f0:ec:f2:3c:a7:e5:bd:83:07:94:d5:f2:
         51:2d:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----