Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/bd6fd50c685cb78a1efd89ea2d58672522cc9cb7.roa
File:                     bd6fd50c685cb78a1efd89ea2d58672522cc9cb7.roa (raw, json)
Hash identifier:          yOmZBBrJb3tCjY1eiaiwHstkcAFQ8+8O0cp9qTSzi0E=
Subject key identifier:   21:53:AA:0F:9E:5B:1C:B8:7C:14:C5:CE:38:82:E6:C5:1C:47:F3:29
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       1114F9
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/bd6fd50c685cb78a1efd89ea2d58672522cc9cb7.roa
Signing time:             Fri 29 Oct 2021 18:19:49 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        2803:7860::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119481 (0x1114f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=bd6fd50c685cb78a1efd89ea2d58672522cc9cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:57:e2:fa:f6:e6:68:2f:87:94:a7:12:54:
                    1b:71:28:02:ac:b3:a8:5d:9b:28:05:c5:78:91:96:
                    13:0c:ae:40:1c:ec:f5:ee:90:00:c4:fb:2d:79:01:
                    9d:ff:ab:1f:97:e2:c6:dd:76:a1:b2:c0:f8:22:46:
                    33:03:c5:33:1a:bd:ef:51:26:0c:28:0c:92:0d:0c:
                    a7:68:4b:04:eb:6b:7e:84:b7:76:d6:89:a5:73:65:
                    1c:3a:63:6a:fc:e4:89:fa:46:ba:9e:58:ee:82:69:
                    67:c0:57:14:78:3a:20:d8:cc:22:90:d0:0e:ec:2d:
                    e5:de:60:06:fb:6e:5a:df:1d:c6:57:cb:68:c8:f8:
                    a2:5f:e6:91:9c:6c:26:82:d6:a7:cd:cd:98:3b:1c:
                    92:e2:5a:ca:b3:eb:4a:df:64:20:3d:ec:05:0b:48:
                    24:6a:70:3c:e3:ae:f7:5b:a2:84:5d:aa:76:53:8b:
                    38:9d:6b:db:40:24:44:58:3e:59:2c:69:de:c5:9a:
                    25:1f:69:cf:6b:28:bc:84:b3:dc:9c:f9:d2:a2:43:
                    f1:be:df:64:92:9f:b9:d8:95:c9:42:6d:96:a5:4f:
                    12:ec:57:ef:df:f3:8c:e1:2d:25:1a:10:1b:bc:f0:
                    1e:19:9b:f0:05:89:32:c2:3f:66:15:5d:32:18:ad:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:53:AA:0F:9E:5B:1C:B8:7C:14:C5:CE:38:82:E6:C5:1C:47:F3:29
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/bd6fd50c685cb78a1efd89ea2d58672522cc9cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7860::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:b2:35:8b:fa:3f:62:30:b3:62:b7:2a:c9:9e:70:38:dd:1e:
         40:87:3f:12:73:db:98:10:9d:42:62:c3:0c:d0:6d:4a:16:f2:
         76:94:4d:44:55:92:16:e6:10:4f:08:43:0b:16:be:46:9c:91:
         60:88:06:af:a6:20:88:0c:27:5f:5e:85:c9:f8:d1:eb:9e:24:
         e4:e3:17:22:e5:ff:81:3c:35:a9:33:3d:5e:42:b3:3c:88:73:
         ef:b4:3f:cd:51:e8:b3:e2:6d:78:14:bc:87:d4:c4:b6:6f:d4:
         16:18:8a:42:86:05:74:ce:b1:73:1c:22:c3:2d:1a:a8:fd:33:
         aa:90:6b:52:92:d9:a3:e5:19:7c:25:a9:e3:86:7b:41:26:15:
         fb:aa:e3:67:85:b5:89:2d:69:02:48:3f:36:26:2c:27:51:d8:
         93:d6:eb:9a:e6:eb:27:20:59:7b:68:75:67:af:c5:86:37:91:
         f2:be:2f:8d:22:04:1c:34:6b:ba:d6:27:c0:d7:ba:f1:10:a2:
         00:31:e5:c9:b7:fc:7f:85:b8:27:23:11:6c:0f:2d:fb:f5:8d:
         8b:fa:c0:76:67:e7:1a:33:ec:34:ed:c4:c2:a2:46:64:db:69:
         68:60:c9:e9:dc:91:7e:ee:ca:6d:c3:29:39:2e:d0:ff:62:41:
         6d:af:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----