Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/afefae608b7abe63fcf7a0d48070da652faca4d9.roa
File:                     afefae608b7abe63fcf7a0d48070da652faca4d9.roa (raw, json)
Hash identifier:          m+c0NSozIk1tjiIg/XZG8OwJ4sQQ8N9upX7Wy+5RYNo=
Subject key identifier:   6F:E2:FE:9C:C0:84:7F:7B:C4:67:9E:96:E1:E5:F5:04:3E:EE:2F:66
Certificate issuer:       /CN=3a61a7a9840080a44173f942095ac78ead239107
Certificate serial:       053770
Authority key identifier: 33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/afefae608b7abe63fcf7a0d48070da652faca4d9.roa
Signing time:             Wed 29 Dec 2021 03:14:15 +0000
ROA not before:           Sun 08 Aug 2021 03:00:00 +0000
ROA not after:            Thu 08 Aug 2030 03:00:00 +0000
asID:                     64120
IP address blocks:        2803:8a10::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341872 (0x53770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a61a7a9840080a44173f942095ac78ead239107
        Validity
            Not Before: Aug  8 03:00:00 2021 GMT
            Not After : Aug  8 03:00:00 2030 GMT
        Subject: CN=afefae608b7abe63fcf7a0d48070da652faca4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:e9:25:40:e9:69:bf:5f:63:64:a8:3c:ec:
                    cd:3e:f5:b9:66:4d:14:33:65:46:94:2f:4f:6a:55:
                    ab:f1:e7:33:ee:ef:2e:22:c1:43:d4:ac:a6:0e:70:
                    45:42:af:d7:b6:86:ae:5b:7c:09:94:81:69:3a:58:
                    f9:51:77:7d:12:08:18:05:21:43:d8:fe:7c:1b:c0:
                    4a:51:3c:e2:a2:51:1b:d1:ca:e9:27:22:9b:9b:2e:
                    a8:57:5f:a7:3f:b8:c4:91:ab:c9:31:0b:68:b4:24:
                    84:f6:f5:cc:d5:b0:fa:93:1c:33:ea:ab:c3:73:89:
                    ce:d7:85:7b:e2:7b:40:cf:db:9e:3d:43:f2:c1:0a:
                    70:11:8e:6e:07:d2:77:e3:4a:82:36:b3:ea:37:02:
                    87:68:12:99:52:c1:63:c6:d1:a1:d4:f6:46:33:89:
                    aa:0f:f2:17:de:fe:33:19:88:6f:66:46:b4:71:5d:
                    7b:dc:71:41:f2:bc:81:c4:7e:25:5d:68:92:74:b6:
                    6f:8a:0e:72:dd:d0:a2:fe:28:8d:2a:f9:c2:40:01:
                    13:54:c2:fe:15:30:37:ae:2e:05:bd:49:ba:b2:6e:
                    9b:86:0c:65:3d:52:60:0e:61:54:f3:33:86:5f:ea:
                    05:9c:5a:f6:ba:d6:61:45:ce:e0:52:e7:20:8b:2b:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:FE:9C:C0:84:7F:7B:C4:67:9E:96:E1:E5:F5:04:3E:EE:2F:66
            X509v3 Authority Key Identifier:
                keyid:33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/afefae608b7abe63fcf7a0d48070da652faca4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:0f:ab:58:f8:ff:6d:d6:ad:06:83:ec:ef:ed:e2:2f:b9:
         58:8a:29:1f:f5:8e:85:bd:74:7a:6d:b3:5e:4e:0e:80:51:3a:
         4b:03:d1:55:be:79:fa:0a:b0:65:b3:e2:14:b8:70:d0:7e:a2:
         d1:fc:aa:67:d1:34:51:05:ef:a3:12:da:79:d8:9d:4a:b5:61:
         ab:05:be:50:68:e2:4c:77:6c:93:26:bd:ba:13:d5:27:7b:09:
         d8:01:2d:c4:b1:9c:dc:40:f9:e5:d1:ba:41:e0:01:62:42:72:
         9d:b7:0e:ac:13:73:eb:91:08:0b:fe:00:ba:6d:6c:07:42:81:
         5e:d2:f6:ba:67:46:5e:8a:77:6f:bf:88:45:2e:05:9f:f5:22:
         5c:b8:95:32:78:4d:26:32:85:d6:0b:2d:99:c7:4e:bf:d0:a5:
         0c:7f:e9:46:7a:c9:d3:06:50:42:2b:0b:2f:0f:f9:c8:11:9d:
         9d:3f:69:fe:90:48:df:a0:b8:1f:3c:c0:0c:0a:93:b2:e5:9c:
         5a:4d:39:8c:ca:43:a2:37:e5:67:27:37:cb:46:6f:bc:a0:50:
         35:dc:03:8e:00:f6:01:12:0f:cf:3d:06:c9:d7:39:be:ca:f4:
         e5:d4:00:9d:71:96:8c:e4:1d:f3:e3:bd:ad:4a:58:99:fe:c2:
         36:8d:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----