Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/ee7c69b6f55121c41725323aace5ac8c2d7af6cc.roa
File:                     ee7c69b6f55121c41725323aace5ac8c2d7af6cc.roa (raw, json)
Hash identifier:          lDAcGG1tZ2htwfcE6QSKDiyiyVFa2IbnXgJc1gFnL6c=
Subject key identifier:   D6:59:91:0B:C0:2B:4A:A9:C3:9F:7B:11:0F:21:87:DA:92:53:6E:88
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       0EE651
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/ee7c69b6f55121c41725323aace5ac8c2d7af6cc.roa
Signing time:             Thu 01 Jul 2021 18:43:45 +0000
ROA not before:           Thu 01 Jul 2021 03:00:00 +0000
ROA not after:            Sat 01 Jul 2023 03:00:00 +0000
asID:                     266706
IP address blocks:        2803:bd20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976465 (0xee651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Jul  1 03:00:00 2021 GMT
            Not After : Jul  1 03:00:00 2023 GMT
        Subject: CN=ee7c69b6f55121c41725323aace5ac8c2d7af6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:c2:ca:0e:73:46:01:a0:b7:42:8a:ee:1a:
                    bc:2b:2b:6a:2f:86:1f:8a:c5:5b:29:a8:dc:94:5c:
                    51:7a:67:f9:b1:c2:b6:a9:15:80:76:7d:6b:7e:df:
                    76:7d:ea:d4:87:ab:54:4e:23:4b:0c:d2:ea:aa:df:
                    3d:79:bd:8b:de:81:18:cd:7d:fb:45:a9:d2:94:81:
                    3e:61:f0:ec:ae:98:84:6b:7b:ce:f3:9d:b8:f4:30:
                    6e:3f:51:f9:5c:ae:44:e0:f3:0d:78:96:46:28:4f:
                    b6:e2:c4:0b:cf:98:29:79:96:cc:29:48:7e:a5:1b:
                    d5:e4:1a:9f:99:2e:55:71:69:14:18:17:91:d3:4a:
                    9d:ec:55:56:c7:0b:b9:a8:27:34:50:af:e4:21:a3:
                    60:4e:ef:c6:be:db:ae:78:01:bc:b1:a6:ff:1d:cc:
                    5b:6e:89:cb:a5:db:24:e3:e6:7d:9f:4b:4d:56:f1:
                    8f:6d:34:63:41:4d:59:a0:7b:4c:26:1b:22:42:4e:
                    ec:38:7a:a8:ce:d1:6f:2b:42:af:19:4d:0b:c9:47:
                    dc:3f:b6:89:5f:e9:65:51:0c:44:cf:8e:08:cd:39:
                    20:c4:4d:54:de:72:27:dd:ba:9b:c4:f5:be:85:78:
                    e3:7d:5d:be:63:cb:80:36:7f:b3:4c:ea:99:0d:88:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:91:0B:C0:2B:4A:A9:C3:9F:7B:11:0F:21:87:DA:92:53:6E:88
            X509v3 Authority Key Identifier:
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/ee7c69b6f55121c41725323aace5ac8c2d7af6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:c4:13:e1:6f:4b:23:cd:50:05:cd:74:9e:7b:0b:79:d0:
         bf:2b:53:4e:ed:f6:af:1b:1f:20:3a:5d:5a:1c:31:36:54:5c:
         27:e9:c8:95:53:2d:81:f4:b1:69:74:39:2b:57:b5:f3:a8:65:
         dc:01:33:1f:25:24:73:7e:cc:63:72:ef:c8:57:dd:12:6b:af:
         54:66:39:94:17:bb:91:c7:ce:f8:30:83:dd:d4:75:65:7b:4a:
         ad:62:21:bc:71:62:0b:d1:5d:b5:8c:8b:12:69:3d:c1:8f:a9:
         9a:45:00:6d:78:08:00:49:d0:37:20:6c:7a:62:ea:d8:47:5d:
         a5:9b:85:d8:37:8a:05:24:d5:9b:b6:03:05:b4:7c:f0:83:cc:
         6d:f4:f0:3d:55:e3:be:98:f2:38:4e:c9:37:f2:69:3f:6c:e2:
         91:71:43:d1:f1:76:77:96:d6:53:a0:04:8c:be:39:83:dc:9f:
         ab:d3:8e:81:d2:33:1a:20:17:4d:fa:77:b6:de:94:04:91:df:
         b8:b6:15:cc:ef:34:63:af:55:ed:14:9e:c5:f4:36:85:2c:59:
         a4:83:eb:d9:fd:5e:01:c4:77:5d:11:0e:e1:01:9c:86:3b:5e:
         df:8c:6f:6c:1f:e2:05:38:83:13:4a:ee:1b:c8:4f:24:c7:c9:
         18:ab:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----