Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/ee85110a96b1adcbe485de9f301198cce4271e4e.roa
File:                     ee85110a96b1adcbe485de9f301198cce4271e4e.roa (raw, json)
Hash identifier:          4DeiTZ0qKS78TOW2XP6qAoNDBNIqUxdjrG6Xmyo25Eg=
Subject key identifier:   D5:AD:75:B4:5A:A9:13:C3:EA:24:2D:6D:8D:2F:08:FB:CC:DC:B8:7F
Certificate issuer:       /CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
Certificate serial:       183E22
Authority key identifier: CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/ee85110a96b1adcbe485de9f301198cce4271e4e.roa
Signing time:             Mon 27 Jun 2022 14:41:44 +0000
ROA not before:           Mon 27 Jun 2022 03:00:00 +0000
ROA not after:            Thu 27 Jun 2024 03:00:00 +0000
asID:                     265840
IP address blocks:        2803:5040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588770 (0x183e22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
        Validity
            Not Before: Jun 27 03:00:00 2022 GMT
            Not After : Jun 27 03:00:00 2024 GMT
        Subject: CN=ee85110a96b1adcbe485de9f301198cce4271e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:b3:21:88:fb:18:d9:6a:1b:90:c1:07:21:
                    d7:3e:2d:43:2e:f8:72:dd:11:07:22:ff:e3:a9:a2:
                    f8:c4:e8:37:fb:41:02:af:f1:db:bc:a3:b0:ed:76:
                    3f:97:6a:4a:bb:23:b9:a0:e6:31:41:92:3a:d1:09:
                    f6:f2:de:90:45:62:31:7f:de:d9:c1:86:8e:5a:b8:
                    55:77:01:21:83:2c:3d:86:18:51:43:7c:53:32:b3:
                    2f:71:a6:de:7b:2e:cf:0b:92:4a:df:50:d7:c6:a4:
                    1f:b7:7a:5b:39:cc:51:a7:91:ab:c1:b4:b2:da:40:
                    b8:c7:85:67:35:61:69:d5:b7:46:f6:98:9c:58:c2:
                    21:11:9b:1e:1e:c3:58:28:6c:03:f6:97:b6:04:59:
                    65:4a:a7:41:42:5b:9f:61:7c:2a:69:d3:99:24:0f:
                    c4:fb:98:40:9c:37:9d:c7:3f:9c:ea:90:9c:67:eb:
                    f6:e3:43:de:93:28:60:0a:bc:f4:95:e2:56:3c:86:
                    39:d5:52:7b:59:bc:6c:e3:e3:19:4f:45:3c:4c:56:
                    4b:3b:85:cc:0a:e2:d3:87:59:b3:7f:80:a5:d8:50:
                    db:88:de:a6:4b:d3:0f:46:d9:61:1b:12:cb:d3:de:
                    bb:8d:54:98:f6:ad:9b:3b:71:05:77:5b:3a:99:92:
                    ae:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:75:B4:5A:A9:13:C3:EA:24:2D:6D:8D:2F:08:FB:CC:DC:B8:7F
            X509v3 Authority Key Identifier:
                keyid:CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/ee85110a96b1adcbe485de9f301198cce4271e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5040::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:ba:70:01:38:1f:0c:b3:58:a4:69:84:c1:4b:b5:a8:fa:
         3b:85:48:38:d2:40:8d:1b:cb:08:9b:9e:2c:0a:63:62:e9:88:
         af:b0:99:5d:cf:2e:f7:26:31:68:97:39:d5:88:58:6f:19:3a:
         ff:d7:c6:3e:07:03:73:b1:37:38:a1:17:de:08:fb:53:b5:48:
         bc:8e:83:60:c1:05:b2:2d:e6:a2:b3:f4:b6:af:1d:70:6d:20:
         78:e2:97:f8:fa:c1:04:78:43:99:94:4c:1b:b9:75:b4:c9:17:
         4b:55:b9:8d:31:e4:47:c7:23:5c:b2:1a:5a:ba:85:a2:a8:ff:
         1b:1e:9c:94:58:66:15:77:be:f0:2e:d0:6e:22:50:bb:c4:1a:
         6e:72:a8:8e:a2:74:a2:d7:43:41:51:ff:85:65:cb:e2:72:79:
         14:dd:bc:c0:8b:d7:e8:a3:df:80:9d:88:13:bc:dd:1e:3b:e0:
         d9:1d:73:a0:65:8b:e8:01:20:1b:e8:6a:d4:16:5e:e3:69:c6:
         63:e1:5f:bc:ab:d2:6b:1f:d3:cc:64:54:fb:bb:af:fc:ed:28:
         a3:83:7b:56:28:b2:c1:94:36:99:36:64:a0:43:f8:f3:40:0e:
         21:2f:3f:f4:d1:56:7e:8c:b5:a0:2f:58:a9:01:cf:9a:67:bd:
         a7:da:b8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----