Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/61e4026e685d250027e7b94309a8d363f35149dd.roa
File:                     61e4026e685d250027e7b94309a8d363f35149dd.roa (raw, json)
Hash identifier:          Z2U/Cf47utHO4kW81kiMRQZ7XHY68Ri5GONnLML8aEU=
Subject key identifier:   7C:F6:8B:BB:62:E8:84:2C:62:04:AE:FA:2E:EC:FE:4A:23:43:0F:96
Certificate issuer:       /CN=fcd81b44b948a3af4c23183b58f4c263b9ae881b
Certificate serial:       118165
Authority key identifier: 5F:A2:74:DE:88:E0:B2:E9:F7:CE:CE:41:9B:DE:24:92:69:3C:48:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd81b44b948a3af4c23183b58f4c263b9ae881b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/61e4026e685d250027e7b94309a8d363f35149dd.roa
Signing time:             Wed 08 Sep 2021 18:33:45 +0000
ROA not before:           Wed 08 Sep 2021 03:00:00 +0000
ROA not after:            Tue 08 Sep 2026 03:00:00 +0000
asID:                     264733
IP address blocks:        2803:d280::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147237 (0x118165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd81b44b948a3af4c23183b58f4c263b9ae881b
        Validity
            Not Before: Sep  8 03:00:00 2021 GMT
            Not After : Sep  8 03:00:00 2026 GMT
        Subject: CN=61e4026e685d250027e7b94309a8d363f35149dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:ef:08:30:17:2c:62:f7:63:ae:64:8c:b0:
                    20:b8:b4:f2:04:85:bc:9a:a1:82:49:be:81:9e:45:
                    dc:aa:23:00:a0:c1:87:69:21:90:82:9c:30:db:83:
                    d9:24:06:e7:31:69:bf:fd:26:45:0d:6f:48:67:af:
                    35:b9:2b:9d:3e:9e:d5:1c:85:49:73:49:4b:07:72:
                    8e:d5:71:fa:d1:44:7e:cc:eb:a6:d1:4a:f3:62:17:
                    16:89:83:bb:de:b2:27:50:b2:88:77:e2:4d:7c:db:
                    dd:4e:aa:45:79:f9:bf:4b:84:ea:9b:bf:0d:71:f0:
                    e9:40:0f:78:f4:cf:9a:dd:d4:32:82:a2:9e:a7:22:
                    78:10:a5:63:cf:0c:1b:a0:1b:94:a3:a5:62:4c:70:
                    3e:46:f8:86:1f:4e:a5:13:9a:de:c9:1f:21:6f:81:
                    31:fd:78:c8:71:ed:02:b9:95:c4:6f:af:d7:32:09:
                    93:b4:83:58:1a:a0:b9:4e:37:3e:ec:39:82:0c:64:
                    b4:f9:3a:59:67:b6:2c:95:76:8e:02:f2:2d:c5:9a:
                    1a:0c:4d:85:1a:91:a4:ab:31:ef:3d:f4:74:ff:1c:
                    99:14:91:23:d0:de:52:b2:dd:5d:f9:c1:1f:f3:10:
                    a8:d7:8b:1d:0f:f9:5f:2d:b9:33:d5:54:fb:c3:5b:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F6:8B:BB:62:E8:84:2C:62:04:AE:FA:2E:EC:FE:4A:23:43:0F:96
            X509v3 Authority Key Identifier:
                keyid:5F:A2:74:DE:88:E0:B2:E9:F7:CE:CE:41:9B:DE:24:92:69:3C:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd81b44b948a3af4c23183b58f4c263b9ae881b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/61e4026e685d250027e7b94309a8d363f35149dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd212142-08ec-4bd6-a128-5f1db55072f6/fcd81b44b948a3af4c23183b58f4c263b9ae881b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d280::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:a0:a0:5a:66:6a:a0:eb:2b:5c:12:2c:85:6d:98:57:d4:
         23:c9:55:c3:bc:09:b4:ab:a7:cd:ca:c0:a6:b1:f4:76:52:26:
         5b:0b:00:f6:59:dc:fc:0e:45:1b:b4:7b:e2:50:0c:ae:fa:07:
         5e:61:f5:87:c9:42:70:65:f9:e7:b7:99:2b:23:f8:c7:41:fa:
         aa:c7:bf:54:0b:47:51:b3:f6:14:69:44:44:1f:66:f6:ec:90:
         d9:4f:fa:62:c4:b6:49:0b:af:75:91:f0:4f:47:a4:2b:02:dd:
         3b:33:bb:de:c5:26:70:f2:29:5f:ae:66:32:bc:fb:5a:06:15:
         3a:98:57:ea:d9:6a:29:5b:79:a2:bd:75:d2:bf:c7:79:68:fb:
         12:ca:e8:e6:46:c2:f0:3f:0a:18:04:62:94:92:5a:67:1e:d5:
         00:4e:4e:d7:9b:df:16:c8:79:9e:b3:4f:d7:14:88:88:ea:59:
         2f:07:70:9b:6a:f8:80:d7:0f:2f:3e:8f:b5:14:f5:dc:03:fd:
         e2:06:0b:1c:1c:c6:a0:f5:ec:84:ca:82:73:ca:39:5b:71:fe:
         03:4e:4b:a6:67:9c:00:a1:ad:b4:d2:18:70:31:99:d4:f3:8d:
         ad:8f:0d:0f:22:84:6e:66:9a:4f:36:61:1b:24:74:f5:47:d7:
         62:ad:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----