Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/85e536c257ef42491792af174f7e1e1efc6746dc.roa
File:                     85e536c257ef42491792af174f7e1e1efc6746dc.roa (raw, json)
Hash identifier:          bBN55oiOTHrY/iql/R3G3+iAmdpJWBgdxkNMowVsZmI=
Subject key identifier:   7C:47:0A:9C:83:D6:44:A8:97:75:6B:1E:BD:33:59:23:74:C7:44:F2
Certificate issuer:       /CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Certificate serial:       1730
Authority key identifier: D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/85e536c257ef42491792af174f7e1e1efc6746dc.roa
Signing time:             Thu 30 Sep 2021 22:00:56 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Wed 30 Sep 2026 03:00:00 +0000
asID:                     267689
IP address blocks:        2803:1a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5936 (0x1730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Sep 30 03:00:00 2026 GMT
        Subject: CN=85e536c257ef42491792af174f7e1e1efc6746dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:95:70:c7:76:34:7c:9c:54:b6:f6:ff:5e:
                    0a:c3:90:86:aa:bc:84:d1:bf:17:5d:b3:2d:90:79:
                    8e:37:0c:88:49:02:e9:6f:27:52:37:ad:dd:39:c1:
                    61:80:cb:ab:aa:b4:29:1a:ed:cd:7b:ea:dd:a0:af:
                    5f:45:8d:ea:28:a1:bd:a2:cc:a3:b9:41:78:7c:b4:
                    ba:42:a4:63:31:98:e1:03:d8:7f:02:8c:0b:03:4a:
                    7e:3b:13:85:67:c6:42:bd:25:3c:8b:69:ad:7d:12:
                    ce:f8:6b:54:94:47:76:42:2b:95:dc:01:d2:43:85:
                    4d:d8:54:08:f7:fa:7f:b5:db:ce:f9:a1:59:03:99:
                    da:2e:7a:5c:a3:9a:48:0b:aa:c0:9a:e5:3d:d3:be:
                    22:d5:bc:7a:02:2e:17:21:15:d0:c8:0e:f5:8d:c7:
                    a5:75:d8:e3:2e:ee:cf:d0:06:c2:ae:b4:0e:3e:e5:
                    63:fe:a8:2a:81:42:5d:a8:c7:bd:a6:1b:d5:9f:a3:
                    0f:46:3e:98:3b:ed:aa:c4:74:5d:8e:0c:d0:a3:3a:
                    97:25:4d:7e:7e:87:b3:5f:e8:12:8f:33:a5:8d:13:
                    8e:af:49:c7:53:42:44:df:59:f6:a6:10:0c:33:41:
                    84:88:6a:b8:ad:09:11:c6:b8:73:00:2f:ef:21:44:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:0A:9C:83:D6:44:A8:97:75:6B:1E:BD:33:59:23:74:C7:44:F2
            X509v3 Authority Key Identifier:
                keyid:D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/85e536c257ef42491792af174f7e1e1efc6746dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:4f:8a:c1:6f:18:96:21:a4:3c:c6:11:2d:e0:a6:ca:81:
         41:81:85:2f:d4:ca:8c:2b:f8:b8:65:06:90:5c:66:0d:50:9e:
         8e:22:a3:13:bc:4a:77:6f:84:12:38:3f:d8:4e:ba:0f:7f:60:
         27:82:04:bf:cc:e9:ce:76:16:8f:4c:e2:6c:90:3c:1d:f0:09:
         e4:7c:c5:01:ef:e0:72:3f:7b:54:d1:b5:d5:84:ab:37:62:ec:
         25:f0:c8:1c:2b:25:e5:f5:30:20:10:c0:6a:8d:6a:60:58:3d:
         c0:29:c8:e9:d1:52:ee:85:ee:c9:cd:08:4d:65:13:3b:7c:83:
         dc:b8:fc:97:29:21:48:85:ba:db:0f:9d:0e:57:41:29:ee:db:
         87:a9:23:c7:85:b2:cc:e4:b5:78:a8:7b:d9:9e:ec:cc:e7:31:
         8d:ad:a3:84:e0:6b:60:5a:33:d1:37:65:33:fb:a8:a0:c0:d0:
         e3:4c:ff:d1:20:4c:86:20:fb:53:d9:04:d1:9c:60:8b:88:f1:
         1a:c7:7a:a5:48:2a:34:46:38:14:09:34:08:e2:c7:b8:ca:de:
         3d:b8:eb:d6:88:09:97:e1:b1:33:97:81:38:91:b6:ac:86:2c:
         29:5f:56:c0:5a:2d:47:db:8e:05:aa:3d:9e:0c:bc:63:5d:86:
         bb:54:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----