Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/aa9131727800b8f56fd06560c4c012be4b84af7d.roa
File:                     aa9131727800b8f56fd06560c4c012be4b84af7d.roa (raw, json)
Hash identifier:          cctbJlwUdT0APJyav+BI7V9Gwvam1tIn6usVGp+WYHs=
Subject key identifier:   2A:49:D6:0B:CF:08:7D:F3:F5:31:24:FB:B5:5F:2A:16:25:61:DB:CA
Certificate issuer:       /CN=a9e820551771f82418fb35bf3b8f848be57dcbf3
Certificate serial:       0733
Authority key identifier: 56:B8:73:C7:8D:99:1B:7F:A0:90:1C:69:8F:1D:04:4A:D0:27:6B:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9e820551771f82418fb35bf3b8f848be57dcbf3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/aa9131727800b8f56fd06560c4c012be4b84af7d.roa
Signing time:             Wed 29 Dec 2021 16:07:52 +0000
ROA not before:           Wed 29 Dec 2021 03:00:00 +0000
ROA not after:            Fri 29 Dec 2023 03:00:00 +0000
asID:                     272011
IP address blocks:        2803:d910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e820551771f82418fb35bf3b8f848be57dcbf3
        Validity
            Not Before: Dec 29 03:00:00 2021 GMT
            Not After : Dec 29 03:00:00 2023 GMT
        Subject: CN=aa9131727800b8f56fd06560c4c012be4b84af7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:6e:d3:84:90:f2:d6:b8:b0:2d:3c:f2:4e:
                    a7:7b:3a:13:bf:fe:8e:c8:26:69:cf:76:26:d4:3c:
                    fa:ea:85:53:61:c0:d7:07:16:00:ea:8e:db:d6:4f:
                    62:08:90:c7:2d:33:42:a5:c2:13:f4:1b:24:35:3f:
                    b1:09:ea:0c:27:23:f7:4f:f3:06:5e:d4:42:ef:ea:
                    ab:c2:2d:42:5b:21:6f:92:26:07:63:1e:05:32:d8:
                    de:46:67:f2:e6:30:f7:0c:e9:bb:c4:ef:34:b6:d1:
                    98:26:1d:9d:a7:9b:d0:a8:77:ce:9a:eb:d9:3c:26:
                    84:52:b2:8f:cf:80:6d:ce:29:61:7e:15:87:09:eb:
                    14:4a:d2:0c:07:8d:44:ed:96:14:b7:bf:e9:f2:aa:
                    db:5c:46:0e:5c:aa:95:47:f9:22:22:21:8b:46:c1:
                    ce:6e:2f:25:a1:e8:2a:c5:2c:8e:cc:57:44:7c:30:
                    2d:07:69:30:bf:83:61:e9:c4:47:fd:84:fb:34:07:
                    c2:b7:0c:32:a1:ae:dc:2f:7b:2a:96:13:97:3e:37:
                    7f:53:a6:44:68:d3:74:4f:a1:b7:65:84:fc:ce:b1:
                    ac:e6:34:de:66:0a:53:ab:4f:51:87:5c:63:2a:09:
                    ab:d8:f8:e1:28:e2:db:7c:d6:86:35:66:81:d2:80:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:49:D6:0B:CF:08:7D:F3:F5:31:24:FB:B5:5F:2A:16:25:61:DB:CA
            X509v3 Authority Key Identifier:
                keyid:56:B8:73:C7:8D:99:1B:7F:A0:90:1C:69:8F:1D:04:4A:D0:27:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9e820551771f82418fb35bf3b8f848be57dcbf3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/aa9131727800b8f56fd06560c4c012be4b84af7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e155eb0f-a3c4-4265-9b06-2b847b6e2440/a9e820551771f82418fb35bf3b8f848be57dcbf3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d910::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:19:f8:55:a3:32:c2:4b:b5:04:9b:e5:e7:33:10:8f:7f:
         82:51:b4:6c:c7:9c:79:c1:45:1d:0f:fa:a0:05:53:0e:c6:0b:
         6b:c4:76:22:08:9a:3f:5a:1a:17:11:8a:5d:18:68:bc:51:ad:
         ef:37:fc:fe:16:06:7e:3c:1d:52:d1:c7:89:99:ad:a8:4a:9a:
         6a:28:47:84:bb:d5:2c:ae:22:df:e8:87:5e:90:49:98:1b:5b:
         1b:7a:64:d9:11:24:1a:68:7f:79:09:55:9f:17:47:d5:69:0f:
         a8:9a:d9:86:e3:f9:83:df:44:70:91:fe:87:70:6b:18:68:ae:
         ed:91:1d:73:07:68:a1:20:0a:8f:d6:94:34:40:f1:0d:3f:9a:
         d9:50:52:5d:ca:15:a0:27:d0:cf:94:ef:4d:91:34:cb:02:a3:
         c4:90:23:20:be:ea:75:cd:d0:1e:60:f7:e4:6f:58:25:51:5d:
         4e:3a:28:e7:95:47:30:33:a9:bf:91:94:b3:7d:fc:84:0c:27:
         a6:59:4f:00:6f:18:66:d5:bd:a2:a3:bb:7d:46:ea:84:3c:3b:
         73:29:c0:7e:cf:be:15:ab:9b:52:ab:06:47:91:72:9a:07:9c:
         d1:d9:53:ee:1b:72:e4:ac:1b:9c:7e:c6:8a:ed:cb:6c:06:b0:
         8f:2a:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----