Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/f808ab6a48725e85d4cf496220403be74fcb22b5.roa
File:                     f808ab6a48725e85d4cf496220403be74fcb22b5.roa (raw, json)
Hash identifier:          qlOY+ZLM+PxiXhPGDvukVQbHWiiLgK9zftE6S9aNbIg=
Subject key identifier:   70:CD:96:4F:87:0B:DA:19:CC:8B:C8:1D:42:5A:7D:0C:45:73:7F:99
Certificate issuer:       /CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
Certificate serial:       0A89A4
Authority key identifier: 6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/f808ab6a48725e85d4cf496220403be74fcb22b5.roa
Signing time:             Thu 29 Jul 2021 13:32:21 +0000
ROA not before:           Thu 29 Jul 2021 03:00:00 +0000
ROA not after:            Sat 29 Jul 2023 03:00:00 +0000
asID:                     266703
IP address blocks:        2803:ad20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690596 (0xa89a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
        Validity
            Not Before: Jul 29 03:00:00 2021 GMT
            Not After : Jul 29 03:00:00 2023 GMT
        Subject: CN=f808ab6a48725e85d4cf496220403be74fcb22b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9b:be:f7:27:bf:5b:90:64:a5:3f:d0:d9:be:
                    1c:91:3a:0b:49:9d:f8:13:92:09:49:83:32:d4:c9:
                    f2:c5:9e:cf:b3:4a:76:10:de:de:b6:c1:2e:9b:88:
                    0e:10:59:4f:3f:cd:21:70:89:26:0e:bc:28:9c:9e:
                    a5:5f:c4:95:df:bd:56:77:cb:e0:11:4d:be:d2:51:
                    d4:3c:32:e9:25:22:5f:b3:b2:b4:bf:ea:89:00:ef:
                    6d:34:70:32:a8:70:0f:ac:e0:3a:24:3b:cc:ec:1e:
                    16:51:c8:4c:58:31:7d:09:d8:60:14:af:a2:38:b0:
                    46:10:4c:5a:ec:58:b9:ff:75:0f:d4:92:f0:f9:58:
                    1b:b0:e2:03:92:17:54:a4:77:ac:50:37:79:85:eb:
                    3c:10:fa:e2:29:4c:eb:90:0f:ed:78:fa:31:8d:74:
                    11:46:e7:90:74:1a:1e:c9:4e:6d:2d:17:74:d0:4a:
                    c5:de:55:05:39:55:51:57:76:71:48:34:5a:d7:81:
                    fc:df:5f:57:23:90:4d:96:cd:60:e6:16:ce:c3:ce:
                    00:ad:7e:fa:7f:22:55:99:69:44:c0:43:ed:c0:de:
                    56:09:ca:74:3e:93:9c:0a:ec:46:b0:c4:c9:94:82:
                    1c:3e:08:57:35:97:7c:78:a0:00:af:23:76:dd:75:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CD:96:4F:87:0B:DA:19:CC:8B:C8:1D:42:5A:7D:0C:45:73:7F:99
            X509v3 Authority Key Identifier:
                keyid:6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/f808ab6a48725e85d4cf496220403be74fcb22b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:8a:d1:d6:05:3d:a6:0a:b2:b0:7a:95:54:89:d3:3a:55:
         76:e5:06:36:14:91:0a:e7:3e:b8:52:29:42:c4:1b:82:58:fa:
         c8:6a:fa:5f:fb:a3:81:b6:ad:69:c8:ea:a2:ef:0d:dd:03:01:
         0a:f5:04:6a:ec:6a:2c:4f:1f:1e:3b:2c:27:bb:1d:c2:bd:bc:
         fd:00:a2:0b:a8:0b:a1:1a:65:88:ae:87:7b:c1:df:4c:b6:39:
         e7:ea:49:3b:69:f8:d0:c8:2a:67:e7:d4:93:8b:d2:57:39:b3:
         4f:38:a6:97:5f:6d:aa:af:6a:80:6b:d5:b5:0a:4d:fe:40:65:
         8e:73:8c:26:e0:5a:d2:14:08:93:2a:f3:f0:74:bd:07:43:64:
         8a:a1:70:7b:b0:35:73:16:d5:c1:26:60:70:66:32:a3:f5:16:
         57:f9:2d:f3:cc:72:77:16:e8:b7:b6:02:50:f1:25:57:7b:e8:
         a0:07:4e:6f:d2:6c:69:ca:2b:d1:9a:e8:1d:6c:fe:6a:da:5b:
         0c:d4:05:0b:bf:6e:8e:ef:9d:1e:34:87:8e:9e:7f:dc:56:09:
         e4:d3:b0:53:ff:bb:d1:18:8e:aa:77:27:89:02:ad:1e:52:2b:
         0f:40:e0:cd:4f:5c:3b:af:77:3f:5d:e5:07:8a:15:80:48:02:
         7f:f4:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----