Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4a08c47-3b2b-4faa-9ace-51c4b2616877/1beb3cd3e8333f923f66008418b1699ee8391495.roa
File:                     1beb3cd3e8333f923f66008418b1699ee8391495.roa (raw, json)
Hash identifier:          7Xol8ET1AzPD5bSrw7OB8xRm0t32Gbm0XIkxAtdhcqc=
Subject key identifier:   07:D5:4E:FD:16:D8:4C:30:C8:E8:F1:47:D2:1A:B8:FA:42:E5:A3:4E
Certificate issuer:       /CN=e3507cc2e483b7535c69b612bd8c16a9f1333fd4
Certificate serial:       02AA
Authority key identifier: 1B:71:34:B6:8C:6E:B5:D6:1F:26:12:38:24:C3:07:4A:1B:E9:E7:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3507cc2e483b7535c69b612bd8c16a9f1333fd4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4a08c47-3b2b-4faa-9ace-51c4b2616877/1beb3cd3e8333f923f66008418b1699ee8391495.roa
Signing time:             Fri 21 Jan 2022 03:17:57 +0000
ROA not before:           Fri 21 Jan 2022 03:00:00 +0000
ROA not after:            Sun 21 Jan 2024 03:00:00 +0000
asID:                     271975
IP address blocks:        2803:1e10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3507cc2e483b7535c69b612bd8c16a9f1333fd4
        Validity
            Not Before: Jan 21 03:00:00 2022 GMT
            Not After : Jan 21 03:00:00 2024 GMT
        Subject: CN=1beb3cd3e8333f923f66008418b1699ee8391495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9c:2e:81:ca:ad:ef:c4:bb:ee:39:6d:48:69:
                    57:fe:9c:bc:2d:1d:ba:c4:df:a1:b3:dd:d3:87:de:
                    ca:6f:90:f2:f3:fb:7a:20:04:3e:ba:50:8f:ab:c4:
                    9d:26:1b:dc:b1:38:be:44:f3:6c:50:7f:c6:77:c3:
                    4c:ed:b7:0a:d3:a5:e2:e8:d2:84:8b:8a:c3:08:6a:
                    df:9b:36:2c:6f:5e:18:44:74:dc:88:0a:a7:1e:fc:
                    7e:8e:af:b4:57:ca:3f:af:ea:13:13:79:0e:fc:bb:
                    07:ef:be:e3:5f:2a:ee:5a:f9:31:ce:a7:73:fa:61:
                    e8:4a:cf:d8:98:0a:ca:e9:7f:79:f0:ce:00:db:e0:
                    03:99:50:a5:36:81:5d:d7:05:39:d9:d1:ee:6c:f3:
                    40:23:96:a8:55:87:fb:fa:b4:16:01:43:21:98:97:
                    80:4b:43:97:49:5d:77:c9:81:a2:e5:96:23:7c:10:
                    25:0f:c6:f0:c0:0f:c7:25:80:27:3e:0f:73:02:1c:
                    3b:24:07:61:a2:88:19:4e:11:57:fc:87:d8:d3:8a:
                    89:dc:87:b0:4c:78:43:18:1f:d8:5a:76:87:9d:93:
                    f1:ac:98:53:c2:a2:7d:79:b4:2c:bf:11:66:5f:20:
                    35:8e:71:3c:2f:ef:09:77:42:d1:47:55:dd:e9:f4:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D5:4E:FD:16:D8:4C:30:C8:E8:F1:47:D2:1A:B8:FA:42:E5:A3:4E
            X509v3 Authority Key Identifier:
                keyid:1B:71:34:B6:8C:6E:B5:D6:1F:26:12:38:24:C3:07:4A:1B:E9:E7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3507cc2e483b7535c69b612bd8c16a9f1333fd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4a08c47-3b2b-4faa-9ace-51c4b2616877/1beb3cd3e8333f923f66008418b1699ee8391495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4a08c47-3b2b-4faa-9ace-51c4b2616877/e3507cc2e483b7535c69b612bd8c16a9f1333fd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:ec:41:71:f4:3e:aa:31:d0:00:aa:49:bd:61:22:c7:0f:c2:
         b1:3a:1a:71:4e:9e:18:31:65:9f:48:2a:4d:a0:6c:bd:38:9a:
         61:08:72:61:13:71:e4:8a:9a:cb:8f:6f:b6:4d:85:00:f7:56:
         89:83:fc:d8:f2:ed:f5:7d:96:bb:b8:b7:12:f1:4b:91:63:25:
         de:dc:cc:6b:64:fa:23:ba:63:df:f6:31:cc:48:76:d8:0d:6e:
         ac:4b:15:1a:e7:b4:fd:ff:4a:fe:09:8f:50:7d:f7:68:4b:93:
         3d:be:e8:35:8a:a5:18:18:b5:10:39:78:c3:15:a0:dd:6f:9d:
         4d:12:b9:56:89:48:7e:38:b8:91:ea:db:7b:77:be:fb:af:d5:
         85:11:0b:0c:4a:5e:c9:78:51:e6:96:9c:bb:65:c0:d1:0f:fe:
         41:fd:0a:a5:ca:d5:08:0d:0f:f6:2c:77:0d:e8:c8:db:a8:f2:
         47:41:50:18:af:80:9b:90:92:7c:8e:67:b3:62:24:da:46:d2:
         2d:2d:9b:cd:cf:e5:e6:99:3e:a6:86:42:cf:a6:23:96:3c:72:
         16:d8:62:dc:b0:f5:0c:12:b1:a6:49:28:52:26:b2:26:d1:79:
         37:ca:98:dc:87:a9:43:e9:63:40:68:79:46:60:7a:c9:19:a6:
         b7:4c:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----