Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2b0a1202c514457efa8b433770b618839ef0011a.roa
File:                     2b0a1202c514457efa8b433770b618839ef0011a.roa (raw, json)
Hash identifier:          5swAzK1nx7Nj7pB5ryCE7GBUUVS3PUvyNeQRaboAKrI=
Subject key identifier:   A9:15:6A:C4:D3:77:7D:9B:5A:39:54:58:44:5C:C5:24:6C:58:75:DD
Certificate issuer:       /CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Certificate serial:       0FAD56
Authority key identifier: B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2b0a1202c514457efa8b433770b618839ef0011a.roa
Signing time:             Fri 19 Nov 2021 12:35:24 +0000
ROA not before:           Fri 19 Nov 2021 03:00:00 +0000
ROA not after:            Sun 19 Nov 2023 03:00:00 +0000
asID:                     269928
IP address blocks:        2803:32e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027414 (0xfad56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Validity
            Not Before: Nov 19 03:00:00 2021 GMT
            Not After : Nov 19 03:00:00 2023 GMT
        Subject: CN=2b0a1202c514457efa8b433770b618839ef0011a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b2:2b:5c:5d:19:f8:02:ed:f4:32:08:b3:ef:
                    f5:f1:d8:cc:93:ec:b7:e6:82:a1:cb:7c:2b:f8:80:
                    54:f6:68:e8:2e:c5:2f:27:40:4a:3c:a4:f8:1b:f1:
                    87:a4:ee:c4:40:bc:09:ec:b7:a2:cc:ac:af:9c:1c:
                    58:f5:bc:5c:ff:f2:73:69:e8:d1:b4:36:44:6a:0d:
                    b9:ae:b6:14:1a:35:ff:a4:9f:dd:e3:5a:e1:60:26:
                    dd:47:b0:d6:a3:f7:31:33:93:b4:59:31:ed:a9:e0:
                    a3:20:7b:b0:9d:d9:a5:9d:f8:ca:57:98:90:f5:16:
                    16:20:fe:f4:11:6d:31:46:6d:ee:f4:64:9e:21:1e:
                    c8:52:4d:f4:93:ce:22:fc:11:0a:f3:8e:ed:f9:c1:
                    6a:c5:34:1e:06:83:85:f3:76:87:07:4b:3e:4a:05:
                    e1:c3:2e:8e:b2:a3:d5:73:03:19:c8:8b:71:4b:e2:
                    27:50:78:55:79:b6:fe:17:f7:8b:d7:27:9b:1f:44:
                    3e:a8:2e:51:60:53:14:a6:cf:6e:b2:85:6d:cd:c4:
                    59:0f:18:2f:ef:6e:d7:7b:76:62:13:6b:de:63:90:
                    a3:ef:c3:f9:6b:8d:76:fc:a7:d8:2e:7c:60:42:37:
                    1b:e1:2e:23:86:d3:d7:8b:3c:a7:90:a6:0e:6e:b5:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:6A:C4:D3:77:7D:9B:5A:39:54:58:44:5C:C5:24:6C:58:75:DD
            X509v3 Authority Key Identifier:
                keyid:B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2b0a1202c514457efa8b433770b618839ef0011a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:ce:08:eb:31:2d:d9:f2:26:52:ff:ab:5c:23:6c:3c:80:
         c5:df:ed:46:bf:95:fc:03:04:39:d9:9b:82:ed:14:aa:c9:e8:
         66:e8:d3:8e:0f:be:44:5d:33:dc:3b:42:b8:ae:d7:df:29:45:
         9f:c9:9c:89:28:f2:16:fb:57:04:b1:c6:84:82:18:6a:13:6e:
         c1:65:fc:87:32:b6:3f:51:66:5a:3e:5a:d0:c2:0d:e9:9f:e3:
         a5:aa:d1:60:4f:68:71:64:b9:ef:56:3d:c9:e4:5a:38:6f:05:
         23:e6:77:43:9f:2c:d4:8d:b3:b0:bb:f4:0d:e1:e3:c6:9c:48:
         b1:b7:7a:ae:c4:8e:30:0d:3e:c9:2b:51:ed:8f:0e:f3:a1:d9:
         91:1d:d0:c2:a5:a1:b5:2b:ca:89:cb:32:d5:4c:c8:5a:ec:90:
         7d:96:3a:02:ce:89:28:6c:94:f9:ca:58:94:c8:a7:18:45:9f:
         7e:74:88:c5:d3:18:fc:22:99:d7:5f:b7:00:0c:4f:6d:b6:12:
         ac:41:73:2a:78:53:6b:83:98:ad:30:cb:fc:cd:fa:51:88:93:
         82:e8:56:7d:02:ce:2e:e7:de:f1:c3:8c:31:cc:96:49:c1:d2:
         0d:a5:6f:43:0a:e7:08:7c:f9:b6:dc:c3:51:16:d2:cc:f6:2b:
         0d:0f:e7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----