Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/13866fe44cb6d41b7ee30f4a7c9b0971d396cdc4.roa
File:                     13866fe44cb6d41b7ee30f4a7c9b0971d396cdc4.roa (raw, json)
Hash identifier:          pDQxL2vLKxzlZk7xK1Qvk49eAy9qJzqBP2inaye8qPw=
Subject key identifier:   5A:EA:18:6B:9E:D4:F9:77:29:D5:8D:E0:C6:29:04:AE:FE:4A:34:AA
Certificate issuer:       /CN=1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1
Certificate serial:       13A6EC
Authority key identifier: 88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/13866fe44cb6d41b7ee30f4a7c9b0971d396cdc4.roa
Signing time:             Fri 04 Nov 2022 13:33:16 +0000
ROA not before:           Thu 03 Nov 2022 13:33:05 +0000
ROA not after:            Mon 04 Nov 2024 13:33:05 +0000
asID:                     270099
IP address blocks:        2803:27e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287916 (0x13a6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1
        Validity
            Not Before: Nov  3 13:33:05 2022 GMT
            Not After : Nov  4 13:33:05 2024 GMT
        Subject: CN=13866fe44cb6d41b7ee30f4a7c9b0971d396cdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:cb:ec:b1:33:d3:68:93:11:88:e4:02:4e:
                    49:52:e9:ae:fa:99:aa:e9:af:36:7e:f0:fc:3b:f8:
                    90:49:a5:9b:90:fb:17:01:cc:8a:b4:54:7a:7f:60:
                    db:73:10:88:0d:34:a5:9a:94:bb:5e:de:e9:ec:26:
                    43:fc:97:2b:8a:33:80:9a:a5:59:f8:f8:b3:4b:9b:
                    d2:5c:26:1f:66:b0:00:c0:66:20:99:fc:c9:31:38:
                    20:28:b0:e1:50:ea:2c:4e:16:0e:72:d0:b7:5b:5c:
                    dc:5e:e4:49:9b:03:74:52:62:af:76:a4:c9:45:b4:
                    13:08:00:eb:02:f3:36:8a:15:e9:88:da:8a:1c:06:
                    d6:30:6f:78:58:44:2d:01:9a:97:2c:0b:e1:81:98:
                    f5:1a:4d:92:f4:fe:82:b8:db:fa:a0:a5:29:82:de:
                    ac:ba:42:06:88:4d:39:7a:39:b6:3d:a3:19:fa:2b:
                    61:e7:c1:a3:0b:28:17:b3:83:02:85:e6:81:b6:86:
                    80:3b:33:56:d2:fb:06:a6:d3:83:aa:6e:f8:64:88:
                    64:23:7d:9a:01:79:a5:bb:c4:e0:d7:6d:b2:24:26:
                    a9:b7:89:20:cd:f0:87:24:c9:2d:83:a2:1e:bf:db:
                    5b:2f:6b:fb:21:ab:e9:2d:79:62:b6:c7:9e:af:3c:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EA:18:6B:9E:D4:F9:77:29:D5:8D:E0:C6:29:04:AE:FE:4A:34:AA
            X509v3 Authority Key Identifier:
                keyid:88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/13866fe44cb6d41b7ee30f4a7c9b0971d396cdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:27e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:c4:bd:f6:dd:f3:27:0b:41:5b:1c:e4:7e:02:14:53:04:22:
         a2:e4:f2:68:79:f8:11:c2:53:fa:14:62:b2:5f:c2:25:04:e9:
         c7:eb:b3:5b:21:28:20:8f:77:ed:a4:35:b4:24:6b:92:33:8a:
         88:cc:a9:d8:71:c4:c3:25:43:47:15:bd:74:97:76:ac:02:19:
         a7:93:5c:6f:88:3f:e4:23:9e:02:90:3e:ee:c2:65:89:d8:f2:
         f3:11:09:6c:09:be:89:19:68:ee:be:c1:3c:7d:b0:6a:60:81:
         a4:ce:6d:57:12:c8:1d:01:74:03:c0:e5:7d:0c:e6:9f:8b:74:
         75:5b:27:2e:63:b9:ed:48:d8:da:45:0f:a7:67:8f:5e:91:12:
         70:29:5f:79:2c:af:bd:35:0a:23:85:17:39:75:df:0c:22:5f:
         b4:cb:a2:1d:d2:c9:4f:24:4d:7e:66:1e:bf:07:79:d4:64:e6:
         a0:82:5e:06:3b:6a:eb:f3:41:0c:6e:e9:34:2f:33:57:60:14:
         a8:3b:91:8a:c6:3a:5f:e1:af:d3:fe:16:a3:88:77:76:da:3c:
         dd:ac:18:c6:78:c4:bd:ba:32:50:31:3d:9d:1f:e9:f7:bd:a9:
         5f:6b:10:00:91:55:32:9d:2e:86:25:3c:a8:64:2b:37:4e:11:
         b4:ad:c3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----