Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/f31e92d47440b009355e6d9875c645ae8a8a63a3.roa
File:                     f31e92d47440b009355e6d9875c645ae8a8a63a3.roa (raw, json)
Hash identifier:          9WiYEUYylqpk9XuAeJHvTIqTOBaQDACTbhYyyIAINH8=
Subject key identifier:   2B:B8:3A:E3:68:8A:74:25:DF:83:5B:EF:12:3C:D2:DC:84:F9:9D:4C
Certificate issuer:       /CN=c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19
Certificate serial:       04C5
Authority key identifier: 40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/f31e92d47440b009355e6d9875c645ae8a8a63a3.roa
Signing time:             Thu 10 Mar 2022 15:11:01 +0000
ROA not before:           Thu 10 Mar 2022 03:00:00 +0000
ROA not after:            Sun 10 Mar 2024 03:00:00 +0000
asID:                     271936
IP address blocks:        2803:fa10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19
        Validity
            Not Before: Mar 10 03:00:00 2022 GMT
            Not After : Mar 10 03:00:00 2024 GMT
        Subject: CN=f31e92d47440b009355e6d9875c645ae8a8a63a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:23:fa:46:cc:e8:67:05:c9:90:41:ba:a5:
                    d4:65:02:26:a6:03:87:6c:dc:21:f1:e7:ca:67:fd:
                    4f:a5:5c:f8:fd:49:29:60:7e:ec:50:79:63:2d:73:
                    fb:04:d8:0d:2a:45:76:55:d9:0b:d9:c7:b9:3d:87:
                    3c:bd:1d:e9:38:cb:0d:e6:3b:83:ed:68:61:d6:9a:
                    a6:7a:84:a1:e1:49:d5:70:67:15:38:1b:c9:86:39:
                    2f:e8:58:97:ce:ed:b0:17:56:8b:b1:ee:61:b0:c8:
                    5f:9b:b4:65:df:52:39:4e:9e:33:d4:b3:50:db:29:
                    c6:cb:15:a2:04:e5:a1:72:b6:70:53:6a:b0:ea:98:
                    24:5c:93:94:43:47:57:b0:8b:0d:71:15:31:70:e2:
                    41:ba:0a:e3:61:2f:8b:ea:14:a8:6e:fb:25:22:59:
                    39:90:5a:21:6e:1e:b6:7d:24:41:09:df:16:58:2b:
                    9f:66:6f:cc:94:a9:9a:41:2d:b5:d0:2a:d3:6f:f0:
                    9d:66:dc:ef:6f:5c:4b:9e:21:b0:68:45:7a:a1:97:
                    44:18:c2:d0:3d:a5:d9:e0:1b:90:7b:6b:d1:f8:bc:
                    e7:ba:b2:85:6f:84:9c:49:29:4c:84:a5:2c:fa:9c:
                    9d:4e:a8:60:07:5e:fc:d0:32:bd:48:ab:8d:80:5c:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:3A:E3:68:8A:74:25:DF:83:5B:EF:12:3C:D2:DC:84:F9:9D:4C
            X509v3 Authority Key Identifier:
                keyid:40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/f31e92d47440b009355e6d9875c645ae8a8a63a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa10::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:a4:67:c7:e2:c4:73:08:5c:24:3c:47:c3:3a:2c:ac:4e:
         c2:a6:6f:86:bb:e3:dc:bd:15:39:e9:77:2e:0c:ea:fe:d6:e7:
         5d:45:e8:8a:4f:5a:bb:32:fe:27:e5:66:dc:67:8b:b5:43:b1:
         73:83:70:0e:dc:03:51:d2:cb:37:59:f3:c4:39:cd:84:c1:f8:
         64:75:9b:fa:8e:d1:f9:c3:f3:85:21:a8:7e:5f:91:59:64:06:
         f3:8a:c0:58:1f:2b:b9:fc:fb:4d:58:07:0d:3d:dd:1b:69:37:
         b3:67:9c:0b:63:d5:09:70:f6:c3:5c:b5:b6:35:41:49:be:be:
         91:7a:63:b9:77:8e:52:67:c4:bc:1b:18:5a:01:d2:e6:7d:cb:
         fc:3c:e1:0a:54:58:de:a4:62:89:55:38:f3:a8:79:cc:aa:67:
         dd:f2:25:97:69:91:07:82:92:d9:de:53:b7:31:ca:b1:8b:b5:
         8c:25:27:21:61:28:20:d4:0f:dc:cb:55:29:0c:51:2a:12:68:
         77:4c:47:16:69:01:f3:f1:f9:90:86:76:ef:08:b8:3a:a5:60:
         70:9b:29:64:e0:01:1c:4b:61:e2:39:66:85:e1:6b:96:af:f2:
         2c:8f:07:80:1c:75:9b:b9:0d:dc:53:85:49:91:af:40:f8:2b:
         34:98:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----