Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/3cf0fc35d2e61428b5cd5c2b9c5783ef2eb61eba.roa
File:                     3cf0fc35d2e61428b5cd5c2b9c5783ef2eb61eba.roa (raw, json)
Hash identifier:          zn0RL77tH55fK7dC/iw8vL/Cfg5KqZcP3PQ3CbfshCw=
Subject key identifier:   B2:B9:EA:CD:2E:C8:2B:6E:E9:E4:DE:1C:ED:4C:4E:3E:79:F4:B2:6E
Certificate issuer:       /CN=b825aea653e97a291ec1350029e2e92dfa3c3746
Certificate serial:       1781
Authority key identifier: 76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/3cf0fc35d2e61428b5cd5c2b9c5783ef2eb61eba.roa
Signing time:             Wed 15 Jun 2022 14:46:01 +0000
ROA not before:           Wed 15 Jun 2022 03:00:00 +0000
ROA not after:            Sat 15 Jun 2024 03:00:00 +0000
asID:                     269997
IP address blocks:        2803:11e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6017 (0x1781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b825aea653e97a291ec1350029e2e92dfa3c3746
        Validity
            Not Before: Jun 15 03:00:00 2022 GMT
            Not After : Jun 15 03:00:00 2024 GMT
        Subject: CN=3cf0fc35d2e61428b5cd5c2b9c5783ef2eb61eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:6c:54:68:04:95:d6:6c:28:dc:be:69:94:
                    4f:e2:e4:61:53:3e:d8:ae:bd:ee:59:6e:2a:ca:8f:
                    38:e8:bb:dc:9b:dd:b9:b7:5e:fb:0d:ec:f5:a5:df:
                    43:7b:cb:36:7a:02:43:f1:64:40:2e:af:4b:d6:9f:
                    47:54:75:6f:29:23:ea:d5:ae:9a:8b:17:1a:d1:7e:
                    6d:59:1c:9d:21:4f:de:f0:d8:ca:ac:41:8a:46:9e:
                    d8:3d:39:71:8a:67:4d:a2:5e:2d:57:12:16:ad:94:
                    08:0e:3b:ce:c0:68:79:a4:a6:1a:49:31:21:8e:3c:
                    e6:c2:ff:22:c7:ce:48:a1:b6:d6:fe:1f:78:4c:f5:
                    4b:25:07:7a:9c:19:35:e7:c1:81:c9:e6:60:89:8b:
                    17:16:0f:da:dc:52:77:81:69:b2:57:ad:20:4d:40:
                    07:0a:d1:23:96:ee:71:e9:62:dd:0d:2b:0f:6b:a9:
                    80:5b:e8:92:25:ce:94:6e:02:76:63:07:44:d0:bd:
                    12:50:b0:13:da:27:e0:fc:eb:ed:6f:c0:82:ce:75:
                    34:c1:f6:5a:08:8b:cf:e7:47:a4:8d:1c:5f:a4:73:
                    3d:ec:cb:2b:57:f2:bd:94:3e:18:7c:ec:df:93:b4:
                    8d:d6:3c:ba:80:40:4e:72:b8:a6:ab:c9:0a:ee:26:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:EA:CD:2E:C8:2B:6E:E9:E4:DE:1C:ED:4C:4E:3E:79:F4:B2:6E
            X509v3 Authority Key Identifier:
                keyid:76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/3cf0fc35d2e61428b5cd5c2b9c5783ef2eb61eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/b825aea653e97a291ec1350029e2e92dfa3c3746.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:11e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:ac:a6:7c:6d:a7:4d:9d:82:a9:1e:aa:08:75:dd:e0:29:
         84:5f:b0:ff:f1:84:86:5f:aa:49:c9:de:c7:a6:ae:50:84:fd:
         08:db:5e:24:24:1f:4b:0c:e7:a1:5d:91:b6:4c:33:a5:c9:7b:
         d4:ce:12:26:57:d7:d9:cb:a0:54:bf:31:b0:08:38:13:ad:d7:
         03:0c:60:6f:33:4f:91:c4:d2:b4:49:d2:ad:5e:0e:4f:7d:42:
         7f:9e:52:37:f5:d8:1e:bd:e4:c2:f8:e2:c4:5e:0b:84:56:a4:
         6a:37:6b:bf:68:bd:49:51:7f:ce:c3:7e:fb:a6:69:43:19:b4:
         e1:b2:0b:a2:f8:5d:48:28:3c:42:67:91:f5:f5:be:af:2b:4d:
         22:bb:9d:31:38:95:c2:27:80:94:b8:c6:4a:e7:83:5d:66:01:
         92:b6:69:c6:e0:3d:62:08:2e:22:90:a4:18:56:e7:f5:7c:4d:
         15:da:f1:60:48:80:79:5f:0d:62:92:95:09:ef:6c:73:e7:b0:
         40:e7:1b:38:01:84:12:46:e5:98:81:43:26:84:9a:9b:1a:38:
         e5:6f:30:39:d6:5b:1a:a3:17:bb:08:96:5d:e9:1d:f6:68:26:
         3f:1b:01:5b:61:bb:79:31:b1:d5:e9:24:2f:cf:6e:bb:d3:5c:
         20:35:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----