Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/019c1f2b24f860b71956fb46e441c51cc340c812.roa
File:                     019c1f2b24f860b71956fb46e441c51cc340c812.roa (raw, json)
Hash identifier:          1sblkCxN+OQaiPU6Xc0ASq012dWuxddYp8d6NmNIQ94=
Subject key identifier:   88:93:03:0E:FA:B5:7E:3F:BB:A6:91:60:2B:98:8B:CC:CE:31:7C:72
Certificate issuer:       /CN=919d25f91d1d68e6e59019691a59eb95c6967904
Certificate serial:       16BECA
Authority key identifier: B8:57:72:8D:73:9F:FF:A3:EC:97:30:D3:6B:ED:C3:57:7E:DC:CF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919d25f91d1d68e6e59019691a59eb95c6967904.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/019c1f2b24f860b71956fb46e441c51cc340c812.roa
Signing time:             Mon 22 Aug 2022 16:37:54 +0000
ROA not before:           Mon 22 Aug 2022 16:22:12 +0000
ROA not after:            Thu 22 Aug 2024 16:22:12 +0000
asID:                     14080
IP address blocks:        2801:11:c800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490634 (0x16beca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919d25f91d1d68e6e59019691a59eb95c6967904
        Validity
            Not Before: Aug 22 16:22:12 2022 GMT
            Not After : Aug 22 16:22:12 2024 GMT
        Subject: CN=019c1f2b24f860b71956fb46e441c51cc340c812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:47:18:b1:0c:7d:e7:4c:79:f1:d2:49:44:
                    f0:40:96:19:ae:a0:7f:5a:e9:b4:c5:9f:a9:45:4b:
                    84:c3:89:27:9d:ab:a4:61:17:fe:01:df:86:85:48:
                    7f:bd:56:71:f3:72:c6:75:3c:b0:89:c0:3d:62:88:
                    03:64:36:c0:9c:bc:84:b9:de:36:c9:4d:80:c2:7d:
                    25:d4:bc:d1:75:8c:14:ea:a5:ee:0f:f6:d6:87:f8:
                    b7:2a:93:44:ce:b4:fa:84:2c:be:ec:11:73:f5:f1:
                    35:40:30:98:2b:b0:72:b4:30:dd:b4:94:71:48:8b:
                    03:bf:ee:40:d9:da:76:df:4b:e0:0c:54:cf:07:a7:
                    1a:7c:1e:e5:b8:3f:48:17:f8:fc:0c:a6:b1:77:a7:
                    45:8a:ce:0c:4b:34:a5:35:b7:55:27:5f:9c:c7:6c:
                    26:66:34:36:d8:b7:f6:0b:12:3d:38:63:91:68:98:
                    d2:f7:7d:46:43:96:39:b6:79:5c:24:65:15:43:c9:
                    e8:0e:0a:c7:b2:88:8a:ea:54:fa:82:2f:68:a6:f5:
                    2d:e2:a9:0c:02:a2:f3:c6:d0:85:d6:da:cd:b6:f5:
                    8b:71:7d:96:16:57:50:3b:e0:d3:85:bd:29:92:48:
                    05:42:3f:1d:62:f1:01:df:00:f8:eb:61:8f:26:ca:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:93:03:0E:FA:B5:7E:3F:BB:A6:91:60:2B:98:8B:CC:CE:31:7C:72
            X509v3 Authority Key Identifier:
                keyid:B8:57:72:8D:73:9F:FF:A3:EC:97:30:D3:6B:ED:C3:57:7E:DC:CF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919d25f91d1d68e6e59019691a59eb95c6967904.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/019c1f2b24f860b71956fb46e441c51cc340c812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c93f18-c416-4e9d-801b-7718d0cce7a8/919d25f91d1d68e6e59019691a59eb95c6967904.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:79:e0:14:99:e1:f4:62:31:c2:de:61:fa:5f:3b:73:ba:
         bb:97:cf:25:82:7d:24:0d:6b:c7:4d:18:eb:ef:5d:75:41:ab:
         96:23:e1:47:6e:ee:5a:71:fa:2f:0b:9e:bd:83:6a:8d:85:b5:
         5d:13:9f:4f:39:ca:a7:ac:c3:aa:b1:d4:e8:7d:a3:a4:44:05:
         1e:50:a8:8e:4a:fc:34:76:8f:b5:ba:9a:94:1c:19:3d:e1:c7:
         ae:51:69:31:70:dd:84:7c:8b:fa:17:2c:a6:d4:6b:77:7c:de:
         96:b9:8b:fc:be:2f:c2:36:11:78:e2:0e:ac:b3:5e:c5:0e:2a:
         ad:8d:ce:82:37:29:42:f4:dd:d0:db:50:e2:2c:aa:01:cb:87:
         c0:aa:ed:94:5e:0a:f6:84:40:69:56:b2:53:ec:05:32:9d:24:
         47:0c:aa:8d:86:33:44:19:a4:bb:b2:5b:b2:42:fa:f0:3c:a8:
         c4:83:59:07:c9:73:4c:d6:eb:93:23:ac:03:84:35:ef:2b:ba:
         38:1c:96:03:7e:d8:c4:47:30:32:44:9a:e2:c2:68:69:ba:de:
         82:54:f1:f6:d3:46:69:06:d5:cb:36:43:3d:05:01:88:43:fa:
         b8:5d:f4:c0:be:55:c4:1a:62:56:64:5f:39:b1:58:59:01:e2:
         14:c3:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----