Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/ef5f77553dc892f9f71be7e3ed8c720fc35cc20e.roa
File:                     ef5f77553dc892f9f71be7e3ed8c720fc35cc20e.roa (raw, json)
Hash identifier:          iy/JAjvXIPmaf+MJ6HLwoRQO0Pn9pO3A2j8kENeWYC4=
Subject key identifier:   9C:50:D7:FC:A9:38:52:37:50:B6:5D:48:87:39:0C:CA:B8:E2:14:BD
Certificate issuer:       /CN=63d522badd2c6e16fc1798c8d5e89ba380ece7ea
Certificate serial:       0E696C
Authority key identifier: 7B:22:92:10:51:82:02:E7:A6:C2:39:56:50:5D:74:12:26:9D:26:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d522badd2c6e16fc1798c8d5e89ba380ece7ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/ef5f77553dc892f9f71be7e3ed8c720fc35cc20e.roa
Signing time:             Mon 01 Aug 2022 14:20:18 +0000
ROA not before:           Mon 01 Aug 2022 03:00:00 +0000
ROA not after:            Thu 01 Aug 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        2801:17c::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944492 (0xe696c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d522badd2c6e16fc1798c8d5e89ba380ece7ea
        Validity
            Not Before: Aug  1 03:00:00 2022 GMT
            Not After : Aug  1 03:00:00 2024 GMT
        Subject: CN=ef5f77553dc892f9f71be7e3ed8c720fc35cc20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:11:2f:5a:cb:05:3c:00:03:38:f6:c9:6e:
                    b8:c1:bd:f7:c8:a6:01:e1:97:42:f8:78:ee:6f:fe:
                    ef:b6:fc:56:1f:a1:d9:a8:13:06:93:21:d9:9f:98:
                    cf:e8:02:e4:77:9f:ef:eb:81:e3:84:46:d4:df:29:
                    9d:fa:3d:75:01:d3:d1:d4:76:bf:75:2e:cf:9a:b0:
                    6e:67:41:4f:b3:bd:fd:bc:8c:cc:c0:36:80:03:ac:
                    71:3d:70:04:97:c7:89:9d:2d:23:94:74:b5:e0:a1:
                    fa:74:ea:5a:c9:e4:12:b2:a4:49:56:49:91:3b:ff:
                    85:08:fe:60:89:68:f4:da:7e:4d:6c:5d:18:4e:98:
                    a8:b7:0f:bc:ba:73:ae:1d:78:89:c5:ca:a5:b3:02:
                    71:dd:3a:27:5d:26:55:b3:42:38:5d:94:10:01:af:
                    0c:02:b5:19:8a:08:6c:9d:90:1e:d0:80:f3:7f:e1:
                    11:7c:49:ed:c6:4f:f8:4d:99:41:06:63:15:90:b7:
                    85:48:f1:3b:fb:24:bb:3c:10:20:41:ed:a4:8a:d2:
                    31:3a:7c:20:b8:7f:d0:f1:b6:4a:b0:12:7b:92:cd:
                    7f:ba:f1:22:56:9c:8b:23:68:c3:ce:a7:39:e8:6f:
                    ea:98:2a:2e:ad:10:63:0f:0b:82:a1:db:e2:74:8c:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:50:D7:FC:A9:38:52:37:50:B6:5D:48:87:39:0C:CA:B8:E2:14:BD
            X509v3 Authority Key Identifier:
                keyid:7B:22:92:10:51:82:02:E7:A6:C2:39:56:50:5D:74:12:26:9D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d522badd2c6e16fc1798c8d5e89ba380ece7ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/ef5f77553dc892f9f71be7e3ed8c720fc35cc20e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187348ca-6939-4f7c-a8eb-8b75b9eb2442/63d522badd2c6e16fc1798c8d5e89ba380ece7ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17c::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:21:94:c7:cd:41:6d:65:f2:6c:b2:d0:c4:b5:1c:37:35:
         aa:3e:bd:c6:42:a0:eb:50:c3:61:12:e7:dd:24:b1:ae:e2:d9:
         dd:d5:a1:0a:7c:8a:19:84:fd:d3:a3:50:2d:59:b2:89:ae:a4:
         e7:0d:0c:44:99:bb:ec:d4:b6:7b:9d:9f:e5:a1:b7:5d:5b:0b:
         67:b7:38:b6:ac:29:6c:ee:71:e8:6a:34:f9:e2:ae:0b:9b:05:
         a2:52:38:00:ca:57:fb:6f:11:67:8d:5a:e6:62:87:d4:1c:56:
         3a:12:f1:48:f7:fa:02:ef:56:7a:7e:b0:f9:12:8e:fb:8a:df:
         df:54:c9:a5:4f:50:af:e5:33:a6:0c:31:76:77:97:ca:1b:58:
         be:63:9f:51:8b:70:e4:50:69:ed:c9:b1:85:c3:40:30:b6:0e:
         6a:c0:53:48:d4:3b:40:57:3a:46:a9:b9:bd:a3:db:f5:52:d1:
         fc:d6:2e:d6:b7:70:92:39:ef:57:85:ba:d3:0d:1b:a3:67:f8:
         37:fd:a5:74:1e:8b:d6:a2:ed:74:c0:fe:3f:7d:29:21:59:21:
         11:f6:1a:1d:69:13:19:1d:d6:cc:c8:ae:2a:e3:ba:ef:b0:8b:
         18:59:65:51:56:b2:90:64:1e:f2:94:a3:63:a0:60:ac:37:84:
         1b:d3:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----