Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/2babcd732a2f0c41ed7ee3602fb9eca3dfdf0b3d.roa
File:                     2babcd732a2f0c41ed7ee3602fb9eca3dfdf0b3d.roa (raw, json)
Hash identifier:          UMaYUfy4pP2K/Y7E/Bh61ENeK1URKn5TpQMclRzA7CE=
Subject key identifier:   BF:AE:44:AD:93:13:8F:FB:6E:2D:0C:D9:86:17:B9:4A:45:AF:54:7A
Certificate issuer:       /CN=b8249050f2290c5a8ad5903e489ea8217ff11259
Certificate serial:       FFDF
Authority key identifier: DD:00:7C:4E:A2:93:00:E0:03:23:82:94:FF:0A:A7:B9:8E:AC:45:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8249050f2290c5a8ad5903e489ea8217ff11259.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/2babcd732a2f0c41ed7ee3602fb9eca3dfdf0b3d.roa
Signing time:             Sat 20 Aug 2022 05:32:54 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     272823
IP address blocks:        2803:9490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65503 (0xffdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8249050f2290c5a8ad5903e489ea8217ff11259
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=2babcd732a2f0c41ed7ee3602fb9eca3dfdf0b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:b5:cf:76:0d:46:27:3c:c5:19:d9:3e:55:
                    7b:6d:3d:37:3c:91:4c:5d:c0:97:9a:b7:71:38:b0:
                    74:5d:63:8f:01:f8:ee:cb:3f:9d:9f:a1:65:8b:ee:
                    30:91:94:30:ff:e8:a8:f5:61:2a:69:73:00:7b:ba:
                    c7:45:68:9c:fd:52:40:9b:c1:5a:b9:86:ba:35:ed:
                    fb:84:ec:a6:31:fa:27:d3:ee:6d:d1:31:e6:53:22:
                    63:44:0e:77:47:b4:05:f6:4e:42:19:0d:98:78:28:
                    4f:64:64:bb:d7:5e:df:4e:e9:ce:0e:fd:0d:bf:2a:
                    b0:6c:f3:a7:62:8d:9c:b5:60:3c:ff:42:6f:07:4f:
                    d8:da:ec:e5:3d:31:66:c0:69:6d:e7:ad:93:ea:d1:
                    cf:9e:84:aa:f8:2e:b3:fd:7a:fb:34:a4:7e:34:01:
                    00:4f:2f:b2:95:2f:5b:57:e1:c6:7a:01:5d:a6:ca:
                    99:25:fe:fd:2f:99:16:03:1b:20:67:33:b3:b5:ff:
                    96:17:f4:d2:5e:09:c6:4b:f5:94:a3:de:f8:02:19:
                    2b:23:56:45:29:45:35:69:4e:09:d9:0c:24:e3:47:
                    9e:5c:76:49:91:13:b2:9f:26:e9:58:5f:da:cf:e5:
                    ba:2e:c4:51:78:63:0b:1e:37:67:16:f0:90:f3:90:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AE:44:AD:93:13:8F:FB:6E:2D:0C:D9:86:17:B9:4A:45:AF:54:7A
            X509v3 Authority Key Identifier:
                keyid:DD:00:7C:4E:A2:93:00:E0:03:23:82:94:FF:0A:A7:B9:8E:AC:45:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8249050f2290c5a8ad5903e489ea8217ff11259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/2babcd732a2f0c41ed7ee3602fb9eca3dfdf0b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/188476b3-5d3f-4d64-ac65-77901fccd937/b8249050f2290c5a8ad5903e489ea8217ff11259.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9490::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:bb:db:b2:f8:2c:b2:42:08:ae:ed:cf:52:98:e0:ab:f0:
         4e:cf:85:74:ad:df:5b:df:52:2f:d6:fc:f5:69:a5:93:14:e5:
         b4:92:bb:93:2b:4c:be:e1:83:e3:b6:ff:e4:d8:e4:57:3d:8d:
         87:56:2f:fe:49:ed:c8:26:80:35:91:07:be:a7:4c:3b:80:02:
         eb:b3:4a:37:6d:5f:1b:00:ef:e5:0a:83:f7:82:a7:0f:d1:ac:
         69:33:87:a7:94:bd:d8:39:3a:04:81:91:12:d2:b2:be:18:cd:
         89:1a:ec:b1:b2:46:36:bc:c4:d5:59:8c:e8:25:1a:cb:98:8d:
         96:55:77:af:6e:a9:0e:b6:6b:12:e9:62:95:71:e6:a1:67:67:
         8d:be:99:9c:ec:e7:9a:a2:d9:9f:f7:fd:02:70:83:8f:7f:ed:
         3b:b2:4f:9f:41:5f:c5:d9:b7:12:dc:27:0e:80:45:72:e3:7d:
         80:ad:5d:3f:03:26:8c:1e:10:9b:f1:48:e4:cf:f5:72:82:b5:
         72:d8:85:83:fa:4b:be:bb:a9:49:95:5a:21:72:05:2e:04:fd:
         8e:55:3c:87:db:ca:96:73:91:bd:a4:78:90:1d:33:32:1d:de:
         4e:22:95:64:6c:8e:4a:9a:4e:27:ce:f5:42:ce:58:6d:6c:ec:
         ff:a9:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----