Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/337ee65f173e4964aa8d9b4fa5c316cf0acd7988.roa
File:                     337ee65f173e4964aa8d9b4fa5c316cf0acd7988.roa (raw, json)
Hash identifier:          4aFQKpaD4MC3fohNHYs0vk7LWJLnHDaLa9EUmSzNx2A=
Subject key identifier:   7D:9F:D8:E4:28:9B:40:72:31:2F:D7:2B:AC:32:D7:1F:1C:B3:F1:E7
Certificate issuer:       /CN=4ef467a028415587646ee8e311e81adea47f6ec7
Certificate serial:       06CE
Authority key identifier: 90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/337ee65f173e4964aa8d9b4fa5c316cf0acd7988.roa
Signing time:             Mon 20 Jun 2022 02:05:48 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Wed 19 Jun 2024 03:00:00 +0000
asID:                     270160
IP address blocks:        2806:3e7::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742 (0x6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef467a028415587646ee8e311e81adea47f6ec7
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Jun 19 03:00:00 2024 GMT
        Subject: CN=337ee65f173e4964aa8d9b4fa5c316cf0acd7988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:3d:d2:ee:29:55:49:6c:f4:37:3a:50:3a:
                    fd:c4:5c:ec:5c:96:23:9d:35:00:ef:e1:4c:ed:ae:
                    83:77:d2:48:9f:c1:bf:35:27:c7:2f:2f:81:76:8b:
                    42:90:50:84:c8:b0:44:9b:b0:f6:61:96:31:c9:fc:
                    a4:02:91:a8:ea:00:62:23:07:a8:8e:45:e6:35:06:
                    f0:4b:d6:a3:04:db:19:e3:83:52:09:04:fb:46:68:
                    90:73:bc:71:6f:71:4e:7d:c5:f2:92:b1:d2:e9:85:
                    f0:9f:a7:67:a9:7c:6e:dc:5d:ef:8d:56:db:2e:4c:
                    6d:fa:e0:2f:1a:af:28:11:f3:b9:5f:e6:28:5e:97:
                    66:41:db:48:20:c7:cb:6c:ba:77:bb:d7:40:e0:31:
                    c1:14:ab:9e:73:1b:52:c5:ff:25:2c:84:c7:11:94:
                    94:22:50:e6:8e:eb:92:b0:2c:75:42:bb:08:83:99:
                    31:cb:dc:fc:0a:93:bd:8b:54:9c:64:1a:e4:b6:11:
                    c9:fc:0e:cd:26:61:a5:d6:2c:83:cb:79:26:62:6e:
                    a6:06:29:97:5c:f1:3a:35:1d:b7:77:8c:32:70:18:
                    ee:54:b9:29:82:0d:4b:fa:a1:d3:8d:b1:a9:10:eb:
                    8c:80:0e:75:f8:b3:0b:10:73:ec:2b:2c:03:1a:82:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:D8:E4:28:9B:40:72:31:2F:D7:2B:AC:32:D7:1F:1C:B3:F1:E7
            X509v3 Authority Key Identifier:
                keyid:90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/337ee65f173e4964aa8d9b4fa5c316cf0acd7988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/4ef467a028415587646ee8e311e81adea47f6ec7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:9d:b3:31:b7:29:2e:ba:5e:18:fe:d5:5b:c3:bb:8b:60:
         78:ba:09:bf:3b:de:5f:f9:fb:cb:ba:4a:70:f3:4f:95:3c:22:
         4e:2d:7d:09:9a:00:f0:9c:d5:2a:86:87:21:c6:ae:9c:fd:6c:
         6c:1b:ce:5b:d0:7b:a5:4b:ed:85:1d:0c:ce:bb:b7:0d:f2:02:
         37:5c:17:88:13:bc:a2:65:2b:45:dd:e4:5c:71:cd:4d:17:bc:
         8d:2b:33:65:cc:ae:8c:e1:ce:be:c6:49:ed:98:65:99:19:25:
         33:02:1e:be:7b:6d:02:5c:c6:75:76:0e:a2:36:cc:51:6d:51:
         0b:8c:80:0f:f8:2e:30:df:2b:a8:b6:89:4a:1e:84:1f:29:37:
         0a:41:99:15:52:b9:0b:db:da:cd:65:09:cc:65:5e:41:06:8c:
         a0:19:7e:d4:b2:24:1f:ae:37:af:90:4c:16:2e:c7:1e:2c:02:
         36:ed:84:13:40:17:17:aa:b1:90:52:a9:45:d2:0e:0b:f1:e5:
         0f:a8:21:f6:43:28:2d:89:cd:06:c4:44:3d:7d:69:d7:4a:9d:
         af:06:b1:a7:c2:44:5c:5b:fe:8f:a6:62:7e:1f:bc:7b:14:86:
         fb:72:3d:6f:26:df:d6:34:d1:a7:4d:64:64:0b:53:66:11:11:
         8d:0a:20:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----