Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/b934e5b45a8cce1b7bd24a81109f50c9cd42e5e7.roa
File:                     b934e5b45a8cce1b7bd24a81109f50c9cd42e5e7.roa (raw, json)
Hash identifier:          B7R6nkisBC7kpn95Eg4PjlV4AJ2DKpf25aRYsduI8+0=
Subject key identifier:   0D:83:A0:97:51:8F:1E:41:1C:32:45:3B:0D:EA:96:AD:B0:4F:C5:FD
Certificate issuer:       /CN=11af1ad561a4033a4bb52ec6632e6ad97a270585
Certificate serial:       1A00B2
Authority key identifier: 16:4D:BB:1F:09:AC:3D:5B:00:86:A1:27:F6:76:16:B3:60:26:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11af1ad561a4033a4bb52ec6632e6ad97a270585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/b934e5b45a8cce1b7bd24a81109f50c9cd42e5e7.roa
Signing time:             Mon 12 Sep 2022 14:43:32 +0000
ROA not before:           Mon 12 Sep 2022 14:43:07 +0000
ROA not after:            Thu 12 Sep 2024 14:43:07 +0000
asID:                     27855
IP address blocks:        2803:1240::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704114 (0x1a00b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11af1ad561a4033a4bb52ec6632e6ad97a270585
        Validity
            Not Before: Sep 12 14:43:07 2022 GMT
            Not After : Sep 12 14:43:07 2024 GMT
        Subject: CN=b934e5b45a8cce1b7bd24a81109f50c9cd42e5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:7f:ba:88:05:1b:88:0d:5c:08:20:2c:50:
                    15:c6:68:37:a6:35:e7:2d:25:53:df:5f:1a:4c:a0:
                    35:9c:20:57:9f:00:93:e3:9f:65:09:b7:8e:eb:24:
                    92:35:15:47:eb:c9:ea:7e:f9:5a:d8:86:ca:a3:6d:
                    bf:5c:00:1f:b0:87:0f:67:3d:32:4d:3f:c5:63:df:
                    d7:4e:cb:aa:de:ce:c2:7b:f7:ef:70:67:89:11:d5:
                    8e:42:17:3f:27:d8:36:1f:6b:be:41:39:fb:d9:5b:
                    89:cd:93:b0:41:ea:1d:f8:d0:17:69:9d:39:d8:07:
                    20:96:36:29:09:a4:81:cb:24:d7:6e:66:24:45:d1:
                    0a:ae:1f:7d:df:d4:c9:29:5a:36:70:97:a9:0b:4a:
                    f5:6f:5f:a2:50:b2:9b:0b:cf:b7:38:49:f1:ab:bb:
                    5c:ce:7b:ea:66:6a:92:b4:ba:b9:22:99:41:bf:7f:
                    bc:88:ce:86:34:16:7a:82:3d:9c:b3:c9:59:f5:c7:
                    77:be:69:fd:f1:4f:0f:33:e8:4c:31:62:a1:bb:10:
                    74:cc:0e:fd:21:9a:56:4b:2d:e1:93:6f:88:ed:0b:
                    a9:0a:15:4d:36:32:c7:4d:34:b3:d1:96:57:fd:8d:
                    07:ab:5f:49:4e:a1:e2:df:6b:1a:a3:b0:f4:ae:2c:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:83:A0:97:51:8F:1E:41:1C:32:45:3B:0D:EA:96:AD:B0:4F:C5:FD
            X509v3 Authority Key Identifier:
                keyid:16:4D:BB:1F:09:AC:3D:5B:00:86:A1:27:F6:76:16:B3:60:26:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11af1ad561a4033a4bb52ec6632e6ad97a270585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/b934e5b45a8cce1b7bd24a81109f50c9cd42e5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2228ba93-e80e-4c80-bd51-c9bc0349f804/11af1ad561a4033a4bb52ec6632e6ad97a270585.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1240::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:9e:55:2b:a5:a1:aa:01:6e:aa:7b:19:ed:f7:cd:4d:f7:
         07:35:d5:43:32:02:92:92:43:5d:f6:66:72:78:e0:8b:25:6e:
         35:90:19:d4:37:10:5e:05:e8:74:e2:15:0a:1e:bc:11:87:7f:
         c3:36:b9:84:ff:ee:fc:54:9f:aa:86:57:d1:8b:d7:b9:e8:d6:
         0e:3b:58:b8:29:d8:be:83:cb:40:ca:92:0c:c2:74:8f:7c:51:
         fb:f0:a6:fc:aa:7c:57:9f:2e:86:dc:16:f1:71:4c:3f:9f:39:
         3b:8a:5d:b6:2b:02:e7:fd:f4:d5:02:6b:64:cb:77:9a:79:9f:
         b1:2b:33:e6:00:a1:05:40:56:73:11:89:88:9e:91:16:d9:70:
         1b:b3:52:b3:0a:f5:ff:c7:0e:91:92:db:84:43:f7:a8:c2:0a:
         ca:36:cf:db:31:2d:b8:14:5c:50:44:12:3b:91:0c:e6:87:f7:
         f5:cc:48:7a:dc:7d:51:50:9c:2e:2b:70:b5:e5:68:ca:59:8e:
         79:d4:2a:27:c5:f4:40:ef:24:69:02:69:f4:60:de:9f:33:ed:
         ce:40:ab:7a:26:91:1f:94:be:c1:46:b6:41:84:1a:9c:51:c8:
         3a:ad:36:74:4d:9a:23:a1:d7:11:bf:66:65:00:82:e5:ce:07:
         16:5e:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----