Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/fa09174ffca7b6442c157a38073dc25a943b2336.roa
File:                     fa09174ffca7b6442c157a38073dc25a943b2336.roa (raw, json)
Hash identifier:          L65BeD/I9ZYlR/CyYn00tujBweEkaVsx8CTpZLasto8=
Subject key identifier:   38:96:E2:E0:34:66:A5:14:28:B5:40:DE:20:93:3E:AC:1F:A1:AF:59
Certificate issuer:       /CN=9cdbee5404c6b37387353abe6fc9a9bfff700800
Certificate serial:       0655
Authority key identifier: D1:94:40:28:D7:7F:07:66:65:8B:C2:D3:F6:2C:78:F3:EF:B8:EA:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/fa09174ffca7b6442c157a38073dc25a943b2336.roa
Signing time:             Tue 30 Aug 2022 20:05:33 +0000
ROA not before:           Tue 30 Aug 2022 20:00:21 +0000
ROA not after:            Fri 30 Aug 2024 20:00:21 +0000
asID:                     64139
IP address blocks:        2803:7090::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdbee5404c6b37387353abe6fc9a9bfff700800
        Validity
            Not Before: Aug 30 20:00:21 2022 GMT
            Not After : Aug 30 20:00:21 2024 GMT
        Subject: CN=fa09174ffca7b6442c157a38073dc25a943b2336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:22:d4:d5:7d:67:3a:bd:d8:cd:44:48:b9:
                    73:f9:f9:d8:2c:95:3a:21:b8:8d:1c:a6:9a:fb:37:
                    6c:25:b5:69:97:78:80:9a:c4:ed:b7:6c:15:9c:15:
                    f9:a9:94:0f:b2:45:48:c8:ba:67:ed:97:84:c5:1c:
                    39:d4:09:89:1d:c5:e2:1f:bb:42:04:ea:42:41:a2:
                    d1:14:38:6d:f5:00:a3:61:ad:35:69:70:0c:36:4f:
                    72:ad:c8:a5:4e:26:12:50:73:68:6f:fe:8c:f4:35:
                    f2:68:ad:14:eb:9e:4e:b5:e3:d2:e1:d9:74:ee:37:
                    17:f5:e8:e8:03:4e:89:ef:2e:99:a5:04:50:9a:7a:
                    07:a4:12:c6:43:5d:b9:96:92:e9:9f:c8:b6:c5:91:
                    06:bc:c0:27:f8:9a:43:d9:4a:af:30:86:05:79:b4:
                    54:ec:ac:ae:2e:b6:00:a1:2a:4c:31:cd:0d:a0:9e:
                    11:d1:18:2c:b8:1c:75:49:39:cc:4c:15:3c:42:8c:
                    eb:57:6b:d1:26:e9:cc:8e:57:8b:03:01:b2:21:9b:
                    66:9b:a8:a9:e4:83:80:69:f6:20:80:68:bd:8e:5f:
                    0f:48:99:56:b6:e6:13:1f:e5:97:2a:02:65:37:73:
                    0d:46:dd:da:2c:c9:52:85:27:ef:73:41:0b:01:83:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:96:E2:E0:34:66:A5:14:28:B5:40:DE:20:93:3E:AC:1F:A1:AF:59
            X509v3 Authority Key Identifier:
                keyid:D1:94:40:28:D7:7F:07:66:65:8B:C2:D3:F6:2C:78:F3:EF:B8:EA:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/fa09174ffca7b6442c157a38073dc25a943b2336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7090::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:aa:29:55:ca:93:f8:47:6a:7c:40:45:40:99:1a:b9:8b:
         2d:c1:80:d3:8c:b9:94:01:89:b3:00:e9:f4:df:a9:ed:3c:41:
         25:80:bd:52:ea:43:cd:ba:d0:a4:bd:8f:aa:e6:ea:ec:f4:7e:
         d3:cb:b5:fd:70:f8:52:d4:be:03:c2:9a:e2:22:25:c9:dc:44:
         74:0f:f7:6e:e6:12:9e:25:15:02:30:42:d1:d8:db:02:ef:db:
         c5:1d:dd:1b:74:a7:0f:ec:52:90:80:cf:f9:35:b5:32:63:37:
         60:f7:5d:b9:b7:c0:48:3f:1f:36:d3:dc:d1:4f:cd:a5:73:48:
         be:af:92:d6:fb:8e:af:2d:cc:8b:4e:ad:66:6e:13:40:7e:13:
         24:d1:e9:98:a0:93:a3:50:4f:81:4b:e1:68:19:53:a1:ba:ca:
         58:b5:2c:f6:50:8a:bd:9c:93:79:13:53:ae:13:17:10:01:0a:
         83:e0:82:4c:66:6d:64:6c:f4:0e:7f:0b:48:6f:1a:3e:e5:bf:
         4e:05:d9:09:39:bc:d1:15:98:26:4c:1e:f3:8e:5a:98:29:56:
         aa:47:6d:a1:97:27:5d:99:75:d3:5c:2e:b6:b0:60:6e:10:72:
         cb:a1:8b:c8:57:dd:30:fe:13:e8:01:80:bb:c4:e4:b9:f5:e2:
         52:dc:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----