Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/294cd8a3-9721-45cf-8217-afd14219eef8/3a956db136ae4b5ca79da952c7ee23e9ad50093b.roa
File:                     3a956db136ae4b5ca79da952c7ee23e9ad50093b.roa (raw, json)
Hash identifier:          EnMfypA04CqQCTtjS1VBG+VnV2iut7WC31UN25luZI0=
Subject key identifier:   AB:FA:5E:0B:AB:1D:E2:7A:FA:57:94:40:2D:D9:10:6A:E2:38:55:30
Certificate issuer:       /CN=828b29946ac2e3311ceb4053fdb9b9910ab59324
Certificate serial:       0705
Authority key identifier: F5:B2:21:25:27:3D:20:4A:B8:23:AB:4E:98:03:F8:9D:00:99:E4:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/828b29946ac2e3311ceb4053fdb9b9910ab59324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/294cd8a3-9721-45cf-8217-afd14219eef8/3a956db136ae4b5ca79da952c7ee23e9ad50093b.roa
Signing time:             Thu 21 Jul 2022 15:31:27 +0000
ROA not before:           Thu 21 Jul 2022 03:00:00 +0000
ROA not after:            Sun 21 Jul 2024 03:00:00 +0000
asID:                     272819
IP address blocks:        2803:6490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797 (0x705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828b29946ac2e3311ceb4053fdb9b9910ab59324
        Validity
            Not Before: Jul 21 03:00:00 2022 GMT
            Not After : Jul 21 03:00:00 2024 GMT
        Subject: CN=3a956db136ae4b5ca79da952c7ee23e9ad50093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:f9:31:17:9c:ce:a6:83:cb:6d:b8:ad:3a:
                    6d:20:1c:ac:7a:c7:dd:6b:cb:56:8d:94:1a:29:91:
                    5e:ff:a0:4d:e7:07:cb:ae:65:ef:36:aa:00:c3:79:
                    61:5d:72:d9:ef:ac:ef:6d:15:0e:c1:39:b7:e9:36:
                    f7:c4:d5:e5:9f:8f:b5:5a:4f:4a:9c:b2:d2:92:a6:
                    91:5a:3a:fc:7f:b3:eb:c4:e9:e0:33:18:c7:ff:91:
                    05:84:f0:e7:3f:15:f6:33:8d:09:7d:28:7a:50:93:
                    1b:78:79:35:5b:27:29:b0:16:bf:0c:d6:a2:8b:aa:
                    2a:81:4b:47:36:87:13:c4:bc:35:a3:84:2c:4a:03:
                    53:1f:16:9f:0a:73:0d:18:6f:9d:7f:32:e8:82:ed:
                    5d:07:a6:e0:99:ff:73:fe:c8:46:f3:82:31:a1:4c:
                    0d:88:d7:ef:bf:29:70:18:49:7e:34:57:d9:e2:12:
                    c9:e3:ea:1a:c8:9e:dd:f2:2e:e6:02:f3:b0:12:5a:
                    9e:19:81:c0:ee:08:49:6d:2f:8a:33:83:42:0c:0a:
                    6d:67:9f:a3:d8:62:2a:d4:ff:c3:70:b9:9f:67:13:
                    58:d0:0d:fa:9d:9f:ae:04:16:95:15:9c:b3:f8:d2:
                    86:05:56:68:62:95:05:f3:8e:04:1b:1d:9f:3d:70:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FA:5E:0B:AB:1D:E2:7A:FA:57:94:40:2D:D9:10:6A:E2:38:55:30
            X509v3 Authority Key Identifier:
                keyid:F5:B2:21:25:27:3D:20:4A:B8:23:AB:4E:98:03:F8:9D:00:99:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/828b29946ac2e3311ceb4053fdb9b9910ab59324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/294cd8a3-9721-45cf-8217-afd14219eef8/3a956db136ae4b5ca79da952c7ee23e9ad50093b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/294cd8a3-9721-45cf-8217-afd14219eef8/828b29946ac2e3311ceb4053fdb9b9910ab59324.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6490::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:47:c1:3b:d2:88:fc:e7:70:0f:e6:9c:8f:3d:37:41:c9:
         a6:7c:d2:5e:4b:25:8e:6b:ed:3e:fc:6e:cf:5b:be:9c:3e:77:
         9c:d0:15:b0:7b:9a:38:31:5b:d2:15:ec:7f:28:3b:ba:78:b0:
         cd:56:d5:52:34:6e:7f:c7:29:fa:19:57:d8:b9:58:9e:80:15:
         c0:6e:61:8a:f4:1b:69:23:7a:5b:d9:cd:ac:dd:81:2d:e9:cf:
         2b:fa:4f:40:a0:f9:d3:12:2f:0d:fc:bb:76:e8:c7:f4:2d:de:
         6b:28:43:6c:a9:22:f2:46:cc:06:a4:e8:a6:67:2d:4b:59:da:
         9e:0f:8a:b4:1a:8a:d4:fc:52:42:ee:ca:3e:66:f6:50:bb:78:
         a7:ed:46:a2:b6:a3:a9:4a:78:11:a3:ca:72:13:5b:c1:dc:00:
         4c:7e:4e:36:92:80:55:17:b8:70:9a:46:f3:67:c3:7f:00:59:
         01:f0:ae:c4:c4:92:74:ac:ff:80:8c:8a:01:19:f6:71:38:9f:
         02:7d:01:8d:9e:44:4a:ba:48:19:0f:3b:5f:a2:1a:32:b3:4e:
         b6:1d:af:eb:18:af:25:a4:f3:4f:9c:6a:53:d2:46:13:b9:ce:
         8e:65:a6:ab:a1:8c:86:77:9e:5b:89:e4:14:3e:5b:d3:18:d0:
         57:eb:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----