Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/e16eb6237e1b679ec6d5e7330dcc6d32f3fb3092.roa
File:                     e16eb6237e1b679ec6d5e7330dcc6d32f3fb3092.roa (raw, json)
Hash identifier:          yV14Z8frwls5Fz+r8IILnqw4nxKPuZ2pcqq7iMm4icw=
Subject key identifier:   20:10:74:2C:BD:A5:E5:70:99:B3:DD:B1:91:30:99:8A:F5:DF:12:FE
Certificate issuer:       /CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
Certificate serial:       15AF
Authority key identifier: A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/e16eb6237e1b679ec6d5e7330dcc6d32f3fb3092.roa
Signing time:             Tue 05 Jul 2022 23:26:07 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Fri 05 Jul 2024 03:00:00 +0000
asID:                     52341
IP address blocks:        2803:c180::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5551 (0x15af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2024 GMT
        Subject: CN=e16eb6237e1b679ec6d5e7330dcc6d32f3fb3092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7a:78:8b:a0:4a:76:58:9f:68:41:7d:d3:02:
                    c1:8f:cd:ad:c2:c4:20:2f:da:f5:99:dc:1f:fd:e5:
                    60:f1:7a:a1:0a:a2:5b:c0:2f:b2:2d:f4:0c:7b:64:
                    79:ca:2d:30:1a:95:33:bf:9e:6d:0d:c4:08:18:f7:
                    12:54:99:19:47:79:20:fb:a9:78:0b:5d:d8:05:82:
                    ab:11:9b:01:ef:e3:72:d8:6f:94:e4:5d:cd:aa:2c:
                    05:45:09:f1:ce:8b:d5:28:ed:dd:02:03:4f:cd:e7:
                    8c:fc:88:3f:21:b5:b0:14:01:64:94:34:31:34:c7:
                    32:15:46:f2:c8:a3:8e:eb:f0:b2:95:2a:43:3b:e5:
                    88:7f:6c:08:cb:69:18:09:6d:ec:d8:26:7a:27:8b:
                    7d:cb:7d:96:c4:36:25:a6:5f:f9:d4:e5:68:b5:bf:
                    d6:47:d5:64:a7:a2:0a:fe:00:44:d9:77:56:37:4a:
                    6b:2f:a3:29:2b:6f:c9:20:5a:29:f3:21:3e:21:3d:
                    7f:1c:38:7c:39:54:83:11:ed:3b:30:3d:d6:fc:b6:
                    62:01:42:6a:da:95:3c:01:de:5d:c9:00:99:84:26:
                    7f:5a:e2:ed:e0:8b:59:e3:de:54:c6:ce:e1:36:c4:
                    fa:ba:43:cd:4a:7a:75:f1:06:21:3e:48:e3:57:4c:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:74:2C:BD:A5:E5:70:99:B3:DD:B1:91:30:99:8A:F5:DF:12:FE
            X509v3 Authority Key Identifier:
                keyid:A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/e16eb6237e1b679ec6d5e7330dcc6d32f3fb3092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c180::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:75:03:05:61:ef:e0:0c:9c:3a:1e:aa:3f:04:e5:9f:92:
         07:05:71:e3:c5:2d:88:a2:96:a7:61:c8:35:94:4b:f7:e8:0a:
         27:c8:f2:99:48:fd:e0:df:4f:f2:0a:21:16:ec:e4:cf:ca:55:
         a4:9d:c5:d4:82:0d:c7:34:f1:37:5e:9d:78:bd:00:d0:d9:ea:
         61:aa:fe:47:82:d5:84:0f:bd:b5:47:a5:65:25:63:8a:2f:4f:
         2e:24:96:1b:20:55:e7:c5:18:a9:d8:d1:08:7c:fc:40:15:e0:
         cc:11:f5:0c:d6:c8:f0:e2:db:0a:83:6d:23:16:68:83:8f:68:
         2d:93:9b:4e:f3:5f:2b:62:d0:ec:57:65:d9:a0:43:e4:37:80:
         22:cd:90:01:46:78:c6:1b:33:67:4a:ba:3f:21:0e:ac:cb:19:
         65:78:95:1b:da:1a:08:16:46:a5:ee:e0:c0:0a:53:b7:c2:ce:
         17:fa:10:1e:f7:aa:1c:fe:d6:33:08:58:54:6f:4c:4a:e7:f5:
         23:69:7b:ab:56:42:79:91:36:c8:46:17:c1:bd:3d:c5:60:be:
         19:7c:0f:a9:dc:15:e7:82:84:83:df:48:b1:1e:0e:33:3b:15:
         18:b5:46:bd:40:a1:fc:ef:8f:52:92:d6:31:fd:47:c5:e5:5b:
         55:d8:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----