Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/8be6e34d06314e04ae2fa8ca14e28c6063f1408a.roa
File:                     8be6e34d06314e04ae2fa8ca14e28c6063f1408a.roa (raw, json)
Hash identifier:          O7oEjer0pKkLTxVBQSHByqoh2xZlypxk3NSprasSUmw=
Subject key identifier:   12:3E:89:C0:AD:5C:E4:77:3B:E1:35:ED:4B:36:BF:81:4C:4C:83:2B
Certificate issuer:       /CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
Certificate serial:       139014
Authority key identifier: C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/8be6e34d06314e04ae2fa8ca14e28c6063f1408a.roa
Signing time:             Sun 13 Nov 2022 01:09:29 +0000
ROA not before:           Sat 12 Nov 2022 01:08:22 +0000
ROA not after:            Wed 13 Nov 2024 01:08:22 +0000
asID:                     270036
IP address blocks:        2803:95e0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282068 (0x139014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
        Validity
            Not Before: Nov 12 01:08:22 2022 GMT
            Not After : Nov 13 01:08:22 2024 GMT
        Subject: CN=8be6e34d06314e04ae2fa8ca14e28c6063f1408a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:bc:46:e2:97:4e:c0:08:59:83:b5:66:91:
                    f9:3a:d7:cc:be:b7:ff:9f:b9:86:0b:6f:f5:ab:fd:
                    21:f2:f3:34:d3:99:fd:2d:90:79:a3:f4:4b:b6:0a:
                    76:a3:32:ec:a7:3a:df:a3:cd:21:1d:17:a3:0f:c4:
                    3d:9a:1e:09:1c:af:18:36:b5:5f:56:00:c8:81:9d:
                    ea:06:0e:d5:32:21:74:cb:96:5f:d6:4d:c0:17:46:
                    2c:3a:da:3e:ee:8b:9b:ba:56:69:08:a9:ec:87:33:
                    87:26:5c:5b:c5:92:75:95:c9:20:06:93:06:cd:83:
                    ca:58:a3:0d:cb:2e:b5:cd:36:88:ef:88:5b:a3:93:
                    73:15:34:ef:ab:0a:38:be:61:e8:d0:e6:a5:6d:e5:
                    ad:1d:0f:1a:6a:d0:b6:03:32:64:17:63:ed:13:17:
                    76:56:dd:f4:c3:74:81:62:cd:92:a5:2c:51:3a:9e:
                    0a:55:5b:70:48:a8:fe:1e:1e:55:c9:6c:4c:c8:a2:
                    27:2c:72:b1:03:da:5d:f3:37:73:a3:54:0a:78:18:
                    09:6e:69:df:f7:61:a9:c2:95:53:d7:20:9f:20:cd:
                    dc:95:ff:f9:6e:4c:13:a7:02:69:7c:b9:23:2a:46:
                    4c:9a:1b:8f:da:4b:7e:76:d0:7e:9f:5d:a4:75:e0:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3E:89:C0:AD:5C:E4:77:3B:E1:35:ED:4B:36:BF:81:4C:4C:83:2B
            X509v3 Authority Key Identifier:
                keyid:C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/8be6e34d06314e04ae2fa8ca14e28c6063f1408a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:95e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:d9:9e:8a:97:06:00:a5:7e:c6:66:d2:e3:c2:f8:74:b3:
         57:b5:67:0d:d6:29:71:1d:95:01:92:f9:50:2a:2c:87:2d:d6:
         84:13:9b:89:19:cd:3c:bc:4d:fc:a1:d7:2b:de:58:12:bd:6f:
         93:8d:e0:72:07:78:69:a8:37:40:fd:84:46:ea:a0:00:40:a2:
         cc:82:49:07:a2:76:c0:c2:70:e3:b0:b0:7c:9b:b3:3e:98:b3:
         13:c5:1f:00:19:07:d4:c2:26:61:4d:11:7a:33:99:10:3d:3d:
         3a:3b:71:67:b6:e9:a7:67:8e:5f:97:87:38:fc:a4:33:9d:79:
         e3:20:ff:2f:da:5f:8a:89:e3:73:03:5d:ad:48:b8:7d:f0:66:
         12:c1:76:59:be:cd:0d:cd:7e:80:44:93:65:ed:58:b5:53:9c:
         98:42:4d:cf:84:e1:ee:c2:61:fe:f7:b5:5b:37:f0:3c:8d:39:
         33:93:5e:8c:11:7f:4b:90:5a:6f:c5:91:29:57:6e:8c:df:ac:
         fb:89:64:b1:57:30:be:45:7e:1e:cb:88:cb:42:9a:18:eb:fa:
         35:ac:f7:f7:08:68:a5:63:32:1b:e7:75:6d:e9:cd:5c:f5:30:
         fc:9f:d8:ee:66:70:1f:2b:21:81:2a:a5:43:15:55:ed:bb:41:
         11:46:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----