Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/fd041e08e03cd4b0ca02b53b7e87290929963fc2.roa
File:                     fd041e08e03cd4b0ca02b53b7e87290929963fc2.roa (raw, json)
Hash identifier:          Ibmv4y0UC7+/8FLyb6ri5VUwsF/d6bIhmPZnfcf6ChA=
Subject key identifier:   84:B5:B7:08:A6:C6:F8:52:EC:17:8E:E5:8C:73:24:1A:FC:94:72:73
Certificate issuer:       /CN=acb9a086100edca85e2275f5f7dc2b5cf8f57ab9
Certificate serial:       0370
Authority key identifier: 16:B4:87:48:AF:68:95:77:45:84:F4:08:78:0D:B8:4B:B0:CA:2D:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acb9a086100edca85e2275f5f7dc2b5cf8f57ab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/fd041e08e03cd4b0ca02b53b7e87290929963fc2.roa
Signing time:             Fri 25 Nov 2022 15:46:29 +0000
ROA not before:           Thu 24 Nov 2022 15:45:16 +0000
ROA not after:            Mon 25 Nov 2024 15:45:16 +0000
asID:                     64134
IP address blocks:        2803:8910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb9a086100edca85e2275f5f7dc2b5cf8f57ab9
        Validity
            Not Before: Nov 24 15:45:16 2022 GMT
            Not After : Nov 25 15:45:16 2024 GMT
        Subject: CN=fd041e08e03cd4b0ca02b53b7e87290929963fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:57:3a:aa:e3:c3:b5:35:98:3b:bb:e8:25:
                    14:ac:26:df:88:7c:31:00:29:9b:4a:d3:95:38:6e:
                    d7:98:db:2f:5a:0c:38:26:10:e3:1c:3e:af:6c:85:
                    ff:90:32:d6:9d:5f:ab:11:20:9e:b8:e3:62:23:cd:
                    af:3f:9e:54:37:96:da:e9:5d:27:39:2b:05:bc:23:
                    5d:f3:4d:12:9a:1c:61:45:d7:ec:36:09:da:88:c4:
                    3f:ab:10:3f:36:c0:c7:fe:c5:93:c0:06:e3:b7:f1:
                    eb:51:82:cd:94:e4:04:16:fb:11:04:c3:ae:17:db:
                    a8:25:8b:52:d7:44:4f:68:da:7c:9e:75:d0:10:8a:
                    d6:69:a1:9d:79:af:88:b8:d9:3b:23:be:82:4c:82:
                    64:b0:43:39:5a:6b:46:52:e0:cc:a1:85:35:8a:d5:
                    36:5b:ac:3d:c3:7a:33:9e:cb:a5:c1:c6:26:06:9b:
                    be:4c:e1:13:4e:e6:5e:25:b4:e1:03:5f:8a:54:bf:
                    cf:a5:b6:0e:22:15:8f:e1:b9:27:f8:2f:47:18:10:
                    ee:84:30:59:13:63:bb:4c:2a:93:c2:89:93:4d:60:
                    5b:0a:11:6b:54:57:e6:09:d0:57:49:a6:a8:fa:08:
                    26:e5:c1:c5:67:7c:93:f9:7c:b6:c2:0a:72:d5:bb:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B5:B7:08:A6:C6:F8:52:EC:17:8E:E5:8C:73:24:1A:FC:94:72:73
            X509v3 Authority Key Identifier:
                keyid:16:B4:87:48:AF:68:95:77:45:84:F4:08:78:0D:B8:4B:B0:CA:2D:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acb9a086100edca85e2275f5f7dc2b5cf8f57ab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/fd041e08e03cd4b0ca02b53b7e87290929963fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/acb9a086100edca85e2275f5f7dc2b5cf8f57ab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:96:a6:b4:e6:36:50:fb:1a:43:97:ac:44:85:5b:0d:fe:09:
         61:f7:68:f3:c6:ed:09:33:ff:4e:d7:8d:d9:ef:6f:95:c2:aa:
         2c:69:14:3a:01:6f:ca:a7:c2:7c:42:b1:f6:d7:eb:bb:9c:32:
         e7:77:d6:49:bb:86:1c:87:a8:fb:cc:aa:ca:3d:5d:6b:c2:ac:
         1c:bb:ab:d2:3a:5d:29:42:cc:ac:94:11:d0:30:48:16:58:95:
         79:28:44:fc:2c:94:53:30:03:47:bf:90:86:c3:9b:74:44:81:
         54:2e:de:33:2c:d8:c7:c9:57:74:7f:fc:5f:94:53:25:ce:95:
         90:f3:59:8f:a1:3d:7d:d2:c7:af:b0:b2:e0:30:74:02:22:fd:
         04:6b:51:45:00:7e:1b:d3:1c:6b:f3:55:2e:b0:9a:96:d1:63:
         d8:11:86:a2:9d:97:74:12:1d:0b:d5:f7:dd:7e:c7:30:2b:e7:
         95:4a:86:33:9c:73:e4:fb:ff:54:92:e9:53:db:50:8b:53:51:
         c9:59:f6:31:96:39:f6:a3:12:41:9b:1f:09:0f:f1:c1:04:0e:
         f6:7e:f8:f3:8d:27:b6:8b:c4:61:f6:4c:c9:49:2c:ef:25:a3:
         37:bb:33:05:06:74:0d:56:56:62:39:86:d1:1f:ba:61:6f:60:
         e4:52:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----