Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/77c8f52164a22c2534f77c28cf66d8ef2619be2b.roa
File:                     77c8f52164a22c2534f77c28cf66d8ef2619be2b.roa (raw, json)
Hash identifier:          KMZlQSwHIlxlamk7sv53ndk/BJeimPpA61rW7RewEl4=
Subject key identifier:   D3:15:9D:49:A0:C3:24:10:1D:FB:17:C5:2F:38:AF:68:A5:6D:43:65
Certificate issuer:       /CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
Certificate serial:       43AB
Authority key identifier: 99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/77c8f52164a22c2534f77c28cf66d8ef2619be2b.roa
Signing time:             Wed 02 Feb 2022 14:23:59 +0000
ROA not before:           Wed 02 Feb 2022 03:00:00 +0000
ROA not after:            Fri 02 Feb 2024 03:00:00 +0000
asID:                     271949
IP address blocks:        2803:5610::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17323 (0x43ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
        Validity
            Not Before: Feb  2 03:00:00 2022 GMT
            Not After : Feb  2 03:00:00 2024 GMT
        Subject: CN=77c8f52164a22c2534f77c28cf66d8ef2619be2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:38:27:6e:94:89:00:bc:9c:e1:fe:6c:b3:
                    bb:16:3e:a8:c6:f5:a7:fa:f7:7b:9e:24:2f:f0:9d:
                    fb:ab:0a:26:4c:01:bd:48:c1:23:c3:af:52:a2:63:
                    8a:1e:bc:87:a9:47:3f:2f:43:95:1b:c5:a0:a0:85:
                    66:91:b9:8f:da:69:01:cd:48:57:c4:69:74:4b:92:
                    de:49:31:8a:6d:6e:7b:22:a4:5c:28:01:21:56:df:
                    80:7f:bf:b5:4f:55:cf:c0:d4:84:92:86:8b:5c:78:
                    97:6c:92:56:e9:b9:3b:a7:e1:2f:d2:00:ba:17:7b:
                    4b:d1:be:f5:53:a6:fe:7f:e1:7c:24:6a:8b:2e:0d:
                    d5:0e:80:3d:f1:2f:46:28:ea:e2:f1:11:56:e1:be:
                    1f:3f:c5:1c:84:20:d1:7b:5a:8d:1d:94:72:2a:ff:
                    c1:53:f3:df:bc:8a:52:38:c6:44:07:05:78:9a:a4:
                    43:42:5a:63:9a:ba:d7:04:fa:62:91:d5:be:a6:59:
                    16:35:9d:a5:f5:db:f3:4e:41:e5:ae:0c:25:03:f5:
                    e2:f9:87:18:94:43:5f:cc:56:3b:d7:03:65:a9:2e:
                    5f:fb:b9:f9:c8:d8:fc:13:5c:bd:03:46:5a:20:e2:
                    1b:35:61:26:e0:d0:d2:9d:0d:34:25:ca:28:85:5c:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:9D:49:A0:C3:24:10:1D:FB:17:C5:2F:38:AF:68:A5:6D:43:65
            X509v3 Authority Key Identifier:
                keyid:99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/77c8f52164a22c2534f77c28cf66d8ef2619be2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5610::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:99:03:df:fa:f5:30:3c:80:a1:42:fe:da:4a:da:41:4f:04:
         5a:55:f0:7b:b7:07:10:c6:8f:aa:32:f2:d3:66:52:11:a9:f2:
         72:cd:ca:40:79:e3:ab:dc:0b:f8:d5:07:78:4c:59:c7:95:1e:
         f1:7c:52:49:af:4d:79:51:4f:f4:8c:e3:28:42:3a:d6:2e:7d:
         33:1b:c0:ec:54:74:ef:0b:72:63:ec:69:52:75:05:5f:7a:61:
         19:d6:84:6c:ab:1a:2c:42:63:67:38:01:f6:e0:5f:49:3f:2e:
         f5:83:30:02:11:61:2a:d3:eb:af:5d:7d:c9:84:54:98:7a:64:
         8f:09:53:69:09:e9:43:4d:96:11:21:43:76:c1:27:1c:df:c1:
         3f:bf:5d:0d:70:41:d2:f0:92:96:c0:f2:ee:cb:ff:d6:9f:a3:
         e5:32:c2:55:95:a5:ca:f9:8a:5f:ba:53:97:76:9b:9d:6a:43:
         b8:0d:51:47:12:f9:a6:e5:1c:5a:f7:9d:b6:bd:df:54:f3:8d:
         2d:8f:f3:f4:e8:00:22:c8:1c:64:07:25:30:19:2e:6f:d9:4e:
         92:ca:c3:44:31:cd:2b:ee:e8:88:f8:ac:90:de:c9:7e:72:84:
         ae:5a:b3:ad:7e:b5:81:91:2e:ad:eb:10:9d:ae:72:26:8f:61:
         80:36:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----