Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/f1ddcd15cd3641210db636a4a4f46730f044e892.roa
File:                     f1ddcd15cd3641210db636a4a4f46730f044e892.roa (raw, json)
Hash identifier:          bHzaEWXTyEmZonwLWgTa+CCZfwtCQb0O2su6xU8enDI=
Subject key identifier:   09:81:2D:A1:5A:A4:BE:78:B0:87:26:10:ED:31:23:6A:C4:AD:38:27
Certificate issuer:       /CN=44185224cf7ca78dbccca01419f06c7cc212b495
Certificate serial:       18BDD8
Authority key identifier: DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/f1ddcd15cd3641210db636a4a4f46730f044e892.roa
Signing time:             Fri 17 Jun 2022 17:50:23 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     47869
IP address blocks:        2803:8080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621464 (0x18bdd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=f1ddcd15cd3641210db636a4a4f46730f044e892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:8c:c7:e0:bf:e2:ab:ed:c9:4a:c2:ca:c1:
                    da:e0:4d:ac:1f:c9:71:39:3f:77:6b:ff:a5:56:da:
                    e9:1f:a1:b4:85:da:13:e2:78:ee:4a:cc:2e:3c:66:
                    d5:70:15:fc:04:4b:8c:8a:c8:b8:37:d9:2e:10:4d:
                    41:35:df:ec:39:83:45:c3:06:da:8a:c2:29:dd:aa:
                    97:d2:26:f6:6e:0d:67:85:9d:ed:ea:e8:99:e4:76:
                    b2:1c:5f:b6:b3:d6:2a:c8:9e:29:7f:d7:76:d0:8d:
                    a0:ab:4d:9e:03:a2:fc:06:bd:08:44:86:75:e0:34:
                    ca:53:99:6d:f7:c1:a7:3d:a3:e8:60:fa:ab:a6:56:
                    d6:c9:9e:9a:84:50:11:62:51:88:0e:ee:bd:b3:95:
                    ac:72:92:fa:e5:29:43:bb:bd:b9:27:b0:f0:e0:3f:
                    37:0c:6f:5d:fc:de:4f:19:29:82:61:39:49:ee:94:
                    9f:d3:df:31:5c:f1:59:aa:b8:24:69:91:64:8b:ba:
                    23:9c:1f:11:76:1a:d4:91:d5:47:47:f8:68:40:54:
                    d1:30:4e:94:05:cd:77:da:be:fc:55:cb:cc:78:cf:
                    90:ef:3c:b5:66:9c:eb:53:5e:e3:b5:58:82:e6:87:
                    96:7e:0b:d1:60:88:5f:d8:36:7a:04:26:54:be:52:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:2D:A1:5A:A4:BE:78:B0:87:26:10:ED:31:23:6A:C4:AD:38:27
            X509v3 Authority Key Identifier:
                keyid:DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/f1ddcd15cd3641210db636a4a4f46730f044e892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:81:5a:f2:04:13:55:d3:e6:25:07:aa:3b:d4:dd:21:f2:27:
         62:1a:dc:18:74:d8:69:7d:fa:88:88:01:db:69:63:b5:a4:ec:
         ff:6e:f0:5d:83:97:56:5a:30:1f:7c:71:de:30:a7:33:96:9a:
         d2:e6:0c:69:6a:bc:97:a6:81:26:13:ed:59:98:c2:30:a2:fe:
         6c:0e:32:f5:a3:ef:40:23:ab:0e:70:52:69:f4:21:8c:d6:b2:
         fe:d2:40:6f:fd:97:5e:5e:af:df:d4:ce:2d:35:04:a2:3c:6f:
         a3:ff:c9:02:d7:5c:f6:54:37:05:34:17:8f:79:74:3a:1c:a9:
         cf:e0:f7:ce:83:66:5f:df:1f:21:b2:e9:f0:54:38:a8:9e:ff:
         bd:50:de:36:a7:cf:70:c3:0c:c7:1c:53:52:60:8c:68:27:09:
         4e:30:f8:f9:64:03:46:1e:7c:07:54:b4:a2:1a:d2:97:87:6e:
         41:46:fb:25:d5:98:d8:a6:2f:19:51:6f:57:7b:77:d2:04:5a:
         99:64:3d:78:82:fd:5a:c1:b4:24:38:fc:d8:bc:b3:9b:07:4b:
         ca:91:84:06:22:b5:11:41:c7:6f:61:21:a7:8d:95:19:e9:81:
         1a:ca:8c:24:c5:5d:88:7f:1e:99:e6:aa:4b:04:67:24:87:ff:
         48:8e:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----