Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/f6b4b8016b48f5676f327e90475717eb52945f68.roa
File:                     f6b4b8016b48f5676f327e90475717eb52945f68.roa (raw, json)
Hash identifier:          8aOUr/4pjf6+D+ZgO9SKXGqX5l73dFGHycfV6Jfl5IY=
Subject key identifier:   6F:2F:81:DD:16:B4:2F:75:33:B6:25:53:49:79:22:00:D3:47:DF:C9
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       0AFC26
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/f6b4b8016b48f5676f327e90475717eb52945f68.roa
Signing time:             Thu 01 Sep 2022 12:06:03 +0000
ROA not before:           Sat 11 Jun 2022 03:00:00 +0000
ROA not after:            Tue 11 Jun 2024 03:00:00 +0000
asID:                     271927
IP address blocks:        2803:ea10:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719910 (0xafc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jun 11 03:00:00 2022 GMT
            Not After : Jun 11 03:00:00 2024 GMT
        Subject: CN=f6b4b8016b48f5676f327e90475717eb52945f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:d7:d4:9b:b2:ac:8a:d1:aa:cf:c9:2f:66:
                    8a:60:c4:49:8e:fa:5e:c1:39:73:6c:c7:52:65:e2:
                    da:6c:6a:5b:da:28:c4:3f:b2:de:aa:ee:f1:48:51:
                    d9:e1:7a:a2:df:9f:52:9e:52:41:a8:88:71:2a:f1:
                    0e:06:57:7c:53:1d:43:1d:78:2e:29:33:a7:0e:05:
                    bb:7b:54:c2:8a:59:a1:94:3a:a9:a5:96:95:9a:cd:
                    ae:39:58:49:0f:8c:11:c8:3c:d4:bf:c9:5b:7a:16:
                    a3:d5:6c:48:a1:81:e2:6a:cb:f5:1c:22:f6:57:52:
                    7e:e3:af:37:a1:98:20:15:d9:90:25:3e:5f:2e:aa:
                    4c:f1:c3:f8:c8:53:45:2d:38:61:f5:0c:97:22:e5:
                    e0:06:83:93:78:3f:e2:10:65:7f:bf:1d:5b:54:bb:
                    0f:78:9b:18:28:a4:02:75:e5:49:c9:76:d8:20:fe:
                    9a:d6:dc:c0:b2:aa:d4:47:54:c0:35:1d:12:02:15:
                    94:55:b9:fd:fd:e3:b1:80:8e:ef:fa:07:75:ba:1a:
                    74:7e:bc:71:ac:86:f2:5b:ee:43:53:87:b9:51:22:
                    65:db:5a:e6:93:5f:1d:28:87:67:9f:27:b5:f6:b4:
                    cb:34:8b:be:32:26:ac:b0:84:93:7b:90:2f:7e:ad:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:81:DD:16:B4:2F:75:33:B6:25:53:49:79:22:00:D3:47:DF:C9
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/f6b4b8016b48f5676f327e90475717eb52945f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:75:b8:2e:21:eb:b8:31:47:0c:6f:4c:90:19:2b:7d:77:44:
         17:17:4e:28:eb:6d:06:e7:7f:84:66:a8:9f:e4:c1:57:ec:69:
         6f:9d:ab:12:b8:89:96:cd:1f:fa:a9:df:cd:b3:be:00:dd:47:
         6f:c0:7d:cf:fe:54:cd:b4:44:92:33:01:c1:95:83:47:33:d0:
         16:5d:f6:6a:5b:a0:ef:bc:20:f5:33:98:5f:57:d4:ed:bd:ef:
         ad:98:c1:3a:0c:e0:56:50:6a:8c:e2:7e:87:a0:e7:97:13:11:
         5b:8a:77:06:37:2c:62:47:3a:10:f9:54:51:a5:d0:77:44:02:
         03:97:8a:91:58:43:d8:55:4c:ef:79:ce:af:04:0f:33:93:60:
         79:79:12:9c:b0:76:d6:38:ab:25:cf:17:6f:13:f5:87:41:7e:
         e2:59:c0:78:99:49:f4:76:f9:e7:ad:15:91:8a:47:d8:be:bb:
         cb:41:11:80:fd:ea:7c:40:7d:9f:cc:37:8e:8f:14:ed:24:0c:
         df:d3:b0:d2:0c:67:50:2c:b5:05:e2:69:91:09:98:30:0d:44:
         7a:7a:fe:ae:7b:ae:05:10:c8:01:d2:0a:0e:4a:ba:32:58:5c:
         10:d2:7a:25:df:67:aa:d6:5e:87:df:d8:b2:c1:11:27:ee:ca:
         0e:97:33:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----