Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51316fea-9ead-44a2-aca1-5c3f407cb1c2/fc61ad50ad708b6cf1935e8bd74398d641f3ad69.roa
File:                     fc61ad50ad708b6cf1935e8bd74398d641f3ad69.roa (raw, json)
Hash identifier:          U4Q3ab3G/dvpXMeu0j36jW4GpdUg08Pi8txENIsgRrc=
Subject key identifier:   6E:77:89:E0:71:75:A0:E7:58:D7:43:AC:EB:A6:A0:9D:33:F8:FE:74
Certificate issuer:       /CN=293b8e77b3018bf58efdaf1a2867a9596eb05182
Certificate serial:       1EA2
Authority key identifier: 7A:BC:62:60:C1:E0:09:DA:A4:67:70:31:54:83:91:51:46:A2:3F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/293b8e77b3018bf58efdaf1a2867a9596eb05182.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51316fea-9ead-44a2-aca1-5c3f407cb1c2/fc61ad50ad708b6cf1935e8bd74398d641f3ad69.roa
Signing time:             Wed 01 Jun 2022 20:51:36 +0000
ROA not before:           Wed 01 Jun 2022 03:00:00 +0000
ROA not after:            Tue 01 Jun 2027 03:00:00 +0000
asID:                     272800
IP address blocks:        2803:6890::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7842 (0x1ea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293b8e77b3018bf58efdaf1a2867a9596eb05182
        Validity
            Not Before: Jun  1 03:00:00 2022 GMT
            Not After : Jun  1 03:00:00 2027 GMT
        Subject: CN=fc61ad50ad708b6cf1935e8bd74398d641f3ad69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:25:c9:55:e8:4f:ce:37:c3:92:ae:24:eb:
                    d9:76:5c:98:33:5a:3d:7a:25:f2:be:07:2e:45:74:
                    7b:b1:8b:7a:e2:33:50:d9:d4:b7:e4:e9:d1:87:0e:
                    63:bd:cb:83:64:dc:8a:41:7d:f3:5f:c7:c8:ce:5c:
                    08:f5:82:2e:40:1e:2b:4f:53:a7:9b:af:ee:c7:97:
                    df:14:db:d2:61:f6:f2:0d:e4:8a:c3:b6:f3:cd:4d:
                    ca:c6:90:24:f2:a5:47:c4:73:8d:b8:5d:b9:e0:78:
                    70:e6:37:f6:d5:a4:24:e7:a9:c3:76:d4:1c:ed:1c:
                    84:c2:99:71:3b:f3:57:e3:3a:98:5d:2c:ca:fb:cf:
                    e7:f6:50:0d:20:1c:52:56:10:ab:d1:10:aa:b7:3a:
                    92:ca:c5:5e:23:c8:2b:fe:2e:d5:e8:22:1b:65:e0:
                    7c:84:d8:9c:94:6e:a8:c2:56:68:d8:96:e6:7d:9a:
                    20:e0:9a:d1:ac:32:f8:5c:2c:eb:ee:b9:99:a6:13:
                    01:4a:d9:ed:65:38:06:98:28:4d:9f:a9:d4:3d:d2:
                    7f:47:f0:a4:1f:af:82:1e:40:98:af:25:71:5e:22:
                    dd:01:0d:cc:7c:31:86:c7:ef:3d:e2:9e:9a:39:fb:
                    39:6c:22:62:8d:5b:15:1d:5e:e9:1c:b3:f9:24:63:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:77:89:E0:71:75:A0:E7:58:D7:43:AC:EB:A6:A0:9D:33:F8:FE:74
            X509v3 Authority Key Identifier:
                keyid:7A:BC:62:60:C1:E0:09:DA:A4:67:70:31:54:83:91:51:46:A2:3F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/293b8e77b3018bf58efdaf1a2867a9596eb05182.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51316fea-9ead-44a2-aca1-5c3f407cb1c2/fc61ad50ad708b6cf1935e8bd74398d641f3ad69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51316fea-9ead-44a2-aca1-5c3f407cb1c2/293b8e77b3018bf58efdaf1a2867a9596eb05182.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6890::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:dc:39:a7:29:82:9f:ad:b8:7e:b8:cf:a0:dd:4c:42:3b:
         ff:a9:11:42:3d:75:d5:d7:9b:ab:9c:e4:b1:76:6a:bc:79:89:
         11:59:99:56:0f:4f:6e:32:fe:7b:5c:9d:c9:fc:24:92:ca:3e:
         35:87:a0:99:c5:ae:0e:9b:82:fc:52:3b:93:2b:be:99:65:7f:
         ed:9d:09:73:2c:1f:d8:3e:98:28:26:0e:0b:76:a9:9c:8d:60:
         c2:85:5c:b6:82:ea:74:86:1d:98:d7:d2:00:c4:e0:e8:88:c9:
         15:b1:c7:e1:41:e4:6b:df:be:8c:ed:35:81:83:88:26:6a:5b:
         64:af:79:1c:46:99:71:a4:57:d9:45:f5:d0:c7:8c:96:15:66:
         a9:4a:b0:ce:a4:95:c3:37:2a:be:9e:8b:15:36:b9:19:93:56:
         69:ef:66:34:1c:13:b9:76:7e:77:be:c8:36:56:e0:4a:2d:0a:
         65:96:c9:80:10:54:61:05:d2:59:38:a2:ca:56:a0:59:ff:03:
         d8:5d:27:ef:f1:31:10:5e:2a:3a:8c:53:99:f5:b8:8a:85:33:
         83:16:24:26:ac:6c:68:e0:c0:dd:21:db:9b:b5:50:07:56:cd:
         d5:d4:b7:55:30:86:91:86:0f:7e:94:a5:4e:fc:e2:a6:b3:a0:
         5c:06:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----