Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/1a699d959f2e22ae7a344f934c52292fef1af06e.roa
File:                     1a699d959f2e22ae7a344f934c52292fef1af06e.roa (raw, json)
Hash identifier:          rpQ2z5XaVm3bPd4t6rtQwQXXuw1Nmu8d4UHqM9vUkAs=
Subject key identifier:   B5:6D:26:86:17:AC:45:57:84:36:F6:19:3D:64:66:30:16:A8:CE:DD
Certificate issuer:       /CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
Certificate serial:       177157
Authority key identifier: 35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/1a699d959f2e22ae7a344f934c52292fef1af06e.roa
Signing time:             Thu 26 May 2022 20:08:57 +0000
ROA not before:           Thu 26 May 2022 03:00:00 +0000
ROA not after:            Fri 26 May 2023 03:00:00 +0000
asID:                     26210
IP address blocks:        2800:88:11::/48 maxlen: 48
                          2800:88:12::/48 maxlen: 48
                          2800:88:13::/48 maxlen: 48
                          2800:88:1a00::/40 maxlen: 48
                          2800:88:1b00::/40 maxlen: 48
                          2800:88:40::/48 maxlen: 48
                          2800:88:d::/48 maxlen: 48
                          2800:88:e::/48 maxlen: 48
                          2800:88:f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536343 (0x177157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be51756b3d6021dd6ee3d4415280c6f6b7603b86
        Validity
            Not Before: May 26 03:00:00 2022 GMT
            Not After : May 26 03:00:00 2023 GMT
        Subject: CN=1a699d959f2e22ae7a344f934c52292fef1af06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:07:71:58:ab:46:ee:13:cb:cf:d5:08:c0:2d:
                    bf:e6:3b:cc:0d:2c:20:9a:a6:d3:f4:7e:62:af:24:
                    ab:f6:ee:da:60:33:05:92:78:d3:b5:93:e7:00:ab:
                    a2:2d:a5:0f:6c:1d:d9:a7:24:30:ee:90:03:b0:44:
                    a9:d7:c6:a4:db:c2:16:b6:23:a1:77:fe:94:c0:0f:
                    0b:44:32:d7:14:62:bc:fc:ec:31:18:16:fc:09:66:
                    b4:a0:ab:32:70:6d:ac:3a:8a:7a:e2:34:00:63:70:
                    f2:ca:e3:f5:60:b0:51:83:ae:b3:b6:7f:b2:1e:33:
                    f6:f7:4b:dd:67:b3:21:6f:2a:6f:df:c6:b9:ad:a4:
                    95:bb:12:b5:90:7c:af:07:08:fe:55:2d:60:d5:e0:
                    2f:96:17:e2:d7:70:b0:90:19:d9:b5:df:21:fa:5c:
                    59:24:f9:50:50:f7:f2:e5:ac:fd:be:d6:b4:b4:c9:
                    81:0c:9c:4e:63:22:bb:02:65:c4:60:36:a4:7b:51:
                    c4:fd:79:2d:83:dc:49:e7:eb:94:88:06:ba:73:fc:
                    1a:bc:65:ca:7e:56:1a:8e:35:a4:b1:61:55:73:d9:
                    8c:c0:6f:a7:6a:e9:90:4a:7a:98:06:7c:bb:2f:6d:
                    d0:a7:81:55:ce:89:bc:ea:db:af:2a:33:72:8f:7b:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:26:86:17:AC:45:57:84:36:F6:19:3D:64:66:30:16:A8:CE:DD
            X509v3 Authority Key Identifier:
                keyid:35:6D:53:5D:FD:D9:D4:E5:17:B8:33:65:3F:CF:A6:4E:19:BA:71:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be51756b3d6021dd6ee3d4415280c6f6b7603b86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/1a699d959f2e22ae7a344f934c52292fef1af06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567ffa7f-ee3e-4e9b-b639-ba4c0489116d/be51756b3d6021dd6ee3d4415280c6f6b7603b86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:d::-2800:88:f:ffff:ffff:ffff:ffff:ffff
                  2800:88:11::-2800:88:13:ffff:ffff:ffff:ffff:ffff
                  2800:88:40::/48
                  2800:88:1a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:fd:60:5b:0f:d3:85:9a:a6:63:04:f0:97:2b:64:3b:17:
         8e:bc:10:3e:c7:45:21:41:cf:d9:a6:fd:e5:04:f4:2b:95:64:
         bc:44:2c:cf:75:7c:10:a0:39:8d:fa:27:aa:f5:b2:15:42:1f:
         33:4f:60:4c:f0:18:78:13:4a:a4:01:17:ce:a5:5c:a0:8f:82:
         de:1c:23:1a:1e:cf:55:12:63:12:fe:f9:ce:a0:bf:48:f9:31:
         f4:cc:8b:30:27:fa:f2:fb:60:92:5a:a3:bf:a7:76:46:57:43:
         69:47:2e:a9:f4:81:36:9f:bf:3c:95:30:89:97:dd:77:49:55:
         a9:9f:0a:ee:56:a1:f3:52:df:27:42:c5:e3:a1:0f:04:33:fe:
         f3:ac:d0:27:cb:49:69:98:9d:56:da:b3:fa:88:c7:8f:97:e0:
         37:22:22:69:05:dd:24:bf:68:df:1e:be:43:a1:00:5c:a1:10:
         aa:6c:d1:6c:6b:6e:30:78:34:57:58:5f:69:48:67:67:18:71:
         88:b3:b4:d6:0c:08:fe:e2:ca:bc:df:7d:4f:cc:5e:34:4c:7c:
         84:1c:38:67:69:2d:8d:3a:47:81:81:30:ba:18:ea:47:ca:8e:
         8a:71:df:fa:5e:05:6d:11:ab:d4:e9:08:2a:4c:97:38:43:ab:
         76:9e:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----