Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/f0216e80737f508a697ed54177003b6396defe01.roa
File:                     f0216e80737f508a697ed54177003b6396defe01.roa (raw, json)
Hash identifier:          T3bAGkGixylIIGlCBvQGTGjtWSaHYCZ5V/h7Pm3kMZs=
Subject key identifier:   F6:2E:8F:03:F3:08:60:3B:9A:E6:33:B0:88:79:CE:4B:30:5F:66:43
Certificate issuer:       /CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
Certificate serial:       158B1F
Authority key identifier: C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/f0216e80737f508a697ed54177003b6396defe01.roa
Signing time:             Fri 04 Feb 2022 00:30:18 +0000
ROA not before:           Thu 03 Feb 2022 03:00:00 +0000
ROA not after:            Sat 03 Feb 2024 03:00:00 +0000
asID:                     265724
IP address blocks:        2803:9dc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411871 (0x158b1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Validity
            Not Before: Feb  3 03:00:00 2022 GMT
            Not After : Feb  3 03:00:00 2024 GMT
        Subject: CN=f0216e80737f508a697ed54177003b6396defe01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:5c:1f:11:43:8f:06:10:a8:6a:2c:22:be:
                    09:de:06:ad:f0:b7:db:c0:7d:39:61:87:1d:3b:3c:
                    d4:e5:65:12:54:d1:d9:a7:18:43:81:ba:96:36:66:
                    76:f6:69:24:2b:94:c5:80:c2:ff:33:68:5b:ce:85:
                    fd:57:9f:b0:e4:42:e4:44:51:70:ad:b0:0d:1d:ce:
                    81:a6:68:bf:92:60:f5:75:16:b0:83:1b:72:95:62:
                    ee:09:9b:1a:75:19:33:60:a5:aa:a4:0d:a9:0e:bd:
                    64:23:47:e0:d1:14:fc:bd:c9:b1:b4:50:37:0a:73:
                    d7:a5:a1:04:3e:70:58:8b:84:ee:87:24:81:4d:c7:
                    53:81:cc:0a:86:b3:cd:74:13:5d:21:1c:56:63:c3:
                    4b:59:0b:ca:1c:30:2c:1a:46:4b:c2:8e:72:79:61:
                    1c:8c:61:73:5d:1e:a9:89:b4:0a:9f:bd:8a:14:84:
                    71:c9:15:76:cd:f8:33:fa:e7:7d:1d:3e:7c:53:5a:
                    52:d8:aa:eb:3e:0a:86:ab:0f:59:ea:75:2c:64:6e:
                    d0:54:4c:46:60:fc:4c:09:b9:0e:59:8c:98:46:62:
                    fa:e9:5c:6c:56:9f:91:04:45:a8:32:d9:66:e2:e3:
                    a6:3d:c2:cf:b3:2e:97:c1:26:6d:88:d4:83:f2:0e:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:8F:03:F3:08:60:3B:9A:E6:33:B0:88:79:CE:4B:30:5F:66:43
            X509v3 Authority Key Identifier:
                keyid:C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/f0216e80737f508a697ed54177003b6396defe01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:be:2c:0a:9f:f6:e4:63:b4:92:e5:fe:87:7f:61:93:81:fc:
         30:99:5b:46:de:b7:3c:fa:13:27:6a:cf:79:6a:29:76:6c:24:
         9d:21:21:6a:3a:c0:ec:92:f5:06:04:92:8c:45:f0:da:de:3f:
         b2:cf:40:c2:f5:28:fc:9d:93:a3:32:e7:69:54:b5:c1:03:70:
         27:2c:d7:0e:44:ba:2a:61:68:bf:f3:c5:2b:15:0c:5c:33:4d:
         c0:a2:87:5b:e6:11:5b:c3:df:62:6d:78:b1:47:21:48:e5:ef:
         5a:f2:0d:ee:1e:ba:e9:be:d1:d5:fd:18:e7:a7:c8:3f:7d:cb:
         5d:52:a1:05:f6:f2:05:87:33:88:c4:2d:ee:de:4f:1e:86:4d:
         b3:bf:b9:82:da:2e:0c:8d:ea:45:c0:91:ab:e0:2c:33:a4:46:
         45:eb:a5:3c:13:d1:4d:f4:d6:85:91:28:37:88:dc:f4:8c:7f:
         69:de:f5:1e:4e:a8:ca:85:c8:2b:ec:9f:60:d1:51:cf:d0:3f:
         77:e8:bd:f0:3c:fe:b4:de:32:a3:a5:00:e0:8a:3b:49:a8:bb:
         9e:bf:db:dc:69:f7:2c:b8:ee:48:f0:3c:3b:96:78:4f:2c:f1:
         a6:bd:29:80:b1:6c:6a:bc:ee:50:0b:11:96:8e:e9:ce:9a:22:
         71:94:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----