Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/164ccceeab3704b8a737a1485dc721077c376a77.roa
File:                     164ccceeab3704b8a737a1485dc721077c376a77.roa (raw, json)
Hash identifier:          w2Pd9aQy68rWgs59Qsjt6tA4/KLBManSR9IWCp6MDRo=
Subject key identifier:   78:17:A5:65:14:63:A4:3C:7B:F1:4B:76:FB:74:C7:60:54:07:50:D3
Certificate issuer:       /CN=3c9d5cf2a0b729fc7f0dad085e5abae19691a64a
Certificate serial:       05AB
Authority key identifier: D3:4D:EA:56:DF:A5:B9:FE:A9:C2:51:7E:83:BB:9F:67:7F:42:23:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/164ccceeab3704b8a737a1485dc721077c376a77.roa
Signing time:             Thu 21 Jul 2022 23:07:34 +0000
ROA not before:           Thu 21 Jul 2022 03:00:00 +0000
ROA not after:            Sun 21 Jul 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        2801:19:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9d5cf2a0b729fc7f0dad085e5abae19691a64a
        Validity
            Not Before: Jul 21 03:00:00 2022 GMT
            Not After : Jul 21 03:00:00 2024 GMT
        Subject: CN=164ccceeab3704b8a737a1485dc721077c376a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:bf:59:c1:db:63:c3:54:95:ef:0c:34:20:
                    aa:65:40:b9:e3:42:e0:c4:ae:65:46:87:d6:5a:7c:
                    66:f3:46:dc:ce:57:17:ce:9d:de:f4:8f:8b:37:67:
                    b6:b9:73:c0:69:a6:60:2b:d4:50:3e:1e:78:ad:20:
                    4b:18:50:95:19:93:77:63:59:43:72:02:19:e5:c8:
                    d6:e9:7a:02:ff:e3:c1:8f:4c:f7:2b:b5:4d:1d:d3:
                    28:9b:04:8d:ca:30:3a:9e:bd:ef:eb:5b:6c:83:5d:
                    d2:0c:0f:22:7a:97:c1:79:25:21:f1:41:ed:c8:3f:
                    0e:cc:ac:5e:fe:32:b8:6c:c1:97:bc:ec:8a:f8:02:
                    cf:33:e9:3a:d6:cf:48:9f:6a:90:e6:15:54:94:66:
                    4f:57:20:99:7b:a4:a6:60:10:71:3d:1b:95:f1:ce:
                    fb:e5:9c:49:ad:5d:18:1c:95:75:b7:66:82:ef:99:
                    05:f1:de:0e:da:fa:f6:9c:5b:67:3b:c1:41:c3:d6:
                    6f:67:7e:6c:0b:54:33:75:cc:f1:59:06:01:43:40:
                    84:35:5f:1d:4b:f7:3c:db:53:78:e1:3e:e7:c7:0f:
                    69:6f:44:fd:85:63:fb:e1:33:ba:64:d9:de:67:40:
                    3d:d8:d4:da:a1:d6:03:43:08:17:44:cb:ae:c7:55:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:17:A5:65:14:63:A4:3C:7B:F1:4B:76:FB:74:C7:60:54:07:50:D3
            X509v3 Authority Key Identifier:
                keyid:D3:4D:EA:56:DF:A5:B9:FE:A9:C2:51:7E:83:BB:9F:67:7F:42:23:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/164ccceeab3704b8a737a1485dc721077c376a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:c8:f7:9c:e3:79:9b:cf:fb:e8:89:2c:b2:4b:3d:30:7b:61:
         03:eb:b9:61:d6:1c:d5:6a:21:ea:fe:ef:2a:a7:e2:a1:91:f1:
         da:a5:78:3e:e8:de:b8:2d:14:df:12:f3:6d:ec:4d:c5:63:c5:
         22:92:12:9d:56:d9:dd:65:3f:8a:4a:08:1a:e6:f9:97:9e:4e:
         8a:97:1d:62:74:3d:31:c5:4a:e9:a9:46:95:dc:9b:fa:54:77:
         de:d9:13:af:62:98:bc:a3:b1:39:6a:1b:9e:81:09:e8:7b:6a:
         9e:e5:7a:4b:92:ed:4d:84:28:37:00:b5:3f:4b:d6:8b:9e:f7:
         0b:4e:62:8d:36:41:94:22:39:94:6a:33:a7:df:dd:e1:90:3b:
         bf:30:79:4c:31:ab:a9:b4:66:f2:bc:70:f1:85:f8:64:8f:3c:
         b5:e8:b5:b4:ad:eb:5e:5c:85:a1:22:19:f7:17:e0:02:db:cb:
         e6:1e:01:97:a4:ea:e1:aa:9c:d2:e3:e5:06:64:b9:35:0d:27:
         2d:fd:d4:a8:9e:bd:88:c8:e4:45:92:60:a7:97:3d:fc:ce:be:
         e7:ef:47:62:cc:30:de:1e:1e:59:7b:18:83:16:1d:27:6f:c0:
         2c:33:db:b7:cb:f2:fd:77:f2:ea:d1:5a:fd:4a:1b:83:58:22:
         40:40:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----