Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/929172483f2c31c67b4a2a02cbd635961592add5.roa
File:                     929172483f2c31c67b4a2a02cbd635961592add5.roa (raw, json)
Hash identifier:          rsdAcfKVGJBPwo5fX3OxtX2X1ZEjWWZT6eSvaH8HOu0=
Subject key identifier:   81:94:C3:2C:87:7E:BD:B0:47:91:FB:CC:F9:03:1C:96:65:EB:03:C3
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       11047F
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/929172483f2c31c67b4a2a02cbd635961592add5.roa
Signing time:             Fri 27 May 2022 19:53:36 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Mon 27 May 2024 03:00:00 +0000
asID:                     64130
IP address blocks:        2803:b0e0:997a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115263 (0x11047f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2024 GMT
        Subject: CN=929172483f2c31c67b4a2a02cbd635961592add5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:0b:0a:96:68:8d:e0:5c:28:a0:55:ee:2d:
                    8b:7b:0f:34:5e:7e:50:0e:dd:7e:01:71:a7:ef:f6:
                    69:2b:57:6b:bb:a2:b6:7c:bf:d9:e5:15:8d:72:6c:
                    17:04:d0:04:7d:a0:29:72:50:57:4e:c7:34:d6:ce:
                    48:d4:f5:5a:d9:34:8e:0f:96:59:eb:f5:3e:2b:25:
                    65:e8:df:df:08:62:46:bd:f7:78:5a:b3:c1:e4:5e:
                    f0:d6:cf:5c:56:80:8e:0a:c4:f9:cb:22:64:a6:1f:
                    5e:c1:ef:67:3e:53:32:dd:77:d4:e4:b1:c1:1b:19:
                    97:cc:54:7c:4c:dc:54:99:a6:ae:0f:71:4e:be:79:
                    09:b2:31:20:bd:8b:45:d1:16:c4:16:8a:62:b8:f4:
                    fc:aa:30:28:07:e2:ae:eb:17:58:d2:bf:2a:9c:dc:
                    2a:86:1f:d9:3d:74:01:e3:3f:1a:46:e2:f9:f6:c5:
                    01:31:44:23:60:dc:ba:8c:4d:24:fb:12:e1:87:97:
                    c3:6e:59:d4:f2:69:c0:25:76:1d:68:15:ec:45:8e:
                    db:d5:03:0c:61:8a:5a:d8:0f:39:50:3b:e7:6d:5f:
                    b0:af:c1:cb:86:33:84:13:a1:ab:97:fa:f9:a0:e1:
                    a2:dc:0b:5e:01:f7:0e:df:18:b8:05:8f:dc:e5:76:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:94:C3:2C:87:7E:BD:B0:47:91:FB:CC:F9:03:1C:96:65:EB:03:C3
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/929172483f2c31c67b4a2a02cbd635961592add5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:997a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:d7:35:db:38:e4:58:3d:00:68:a8:56:31:98:56:fc:bf:
         a3:74:74:56:7d:0b:78:02:44:15:90:f8:16:57:75:00:e4:08:
         34:2d:b6:e5:a6:96:df:cb:ce:fd:49:17:58:23:55:7b:52:0b:
         c5:e2:60:ec:80:f3:95:c4:3c:bf:77:38:f7:73:f7:58:ab:62:
         97:41:fa:01:e3:40:94:c6:e2:e8:39:8d:5c:6a:c7:b8:d8:d7:
         97:d3:13:ab:2d:bf:00:4b:6b:c4:e7:fb:88:6a:e6:a3:08:02:
         bf:d1:40:5c:c6:b1:01:14:d6:30:29:69:56:ca:64:ff:dc:41:
         86:e3:0a:c5:20:1a:fe:87:73:4d:16:3a:6a:c4:fc:64:01:5a:
         19:6a:9c:85:00:29:2d:1c:dc:8d:0a:01:1a:23:b1:c6:1a:a0:
         8c:93:5e:af:bd:7c:73:82:b8:f9:10:b5:d4:99:9a:22:59:9a:
         db:a8:ca:71:29:22:fd:97:9f:c8:ce:57:9c:83:51:aa:1b:da:
         54:dd:b5:9a:74:18:55:0c:dc:47:30:22:a8:ee:b1:9b:c4:89:
         4a:fd:06:5c:b2:c8:4f:c9:7f:42:6d:a0:60:fc:a1:0d:7a:44:
         70:ba:1f:56:fa:59:d2:db:75:e1:a8:ec:3b:92:a3:c6:f4:7c:
         eb:6f:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----