Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/9715bbc73d7b9572ec532708164fe4209761d00b.roa
File:                     9715bbc73d7b9572ec532708164fe4209761d00b.roa (raw, json)
Hash identifier:          ZPoTQGhg47RWi4L8QQ7462eoP2igCwbFnLHeGbNIiac=
Subject key identifier:   13:F1:40:16:04:36:D8:85:B2:C2:94:8D:B6:98:FD:1C:61:91:1C:57
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       0D66E5
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/9715bbc73d7b9572ec532708164fe4209761d00b.roa
Signing time:             Sat 01 Jan 2022 17:48:19 +0000
ROA not before:           Sat 01 Jan 2022 03:00:00 +0000
ROA not after:            Sun 01 Jan 2023 03:00:00 +0000
asID:                     269862
IP address blocks:        2803:b0e0:9984::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878309 (0xd66e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Jan  1 03:00:00 2022 GMT
            Not After : Jan  1 03:00:00 2023 GMT
        Subject: CN=9715bbc73d7b9572ec532708164fe4209761d00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:96:02:6d:a1:53:15:ee:72:88:c9:35:dc:
                    23:ce:9f:09:57:66:e3:f5:6e:44:56:4d:35:06:22:
                    e9:f0:2b:b2:e2:ef:1f:79:ef:19:f7:74:78:a2:43:
                    32:fa:b2:df:e4:1a:fd:79:16:d1:d8:b5:dd:dd:a0:
                    6e:22:d6:f4:a5:d1:83:29:25:92:4f:fe:ff:6c:07:
                    60:fe:0d:68:4f:70:8d:7f:fa:a8:6b:6d:e5:20:f6:
                    e4:0f:d3:bf:b3:8c:33:31:65:72:cf:16:9f:e9:72:
                    7f:d8:1a:00:82:97:fc:10:85:97:90:13:ba:dc:1d:
                    85:3f:ff:53:5e:a1:c4:28:9d:5b:2a:2b:b3:f9:a9:
                    db:05:27:c8:4a:78:cb:92:ac:d2:0c:03:b4:cd:f1:
                    06:e2:ed:ab:c4:3e:7d:b1:9b:f8:9c:f6:19:6d:54:
                    dd:3c:5a:a2:7d:b9:34:e4:1e:79:6c:a5:19:b1:af:
                    6d:37:0e:cb:7f:f9:d0:ea:78:02:8c:c6:f0:b7:c2:
                    9b:44:5f:7e:3c:23:d8:db:5d:bc:94:53:52:82:05:
                    fc:46:7b:c3:17:e9:7f:a2:28:53:e1:c5:47:d4:81:
                    9b:15:ae:6b:e0:8e:af:bc:32:1d:a2:1e:94:db:68:
                    d7:9a:35:50:8b:7d:34:c9:24:eb:fa:d1:d1:24:42:
                    fd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:40:16:04:36:D8:85:B2:C2:94:8D:B6:98:FD:1C:61:91:1C:57
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/9715bbc73d7b9572ec532708164fe4209761d00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9984::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:78:e2:fc:a2:6e:21:64:9f:d8:c8:ae:6b:20:1f:07:21:e3:
         8c:60:c8:31:8d:7b:ae:47:fb:97:ad:ae:c4:5c:5a:33:d1:ba:
         54:8c:55:9c:f0:57:23:b8:fb:37:46:79:0d:7c:b1:08:57:d2:
         94:e3:a3:0b:51:7c:c9:6b:2f:d8:69:1a:bf:3a:5a:88:b8:a5:
         89:26:96:5e:15:bd:db:ca:96:c7:91:2d:13:ff:f3:23:55:af:
         9b:31:bb:eb:72:41:e5:f9:d1:eb:75:97:8d:dc:88:84:4a:c0:
         bc:47:e4:a5:d7:16:9d:b0:9b:f7:ad:2d:78:ee:96:43:36:3b:
         09:7d:b2:c7:f2:3c:ec:84:9b:14:ad:54:d0:1c:3b:12:be:46:
         83:0d:ac:c6:40:f7:25:82:4a:96:9d:e1:98:5b:0a:c4:e4:dd:
         a7:64:38:71:47:b8:93:50:2f:bb:34:9b:42:1a:3e:3f:0b:a0:
         65:5d:ad:38:7f:0d:a0:9b:02:d7:6e:30:f1:6b:00:16:67:a0:
         6c:e2:05:13:b8:ec:aa:1c:8d:c5:2a:21:3d:be:dc:1e:6c:d2:
         68:1e:5d:e1:94:a9:0c:1d:0a:b6:9d:e2:28:de:ca:2b:a0:62:
         9d:f8:0e:eb:f4:e4:c4:05:16:09:9c:ea:87:c9:93:0d:f4:93:
         c7:10:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----