Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/d62a1ad4e98be00f619af2742f7e99554c26a697.roa
File:                     d62a1ad4e98be00f619af2742f7e99554c26a697.roa (raw, json)
Hash identifier:          /6vrkvrohCRqzw1KONVMlAQYlSLh4yklLhgMn8qlyHM=
Subject key identifier:   11:65:BF:55:48:CA:92:6E:74:97:9B:F4:7D:26:26:0A:DA:69:40:45
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       163A14
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/d62a1ad4e98be00f619af2742f7e99554c26a697.roa
Signing time:             Fri 16 Dec 2022 21:06:50 +0000
ROA not before:           Thu 15 Dec 2022 21:06:31 +0000
ROA not after:            Mon 16 Dec 2024 21:06:31 +0000
asID:                     271842
IP address blocks:        2803:b0e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456660 (0x163a14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Dec 15 21:06:31 2022 GMT
            Not After : Dec 16 21:06:31 2024 GMT
        Subject: CN=d62a1ad4e98be00f619af2742f7e99554c26a697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:a0:ae:b6:b9:04:c6:e9:bd:68:d8:7b:a4:
                    47:3b:d7:2c:e8:71:4e:6f:25:d1:21:21:83:25:76:
                    94:9b:07:17:39:f2:8b:07:37:3e:66:94:3a:8d:d9:
                    fe:06:12:8e:ab:6e:39:f5:24:a9:d7:72:22:cb:30:
                    b3:ad:89:ef:52:bb:c5:5d:93:eb:55:eb:a2:7b:46:
                    3d:68:06:b3:22:4e:e2:41:b1:49:6a:f7:c2:55:72:
                    4c:21:2a:2e:1c:f3:a1:f6:11:8e:c4:c6:4a:47:b9:
                    4c:81:db:9a:e9:dc:08:b1:3e:8a:4f:49:1b:93:47:
                    04:73:85:9d:6a:fb:0b:e2:ee:e3:4d:79:fa:44:cd:
                    7a:34:7a:92:39:4b:f9:05:40:02:92:eb:91:63:b6:
                    e6:78:ae:fc:11:63:db:bf:74:e3:a0:ed:c9:4e:5e:
                    38:35:61:87:48:b2:e4:76:0c:0b:25:ef:93:79:e9:
                    1f:57:f8:c5:5f:3d:be:3a:47:b0:c1:65:1f:f3:68:
                    40:0b:b8:30:02:d4:b3:c2:7d:8d:bb:0d:4a:30:12:
                    5d:29:d4:b3:85:82:4e:d6:7c:ba:52:c4:a5:fd:6d:
                    15:79:0a:6e:3a:2f:61:e2:a1:3c:8c:78:a1:d1:e0:
                    10:9e:a0:ad:3c:13:03:d5:11:65:8d:ef:18:56:11:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:65:BF:55:48:CA:92:6E:74:97:9B:F4:7D:26:26:0A:DA:69:40:45
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/d62a1ad4e98be00f619af2742f7e99554c26a697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:34:01:27:6b:c8:6f:5a:fb:44:b5:d7:d1:d2:89:fb:41:
         87:fa:2f:d3:d8:ed:df:f1:5f:76:41:f6:2f:dc:37:18:64:18:
         56:97:f9:1f:44:27:9c:29:0a:5f:76:df:d2:34:79:f6:65:42:
         67:a5:0e:74:46:03:3e:44:b9:5c:59:21:55:f9:16:ed:ec:55:
         1f:45:b8:78:76:7c:6f:1f:9d:01:9f:22:21:28:ef:60:3f:36:
         e8:06:0e:df:b0:fc:50:ab:56:41:a2:d2:e3:5e:e3:ff:40:bb:
         ee:74:bb:79:a5:b2:c9:88:e2:53:20:14:78:4a:c4:19:8e:56:
         fa:24:06:f2:8f:aa:e8:36:1d:a7:1d:bb:80:01:6e:a8:88:e4:
         dc:db:4a:a8:77:22:58:fd:6f:ba:f4:6d:a8:b6:54:3c:21:b8:
         d1:3d:b9:c4:9f:0c:56:e1:57:65:47:a7:9a:60:f5:e7:fc:c0:
         ee:dc:9e:2d:8a:cb:66:99:e7:b9:a2:32:ae:f5:1b:a1:28:a2:
         ed:60:5a:7a:ba:f1:1d:79:43:b8:76:53:87:81:13:33:a6:a0:
         1b:14:48:35:03:75:b7:68:26:fb:2f:c6:0c:8e:e6:07:a7:65:
         dd:1c:b6:bd:45:6e:68:c3:b0:f3:86:28:22:dd:c5:76:ad:22:
         f7:ef:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----