Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d17d485-3b75-4fbc-833b-f6e9fae8eac1/95248d615e871bf686f38f64034e670ea447f27e.roa
File:                     95248d615e871bf686f38f64034e670ea447f27e.roa (raw, json)
Hash identifier:          Nhpf4gA/rydd4LOQbnuUEh7mX2n91lmTQrvH/G2eUF0=
Subject key identifier:   99:9A:C8:0B:0E:DB:6C:25:36:DD:A1:0D:23:67:4E:B5:CD:BE:E9:E2
Certificate issuer:       /CN=b8952de715f4388efeac1681f22615af1d330b02
Certificate serial:       0BD4
Authority key identifier: 8C:5F:55:1D:2E:D2:9D:29:E1:E8:A3:3F:FB:BE:AB:1C:AD:BB:25:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8952de715f4388efeac1681f22615af1d330b02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d17d485-3b75-4fbc-833b-f6e9fae8eac1/95248d615e871bf686f38f64034e670ea447f27e.roa
Signing time:             Wed 07 Sep 2022 16:13:37 +0000
ROA not before:           Wed 07 Sep 2022 16:12:28 +0000
ROA not after:            Sat 07 Sep 2024 16:12:28 +0000
asID:                     272808
IP address blocks:        2803:d890::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3028 (0xbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8952de715f4388efeac1681f22615af1d330b02
        Validity
            Not Before: Sep  7 16:12:28 2022 GMT
            Not After : Sep  7 16:12:28 2024 GMT
        Subject: CN=95248d615e871bf686f38f64034e670ea447f27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:01:64:3d:d7:5a:30:0d:e1:fd:90:53:04:
                    2e:85:4f:0c:9d:f0:e4:dd:c1:16:28:98:eb:d1:42:
                    15:76:e2:28:87:ca:1d:af:d6:2c:05:c1:17:db:f3:
                    0f:4a:04:c8:1e:e1:dd:c9:22:a0:1f:7d:93:93:93:
                    b2:91:2b:84:c0:52:75:8e:24:08:85:42:85:41:4a:
                    d6:84:89:9e:fd:d9:1b:cb:d4:e9:13:15:7c:c5:7b:
                    b0:6e:b0:a9:02:36:ba:19:5d:59:d6:6f:ba:18:9e:
                    71:89:4b:1c:fd:15:c3:91:ce:ec:b6:ed:b9:b9:f0:
                    fe:fe:04:03:12:a3:7d:4f:42:fe:aa:47:95:38:de:
                    cf:37:90:ad:7a:7f:ee:34:76:40:d8:35:54:49:4b:
                    83:65:b5:62:45:bc:cc:fa:c5:ac:1c:0b:63:ba:69:
                    fc:4d:6a:c8:28:e4:00:24:ed:58:49:20:8e:5e:2e:
                    40:37:b1:9d:1a:09:7a:29:4f:a9:e3:b4:76:87:eb:
                    ca:b9:de:ca:f5:d2:0a:e5:32:40:8f:a0:84:d1:4f:
                    40:17:3b:6f:ee:ce:1e:ed:2b:94:4e:98:aa:52:af:
                    1a:67:53:44:8e:0c:bc:ff:ac:ac:96:e0:e3:3e:11:
                    cc:b8:d1:c6:2d:4a:85:5d:fc:8a:d4:1e:02:f3:11:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9A:C8:0B:0E:DB:6C:25:36:DD:A1:0D:23:67:4E:B5:CD:BE:E9:E2
            X509v3 Authority Key Identifier:
                keyid:8C:5F:55:1D:2E:D2:9D:29:E1:E8:A3:3F:FB:BE:AB:1C:AD:BB:25:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8952de715f4388efeac1681f22615af1d330b02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d17d485-3b75-4fbc-833b-f6e9fae8eac1/95248d615e871bf686f38f64034e670ea447f27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d17d485-3b75-4fbc-833b-f6e9fae8eac1/b8952de715f4388efeac1681f22615af1d330b02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d890::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:d2:a8:bf:a5:9e:7d:cd:6b:eb:0a:a8:e0:82:fc:33:d6:
         f3:49:46:cd:2d:ad:4b:0f:99:fb:c0:1b:24:ca:42:9e:fc:a0:
         ed:c1:32:96:a4:95:44:f2:cb:b8:9f:8b:bb:2c:40:76:50:c5:
         13:de:55:50:b0:9c:ae:6a:74:7d:2a:dc:13:bb:ec:f7:84:4d:
         89:bf:00:70:6f:ec:1b:e7:6a:df:c0:75:65:cf:c9:e8:7b:c6:
         7f:35:40:9f:52:d8:ad:81:93:63:61:8a:da:35:b9:fb:91:29:
         6f:76:de:35:b6:6e:6d:17:de:d0:25:da:40:df:2d:46:76:27:
         61:37:a6:50:52:3b:a2:d1:95:24:f4:ff:47:b6:94:a2:9a:c7:
         d7:03:c0:db:08:ae:3d:15:1c:0d:dc:a6:65:c9:99:23:0e:a7:
         dd:26:53:be:47:2f:ec:9c:2f:ed:64:f6:33:d1:9d:f2:a4:52:
         8a:13:33:92:1a:d1:57:f3:fe:88:8a:1c:40:b9:28:80:63:3b:
         e4:01:78:24:bc:d4:e6:a5:69:4e:81:fb:09:2c:fd:3d:60:83:
         20:ae:35:8c:c4:71:ca:06:14:b8:75:f2:04:af:96:ca:cc:61:
         ef:3a:76:94:d5:37:b1:03:ae:85:3b:70:ee:79:95:9c:6a:c0:
         e4:01:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----