Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/67e7607010dad7c4db6b14ae2da0a3989703a049.roa
File:                     67e7607010dad7c4db6b14ae2da0a3989703a049.roa (raw, json)
Hash identifier:          QzBpkTCCi3rzfwRKCQuGxu8CgHOV9K8uIePnrup/2Gg=
Subject key identifier:   46:43:52:B9:FC:F2:66:D6:EB:CE:21:D2:7B:0A:7B:72:AC:DC:BA:27
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1CD57D
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/67e7607010dad7c4db6b14ae2da0a3989703a049.roa
Signing time:             Mon 05 Dec 2022 16:05:39 +0000
ROA not before:           Sun 04 Dec 2022 16:04:59 +0000
ROA not after:            Thu 05 Dec 2024 16:04:59 +0000
asID:                     263195
IP address blocks:        2803:ac80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889661 (0x1cd57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Dec  4 16:04:59 2022 GMT
            Not After : Dec  5 16:04:59 2024 GMT
        Subject: CN=67e7607010dad7c4db6b14ae2da0a3989703a049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:f5:e4:8a:67:c7:9e:a4:b0:a9:a5:e9:a4:
                    3b:87:49:ef:01:5e:e3:fc:76:91:3e:64:c4:f7:62:
                    2a:0f:32:0b:88:76:71:70:c5:7c:61:3e:50:fb:df:
                    e2:f6:28:55:69:b3:0c:df:4f:5c:36:a3:cd:b6:4a:
                    34:ca:63:bb:f3:01:67:65:43:ea:89:97:85:43:f2:
                    84:1e:52:3a:6a:b2:23:84:d3:c2:6e:47:e6:44:66:
                    64:38:6b:b8:58:eb:09:f2:18:2c:7b:c7:8f:39:86:
                    a1:d9:79:23:eb:84:03:d2:35:ea:07:6a:c9:98:d7:
                    73:1e:0d:56:0c:5a:0c:6b:36:f0:e7:b6:9d:f7:b4:
                    c6:d5:05:2a:92:b2:cb:30:21:54:d8:8d:4a:1e:38:
                    63:be:b4:eb:57:e5:14:d0:d4:2e:98:8d:a0:50:5e:
                    d2:72:29:d5:58:2c:83:8d:48:89:23:d9:f8:77:2f:
                    46:65:73:b4:2d:ae:91:13:09:af:27:f9:74:f5:50:
                    e8:fc:bf:2f:fa:34:f8:60:df:6e:c8:58:44:95:72:
                    eb:cf:5e:3c:0d:df:1a:9d:43:b3:60:77:69:ee:4d:
                    6a:e3:ef:66:31:46:44:51:15:6f:d8:51:b7:a5:49:
                    31:35:7b:84:f5:59:17:44:c2:a8:2b:b8:5f:4f:83:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:43:52:B9:FC:F2:66:D6:EB:CE:21:D2:7B:0A:7B:72:AC:DC:BA:27
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/67e7607010dad7c4db6b14ae2da0a3989703a049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:61:8b:54:6b:1c:26:76:c8:ee:ff:e8:bc:4f:c1:15:10:
         4f:61:10:45:7d:48:02:42:2c:06:87:0c:39:db:31:d9:25:3e:
         84:65:24:c2:32:c4:21:c0:98:f6:ee:74:5e:d1:55:a4:29:aa:
         10:9f:ea:40:45:16:47:a7:6d:5f:ee:62:dd:bf:59:9f:2c:f1:
         64:81:84:a6:0e:b2:b9:35:a3:70:8c:ee:05:cd:40:ef:84:fd:
         95:21:ba:e9:ff:82:af:74:8b:e3:64:cf:7a:35:3b:20:aa:a6:
         d7:7d:9e:a6:bf:a1:62:e9:f5:55:33:95:2f:b6:07:20:7f:38:
         af:78:01:54:5b:61:03:aa:d0:9d:24:b3:c5:2c:d3:67:c1:06:
         e1:f4:b4:68:bf:0a:46:f1:5b:42:22:d5:33:2b:93:44:47:47:
         ea:6f:21:c2:75:e1:35:07:36:30:49:1e:fc:d2:71:58:46:ad:
         89:85:86:77:d9:a2:5b:85:0a:4c:8d:07:ad:e8:93:7f:d1:06:
         bb:4c:23:d8:3d:4f:47:91:63:78:77:b7:f3:52:65:4d:ca:ce:
         f6:cf:65:46:7f:9f:36:9e:90:b7:b6:cd:1c:2e:f9:58:b9:45:
         37:9d:02:e4:61:31:13:d1:43:ac:28:22:70:f0:2c:a9:bb:6e:
         24:9b:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----