Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/73b0d7d322a445bc638f4a66491aab01cdedc151.roa
File:                     73b0d7d322a445bc638f4a66491aab01cdedc151.roa (raw, json)
Hash identifier:          1ELRB72eQKY8U7QugvDo31vjEekxHoC8CVQ4SJy3L3w=
Subject key identifier:   86:BA:71:59:26:A5:E2:B9:AD:C5:41:EC:87:D2:D0:14:F2:12:F0:5E
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1CD0D3
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/73b0d7d322a445bc638f4a66491aab01cdedc151.roa
Signing time:             Mon 05 Dec 2022 15:56:45 +0000
ROA not before:           Sun 04 Dec 2022 15:56:17 +0000
ROA not after:            Thu 05 Dec 2024 15:56:17 +0000
asID:                     263195
IP address blocks:        2803:ac80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888467 (0x1cd0d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Dec  4 15:56:17 2022 GMT
            Not After : Dec  5 15:56:17 2024 GMT
        Subject: CN=73b0d7d322a445bc638f4a66491aab01cdedc151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:b2:71:52:5f:46:ed:5f:e5:ca:a5:ac:fb:
                    c3:08:dd:cc:bf:47:10:a1:32:36:76:fd:a2:32:48:
                    87:87:07:d7:d5:f1:24:1b:36:85:65:c0:da:7f:7f:
                    65:a0:c3:3c:c6:dd:fe:ed:cd:64:44:6d:a6:44:0c:
                    b5:53:ed:36:bb:94:9c:a5:15:78:5b:e7:2d:8b:7f:
                    bd:df:ed:7f:1e:e0:af:1a:1f:a3:1d:39:ac:fa:8d:
                    e1:ef:9b:d4:e2:04:57:b5:27:de:4d:c7:62:e9:45:
                    aa:6a:30:56:70:1a:61:8a:65:50:71:04:42:15:7e:
                    a6:ac:d3:2b:2d:41:fe:d9:c3:c0:d8:55:16:aa:83:
                    0d:a3:5e:f6:e5:9a:42:8b:07:82:1f:34:1c:81:79:
                    59:6c:33:48:99:53:a6:a8:a6:fa:0d:6b:64:83:ef:
                    b7:ca:6a:77:fe:38:26:fb:ed:d2:16:e7:9b:35:e2:
                    11:12:d4:81:9f:d7:d9:34:60:5b:22:40:d4:e1:ec:
                    fd:54:d0:0f:9e:e2:15:57:47:c4:9c:9e:51:2c:de:
                    52:61:16:44:fd:2a:b7:75:92:2a:c5:24:9f:0f:36:
                    5d:d4:8d:92:c9:51:e5:4e:58:9a:c1:3d:7e:69:88:
                    93:94:ad:ee:30:da:4a:2c:2e:a5:c1:c4:37:43:11:
                    38:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BA:71:59:26:A5:E2:B9:AD:C5:41:EC:87:D2:D0:14:F2:12:F0:5E
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/73b0d7d322a445bc638f4a66491aab01cdedc151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:70:65:d3:0d:e1:c5:21:c1:c0:dc:cb:d6:c0:18:db:09:e1:
         2c:8d:f9:b9:25:3b:2f:28:18:0e:fe:90:e7:8a:ba:14:2f:1d:
         e4:a3:79:33:74:8d:8d:10:7c:a2:83:86:3d:b9:94:fc:0a:e6:
         3b:70:11:06:46:7a:91:fd:db:54:a0:f8:2b:62:70:ef:2f:c1:
         f0:05:3d:11:dc:54:16:f1:69:75:76:27:82:0a:d2:0d:68:9e:
         f2:54:27:cb:84:be:48:13:df:63:aa:d7:fb:19:fd:1a:a2:96:
         ff:4e:5e:4d:25:56:54:96:20:6e:ad:aa:6f:85:d2:6d:99:a2:
         fe:7b:96:11:d2:41:17:f4:6c:e9:3a:65:d4:78:43:98:c8:a7:
         16:be:69:60:56:a4:76:e8:6a:ca:db:5f:5d:ab:08:55:54:ab:
         48:d9:c6:01:f6:ff:5b:e6:d9:31:3f:bd:a3:51:16:b0:6a:a4:
         d9:b2:8a:63:32:f3:cf:bd:03:81:da:8a:c9:97:bc:1c:3d:27:
         8f:c3:7a:e2:a9:86:4e:85:86:de:5a:72:34:13:ef:5e:63:99:
         d2:76:47:e5:c7:02:20:0c:b9:49:55:f5:39:d1:f8:da:38:b9:
         47:20:c7:db:f3:a0:29:2c:a1:c1:c2:c6:77:e3:c0:55:dc:b0:
         f6:4b:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----