Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/58d47d6c9ee22381159fea3684d7b05d5ee15971.roa
File:                     58d47d6c9ee22381159fea3684d7b05d5ee15971.roa (raw, json)
Hash identifier:          zXQ8NbH0rJx/TJKYWRFLNouRy2CNPUZREduzH7hGL+8=
Subject key identifier:   44:F0:F5:D0:DB:11:50:E3:61:70:AE:30:BE:6E:35:0C:50:E8:52:AB
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       191233
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/58d47d6c9ee22381159fea3684d7b05d5ee15971.roa
Signing time:             Mon 06 Jun 2022 02:27:25 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28002
IP address blocks:        2801:1b8::/44 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643059 (0x191233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=58d47d6c9ee22381159fea3684d7b05d5ee15971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:9a:be:c2:57:29:f7:a9:7d:f1:c0:0b:18:
                    1b:31:ae:5e:df:f8:0a:7d:ad:4d:1a:a5:33:3c:28:
                    1b:c2:4a:04:f6:d0:3f:c6:bd:da:9e:90:af:6c:11:
                    64:92:ee:bd:48:aa:06:4a:eb:8b:3d:10:ee:e7:04:
                    ca:ee:d6:db:1d:9c:5e:31:0d:1b:7c:41:35:c9:8d:
                    ac:9f:e8:05:b9:12:16:2f:b7:23:8d:03:66:a1:ea:
                    b5:cb:e4:fb:13:8e:0f:54:43:b7:51:bf:89:f4:b6:
                    b0:1b:69:2e:bb:26:ec:e1:83:cd:e1:8d:fd:1a:cb:
                    ef:e4:9f:df:e8:a2:cf:0a:81:f5:14:21:ca:f1:d2:
                    fe:ea:ce:3f:6d:a7:3e:61:d3:80:f1:cb:bb:b0:0d:
                    86:c4:c1:46:68:f5:fa:43:08:34:6d:45:bc:ec:08:
                    d5:ba:d5:6d:d6:47:a3:ec:58:a7:db:2e:fe:df:3d:
                    de:b5:72:3b:b3:50:7c:06:79:a7:0d:0d:32:6d:16:
                    ea:61:e6:95:32:12:ca:b4:b7:74:95:23:b0:64:d4:
                    7b:d0:10:70:e6:52:46:64:ab:30:91:8c:60:8b:9a:
                    ff:6e:5b:44:9a:90:4f:ff:48:23:2d:78:fb:6f:4a:
                    d9:4c:61:6f:4d:7c:84:2d:45:8a:15:33:78:66:98:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:F5:D0:DB:11:50:E3:61:70:AE:30:BE:6E:35:0C:50:E8:52:AB
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/58d47d6c9ee22381159fea3684d7b05d5ee15971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:46:03:3e:ce:4c:63:a5:f1:3b:78:bc:8e:e7:ba:94:88:72:
         74:c9:47:cd:cc:17:c0:70:c7:f8:69:54:b0:10:b8:86:75:71:
         36:42:a1:71:5e:6c:08:92:1d:11:85:df:2a:68:3a:00:e3:f8:
         70:28:cb:54:21:b0:f4:67:f6:3a:01:e5:fa:94:65:30:4a:5e:
         e1:55:a4:11:f7:67:f3:6f:65:31:4e:46:b2:90:11:cb:28:9b:
         1b:14:a0:df:e6:e8:86:3d:a7:97:18:b5:f0:72:28:d7:e8:49:
         53:04:2f:58:41:67:49:49:1b:39:1f:9f:2a:bd:61:e8:35:6b:
         91:9f:c5:92:81:86:eb:02:07:c8:5c:af:b7:81:c7:ac:b3:96:
         a8:13:c8:f5:45:91:23:4b:7a:7b:f9:bb:cc:f2:ee:e4:25:12:
         df:01:c9:f1:9d:ea:0d:5d:8c:0f:84:55:14:0f:b4:43:68:3d:
         87:52:a0:96:ea:c6:07:f3:9c:9d:3d:63:e2:36:d2:da:e0:4b:
         0f:c7:97:03:0e:65:09:35:45:f8:74:3e:05:99:c4:6a:35:59:
         88:3c:35:d0:c4:5b:39:41:5c:e6:2f:63:a0:3d:af:15:11:64:
         ff:3a:db:e7:81:21:3b:9b:c2:a1:f7:9f:a2:a2:03:fd:56:1d:
         7b:3d:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----