Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/00ebbf4c3e3564389b1965d23fc5dfbd85859b4b.roa
File:                     00ebbf4c3e3564389b1965d23fc5dfbd85859b4b.roa (raw, json)
Hash identifier:          sNJvGuC2JijkTjLkdLRsqCPIm822EJrzsfa4aC0fR3U=
Subject key identifier:   D7:7B:0F:7B:3B:2B:7C:1D:7F:62:12:75:6D:B3:37:D5:BA:9C:67:A7
Certificate issuer:       /CN=474ec6caa1b5b0fda0089cc7f13761d63d204439
Certificate serial:       0BCFDF
Authority key identifier: 55:3A:C3:5B:C6:2E:07:17:03:1A:61:54:AC:44:FC:AB:09:60:D2:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/474ec6caa1b5b0fda0089cc7f13761d63d204439.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/00ebbf4c3e3564389b1965d23fc5dfbd85859b4b.roa
Signing time:             Sat 22 Oct 2022 21:14:34 +0000
ROA not before:           Fri 21 Oct 2022 21:14:04 +0000
ROA not after:            Tue 22 Oct 2024 21:14:04 +0000
asID:                     271930
IP address blocks:        2803:5a10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774111 (0xbcfdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474ec6caa1b5b0fda0089cc7f13761d63d204439
        Validity
            Not Before: Oct 21 21:14:04 2022 GMT
            Not After : Oct 22 21:14:04 2024 GMT
        Subject: CN=00ebbf4c3e3564389b1965d23fc5dfbd85859b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:df:3a:14:ca:62:ed:bf:b7:49:31:72:32:
                    3c:7a:11:8e:e1:70:9f:7e:58:18:00:bc:09:9b:68:
                    ac:d7:af:62:33:16:b1:d0:da:28:cb:bc:21:86:42:
                    74:a7:0c:de:04:d9:f7:20:1b:2e:8b:93:f3:64:e3:
                    8a:b5:d5:3b:ac:6d:d0:03:a9:08:75:66:5d:7f:d4:
                    f1:02:c4:43:15:77:67:28:63:fa:56:ea:4d:b2:7b:
                    18:8a:06:ef:c5:10:20:b4:64:68:56:1f:16:15:2e:
                    81:57:90:95:70:2e:5c:da:5d:17:53:90:34:45:5c:
                    ed:a9:76:02:12:4b:5b:27:d4:1d:c7:05:ea:53:c3:
                    33:2b:b8:9c:64:2f:f1:9a:39:57:c5:94:20:20:fe:
                    f5:3f:61:f0:15:fd:d3:58:c6:8e:91:41:bb:c0:37:
                    25:a7:c4:d8:cf:c0:de:f2:d4:a9:ae:28:7b:78:19:
                    0d:02:86:ae:07:46:5e:da:5b:e7:45:6b:ab:26:eb:
                    2d:13:66:44:c1:6c:87:02:8a:90:de:9e:52:16:85:
                    92:8f:cf:62:c3:7a:47:cc:0b:f7:e4:43:00:55:1a:
                    86:b6:26:23:df:c9:0c:af:04:c5:c8:14:69:52:3d:
                    1a:20:f2:06:fb:f6:7b:21:72:07:e5:82:e1:e6:c5:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:0F:7B:3B:2B:7C:1D:7F:62:12:75:6D:B3:37:D5:BA:9C:67:A7
            X509v3 Authority Key Identifier:
                keyid:55:3A:C3:5B:C6:2E:07:17:03:1A:61:54:AC:44:FC:AB:09:60:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/474ec6caa1b5b0fda0089cc7f13761d63d204439.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/00ebbf4c3e3564389b1965d23fc5dfbd85859b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/474ec6caa1b5b0fda0089cc7f13761d63d204439.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:60:b4:8a:21:96:f2:70:90:9a:c2:55:d7:e6:f6:5f:cd:
         06:71:f7:bc:ca:f7:41:49:de:7a:f3:b6:06:24:24:e0:54:48:
         8e:1c:39:53:4d:88:86:06:11:98:69:0b:b1:19:16:54:60:8d:
         05:d9:4f:0f:20:5d:97:d5:1a:bf:d6:2a:ec:62:ce:e3:1d:26:
         14:08:f1:f7:2f:bd:f3:04:ce:af:01:f9:fc:71:88:bc:dd:2e:
         08:66:9b:ca:7b:86:2a:6f:ba:18:04:be:2b:89:4b:6f:c5:3d:
         2a:b4:f1:a1:bb:9c:99:64:b1:d0:35:ea:fc:77:c9:76:a1:19:
         ff:6c:81:73:ac:7a:7f:89:4e:e4:1d:96:49:19:43:6f:84:b9:
         0d:aa:17:c3:36:6d:ff:34:e0:89:ac:20:80:6f:fb:92:3e:d8:
         95:3f:92:ae:a8:c3:10:88:8b:46:63:51:e0:5b:7d:23:ad:0b:
         9c:96:f9:f1:f5:b5:6e:0a:d3:a6:85:97:59:66:38:5c:4c:6b:
         2b:61:ba:7a:fc:53:e8:00:7b:ec:09:9c:58:b8:c4:7e:7c:ac:
         5d:67:f4:41:4e:9d:ab:75:38:ca:6d:2a:5d:cd:94:06:d8:62:
         36:77:6d:d1:22:a7:50:1e:7a:1c:f0:8f:c5:f5:6a:95:52:e4:
         72:7b:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----