Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/63df5ef63f7985b07b033338d77a2ed367233a0c.roa
File:                     63df5ef63f7985b07b033338d77a2ed367233a0c.roa (raw, json)
Hash identifier:          P0NqJcw2cSsiVink1XbhoOyRM0lRgLl+OLPP02UTRWQ=
Subject key identifier:   B2:B2:6A:83:3E:E9:B5:D3:51:0E:68:94:97:FC:BE:3D:35:42:8D:2A
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       1ABCD7
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/63df5ef63f7985b07b033338d77a2ed367233a0c.roa
Signing time:             Wed 21 Sep 2022 11:12:47 +0000
ROA not before:           Wed 21 Sep 2022 11:09:58 +0000
ROA not after:            Sat 21 Sep 2024 11:09:58 +0000
asID:                     52458
IP address blocks:        2803:480:15::/48 maxlen: 64
                          2803:480:16::/48 maxlen: 64
                          2803:480:17::/48 maxlen: 64
                          2803:480:18::/48 maxlen: 64
                          2803:480:19::/48 maxlen: 64
                          2803:480:20::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752279 (0x1abcd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Sep 21 11:09:58 2022 GMT
            Not After : Sep 21 11:09:58 2024 GMT
        Subject: CN=63df5ef63f7985b07b033338d77a2ed367233a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:b4:d9:d9:af:6c:fc:67:4c:b2:c1:41:00:
                    57:3e:3b:95:4f:e1:e2:c9:94:24:7e:30:74:21:85:
                    ef:20:62:21:83:9a:6a:5b:86:45:45:6f:60:59:d4:
                    da:fa:38:91:96:05:ff:62:84:51:21:34:50:91:b1:
                    41:66:74:76:92:90:8e:5a:d4:ad:42:55:18:35:72:
                    77:d2:da:ab:1a:0a:83:2e:ac:33:44:4e:71:78:f5:
                    cc:2b:e7:94:55:bc:b1:21:be:b1:f1:87:e6:10:8c:
                    60:be:9a:52:e8:0d:89:c5:15:cc:eb:19:9d:d9:f9:
                    d6:f2:af:45:b3:31:6f:08:86:35:18:5f:a2:87:42:
                    c5:d3:59:15:9b:55:88:fc:9a:54:98:c1:2d:4a:ae:
                    a8:33:b5:11:df:70:dd:07:59:30:77:e2:cd:5d:3e:
                    ac:f9:7a:0f:10:26:2a:0b:f2:2f:dc:4c:6f:b8:8c:
                    ce:62:0f:ed:39:83:92:f5:26:82:10:d8:86:70:01:
                    4b:17:36:f2:07:33:5e:03:16:ae:e8:ee:28:3e:c0:
                    ab:96:d3:78:fb:b5:85:2f:50:07:c7:c4:fc:5f:0e:
                    90:55:47:05:ca:14:c0:ed:9c:3b:81:83:ca:15:6c:
                    04:69:61:a2:56:78:08:ef:94:8f:80:61:17:02:6b:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B2:6A:83:3E:E9:B5:D3:51:0E:68:94:97:FC:BE:3D:35:42:8D:2A
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/63df5ef63f7985b07b033338d77a2ed367233a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:15::-2803:480:19:ffff:ffff:ffff:ffff:ffff
                  2803:480:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:6a:fd:fa:12:43:fa:a9:db:5c:b1:b9:c3:f1:06:76:73:
         36:47:df:04:25:a7:3b:6d:33:03:17:c0:8c:ac:68:99:fe:9d:
         0a:c4:7e:42:eb:37:49:31:27:09:a4:5e:7a:03:ab:3a:07:62:
         bb:bc:1c:86:e5:94:3d:9c:ea:75:66:14:1f:c1:5b:56:99:28:
         c6:1c:f7:19:0b:00:7f:66:25:5c:08:6d:de:1f:f9:4a:02:13:
         82:19:78:49:6c:bc:0e:93:70:de:05:f2:81:31:c3:71:a3:44:
         9e:96:54:d4:a2:4c:1d:ac:f3:41:98:a8:64:69:22:d1:d2:9f:
         01:a2:21:d6:3e:55:4a:f1:e2:4d:1b:51:ed:c6:fc:8a:4f:43:
         c8:b6:91:ed:f1:76:71:c7:89:81:69:3e:4f:83:7c:8a:0e:9f:
         3c:20:b4:f3:16:8f:9b:69:9a:c6:03:81:b7:4e:bc:6e:51:8b:
         20:7d:ab:30:cf:5e:de:20:ef:c8:ed:08:ae:e5:c7:04:85:73:
         15:c0:80:ef:3a:2a:e3:9b:4b:a9:3b:43:e6:c1:a8:6e:62:99:
         a2:f6:e8:35:fc:bb:1b:43:86:1d:50:27:9d:d3:4a:09:7d:18:
         f1:5d:fb:dd:3c:f0:d4:50:59:a8:6a:8f:3f:0e:78:e8:4b:cb:
         19:d4:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----