Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/87335cfb7b2f97851ee81d00d0cb9f6d0f9ee61e.roa
File:                     87335cfb7b2f97851ee81d00d0cb9f6d0f9ee61e.roa (raw, json)
Hash identifier:          4rtEG2s64zJbXDruz9AVdA6qqV2tJ/Ebk93LKbn+yv4=
Subject key identifier:   46:B0:D6:F0:B5:53:F6:46:AE:35:E7:D3:B4:88:3C:46:9D:94:06:4D
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       1A9FED
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/87335cfb7b2f97851ee81d00d0cb9f6d0f9ee61e.roa
Signing time:             Fri 16 Sep 2022 15:33:06 +0000
ROA not before:           Fri 16 Sep 2022 15:31:45 +0000
ROA not after:            Mon 16 Sep 2024 15:31:45 +0000
asID:                     52458
IP address blocks:        2803:480:6::/48 maxlen: 48
                          2803:480:7::/48 maxlen: 48
                          2803:480:8::/48 maxlen: 48
                          2803:480:9::/48 maxlen: 48
                          2803:480:10::/48 maxlen: 48
                          2803:480:11::/48 maxlen: 48
                          2803:480:12::/48 maxlen: 48
                          2803:480:13::/48 maxlen: 48
                          2803:480:14::/48 maxlen: 48
                          2803:480:15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744877 (0x1a9fed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Sep 16 15:31:45 2022 GMT
            Not After : Sep 16 15:31:45 2024 GMT
        Subject: CN=87335cfb7b2f97851ee81d00d0cb9f6d0f9ee61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:fe:7a:12:5f:15:af:9b:eb:ce:9e:70:22:
                    e6:8e:98:9b:6d:87:41:44:a3:7b:5a:b7:6b:d0:10:
                    c8:65:28:09:5c:d9:a8:77:8a:3d:be:a8:cb:6a:b6:
                    f2:e1:3a:db:25:f9:4b:7b:f7:e9:bd:02:2e:b7:b4:
                    1c:bd:00:8d:11:ac:53:18:77:14:5b:48:21:65:69:
                    ce:f4:8b:e0:3c:4a:82:2b:cf:95:00:6a:e7:0f:e0:
                    82:0d:e1:17:5c:de:d8:ff:90:b4:31:6a:a6:9a:4b:
                    59:ff:42:f1:52:7c:e1:71:4b:91:f4:10:70:9e:48:
                    91:db:15:ce:d9:19:97:85:e4:bc:9e:dd:c6:5f:19:
                    46:de:b3:ec:8c:9d:dd:70:7d:af:f0:0a:48:93:66:
                    dc:02:f7:3c:f7:49:9c:3a:8d:fd:c5:e3:64:49:8a:
                    ec:bc:32:15:3e:0f:15:0e:f6:a1:ca:b9:de:b0:9f:
                    9b:c7:b4:9e:e9:6c:3d:95:37:9e:a1:fe:15:af:1e:
                    74:d8:4b:2f:ea:d5:71:b7:3c:56:ce:b7:62:f0:47:
                    25:9e:15:b5:f0:b6:18:9c:3d:23:8f:22:19:e3:6d:
                    31:9a:b7:40:90:99:c8:54:f4:4d:e4:fc:bf:a0:73:
                    ee:ac:e0:5d:ce:64:d7:0f:1c:20:84:ea:8a:30:36:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B0:D6:F0:B5:53:F6:46:AE:35:E7:D3:B4:88:3C:46:9D:94:06:4D
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/87335cfb7b2f97851ee81d00d0cb9f6d0f9ee61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:6::-2803:480:9:ffff:ffff:ffff:ffff:ffff
                  2803:480:10::-2803:480:15:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:c1:2d:17:c6:0c:70:59:7c:e0:c0:bb:dc:7d:43:4d:b8:
         f2:63:9a:ce:f3:c2:7c:7f:f5:a8:23:f2:7d:17:d0:7b:75:d0:
         1b:66:3f:45:94:4f:83:d5:d7:d7:58:08:d8:3e:8a:47:2c:b2:
         36:be:ef:14:a7:64:de:ae:da:44:d8:c1:13:0c:af:b4:b1:6f:
         01:09:d9:c5:04:53:e4:0d:7f:b7:c8:e6:f5:c9:84:4d:21:48:
         7e:fc:3b:cf:22:84:4a:64:c6:4d:b0:cd:7c:d9:23:20:03:ab:
         af:03:63:25:e0:a8:43:88:d4:ca:02:b1:e8:87:92:a6:00:80:
         e5:87:9a:76:59:a1:ea:90:cf:a2:6b:29:fd:c7:5c:39:6f:99:
         19:29:c9:e4:65:bf:6e:9b:14:44:1c:ef:d6:cf:a4:0f:09:b1:
         0e:5b:9c:6b:74:4f:f0:1a:d9:2d:89:e2:8c:ec:95:7b:73:51:
         27:b8:0e:30:0c:2f:56:9a:e6:80:d9:ba:74:55:97:5c:0e:2a:
         a5:2e:1a:ec:27:10:7b:7f:2b:f6:07:f8:37:f7:af:1b:09:ad:
         9b:6f:fb:13:4f:df:5f:dd:64:b4:ff:5e:8c:eb:60:cc:45:69:
         a7:99:a5:33:d7:71:0d:9f:bc:94:d9:9f:4c:19:8c:6e:d2:18:
         fa:75:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----