Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/9a49a237861d0eac3fd38b326e1f6535f0d01f82.roa
File:                     9a49a237861d0eac3fd38b326e1f6535f0d01f82.roa (raw, json)
Hash identifier:          vn0r37j1ywUwjJ9V9qG2eLncFjBIdqaErsZLKFtOd6c=
Subject key identifier:   4F:D9:6B:CD:D7:10:11:19:32:3C:B9:23:6A:17:69:68:2F:9C:66:6F
Certificate issuer:       /CN=0617fe284eadaecc300caf805a55753001bc6052
Certificate serial:       6B4D
Authority key identifier: 23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/9a49a237861d0eac3fd38b326e1f6535f0d01f82.roa
Signing time:             Sat 12 Nov 2022 16:20:52 +0000
ROA not before:           Wed 09 Nov 2022 22:58:39 +0000
ROA not after:            Mon 11 Nov 2024 22:58:39 +0000
asID:                     270141
IP address blocks:        2806:3dc:fffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27469 (0x6b4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0617fe284eadaecc300caf805a55753001bc6052
        Validity
            Not Before: Nov  9 22:58:39 2022 GMT
            Not After : Nov 11 22:58:39 2024 GMT
        Subject: CN=9a49a237861d0eac3fd38b326e1f6535f0d01f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:7d:ec:1a:2d:ac:54:5a:88:7f:bb:0c:36:
                    d6:27:9d:5e:22:0c:d4:3e:85:f0:e9:34:9f:35:b8:
                    40:1a:3a:b1:94:ce:5d:fe:6a:f0:77:6b:75:a2:7e:
                    8d:30:7c:5e:ff:b4:48:cc:58:f0:1c:ec:80:24:e5:
                    1f:bc:2c:c1:33:4f:1b:94:50:67:e2:13:99:14:8d:
                    da:80:88:07:79:2f:94:58:b3:b4:3b:80:22:27:a4:
                    87:7b:c0:d2:50:ec:5e:15:f5:48:e1:77:35:72:22:
                    d5:b3:a9:73:ee:7c:b1:94:d1:94:30:ae:51:39:80:
                    98:82:71:f2:10:52:e4:5f:3b:82:b9:ae:96:7b:7e:
                    d6:bb:f2:37:04:c2:17:dd:0d:f9:78:f4:35:fd:a3:
                    1f:57:82:36:6f:e9:5f:a2:46:3d:93:b0:ee:d9:8a:
                    7a:00:7e:45:be:78:1c:e3:be:7d:42:4a:39:11:cd:
                    d9:3a:c1:c9:ae:5d:24:41:7d:dd:05:2e:e5:54:1a:
                    66:d9:5e:8c:40:a9:3c:69:38:25:75:d7:60:87:45:
                    85:70:f1:23:12:3b:cb:8b:46:30:7c:c8:5a:35:33:
                    6b:83:2f:29:a1:bb:2a:4c:74:fc:02:6b:69:d4:1a:
                    e0:d4:b9:0c:41:7e:71:18:bf:b6:cd:c9:a8:b3:db:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D9:6B:CD:D7:10:11:19:32:3C:B9:23:6A:17:69:68:2F:9C:66:6F
            X509v3 Authority Key Identifier:
                keyid:23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/9a49a237861d0eac3fd38b326e1f6535f0d01f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:5b:4d:56:a2:16:e1:a5:31:03:6c:4f:60:a1:04:0c:0b:1e:
         4d:0d:fb:df:bf:25:06:5c:e2:05:33:5b:31:03:4f:71:77:d4:
         3a:98:06:a1:b6:13:7e:48:69:93:62:a5:10:ec:38:dc:7e:d3:
         d3:04:65:8d:45:f4:dd:98:48:98:08:cc:59:07:fa:00:fe:b3:
         80:92:3c:2a:93:f5:3b:01:65:dd:30:12:79:8f:3d:da:6d:74:
         11:1c:19:42:3d:be:53:6c:d1:36:88:35:39:93:11:66:68:fd:
         99:e0:78:c1:86:8b:70:5d:67:d4:73:32:7a:d9:0d:67:8f:44:
         1d:f4:7d:64:a3:92:d3:77:af:d5:47:56:db:be:14:70:ab:07:
         5d:2b:1d:69:f4:48:36:05:c0:d9:25:0e:79:95:c7:52:f8:fa:
         4b:c4:cf:0a:ee:21:2d:3b:fe:5d:a2:18:ae:00:83:14:ff:bc:
         b9:9e:60:31:5c:f5:27:d2:ba:f5:c5:3b:52:29:82:18:ee:69:
         2d:9b:45:ba:45:a5:35:6f:53:5a:36:fd:4f:1f:e8:b1:e5:1d:
         6d:ab:dc:07:c4:34:8c:76:d0:bc:87:c8:ec:5f:ea:48:dd:0e:
         26:99:72:3a:96:c3:c1:7c:49:ed:22:a6:7a:63:fb:40:40:ee:
         c8:94:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----