Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/3937340e546d88f8aeba566e5d3721e48afbc923.roa
File:                     3937340e546d88f8aeba566e5d3721e48afbc923.roa (raw, json)
Hash identifier:          8dB57jlfzkkCUYOT5hgb+qGvukGJVx+EGuRt6WZexCw=
Subject key identifier:   52:62:84:24:C9:86:7E:11:E3:21:D1:11:3E:A9:06:9F:A6:89:B2:9B
Certificate issuer:       /CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
Certificate serial:       1B5CA4
Authority key identifier: 51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/3937340e546d88f8aeba566e5d3721e48afbc923.roa
Signing time:             Fri 13 Jan 2023 18:11:40 +0000
ROA not before:           Thu 12 Jan 2023 18:09:49 +0000
ROA not after:            Mon 13 Jan 2025 18:09:49 +0000
asID:                     267916
IP address blocks:        2803:4e60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1793188 (0x1b5ca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c635c0f63020ac3be5d867de2f8cd9c13ed75b
        Validity
            Not Before: Jan 12 18:09:49 2023 GMT
            Not After : Jan 13 18:09:49 2025 GMT
        Subject: CN=3937340e546d88f8aeba566e5d3721e48afbc923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:20:b1:10:0c:71:0f:7a:c7:cc:16:fe:c7:
                    61:a0:8a:d5:f7:a2:ab:d1:ba:36:42:6d:d3:be:81:
                    9c:a6:be:38:09:9a:aa:77:dc:72:ee:94:53:8c:57:
                    13:15:79:a0:5f:5f:c4:02:34:f1:cf:75:1a:be:8e:
                    e4:ee:42:1e:8a:ea:ec:b9:78:cc:7b:53:95:20:c8:
                    a5:5d:8e:42:a2:3c:82:30:1b:5f:67:72:9c:7f:9c:
                    13:9e:59:8f:f9:b8:a0:54:3f:25:93:11:9d:a7:40:
                    fa:72:79:72:2f:be:f5:3d:e7:65:8c:0d:a3:ed:8d:
                    3a:a3:dd:f0:11:b2:4a:e9:74:4c:a3:12:9d:ec:46:
                    87:c8:f4:b9:6d:11:fa:1c:8e:25:df:16:eb:4d:23:
                    47:0f:f9:e0:90:36:b8:2c:84:68:70:b1:ad:3d:0e:
                    4c:cd:71:64:e3:ed:38:d1:ca:cc:5e:ad:ea:61:1f:
                    35:a9:f0:dd:bf:01:d8:21:de:6a:0a:f7:3a:68:a0:
                    15:01:8f:41:c6:d0:d2:67:ef:90:3c:c1:7a:03:48:
                    d9:15:c6:d8:36:d6:3b:0e:e3:5b:f0:18:f6:81:49:
                    20:26:89:57:db:74:b7:f2:00:17:3c:04:f0:16:2f:
                    07:fa:ad:55:65:1a:d5:e6:b5:ac:04:36:30:c3:98:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:84:24:C9:86:7E:11:E3:21:D1:11:3E:A9:06:9F:A6:89:B2:9B
            X509v3 Authority Key Identifier:
                keyid:51:AB:F9:C0:8A:06:46:7A:F8:08:E2:48:39:C0:00:60:C1:9D:7B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/3937340e546d88f8aeba566e5d3721e48afbc923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6981ee47-043b-48ea-9863-35aa5e64fea2/15c635c0f63020ac3be5d867de2f8cd9c13ed75b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:26:44:8d:a8:83:5a:89:ce:7b:2c:50:5e:e0:ef:f9:98:
         5c:54:9f:76:82:e8:74:de:cb:53:a1:1c:45:48:1e:4e:97:68:
         79:2f:3a:a9:17:cc:9d:1a:81:8e:38:8b:72:c9:d3:1b:df:ce:
         4f:c8:23:3d:88:b8:36:4d:0a:0e:16:6e:f2:42:76:23:4f:2f:
         56:90:2a:ef:44:2c:47:fa:68:e0:4e:04:8b:17:76:0d:58:b6:
         e1:3a:e8:6f:72:a5:08:f7:59:57:e9:b7:34:48:13:53:ee:3a:
         6f:30:86:47:ae:e0:2e:10:93:5f:51:66:4c:28:83:af:dc:c1:
         0e:de:2e:7c:3e:db:6d:af:e1:14:d6:8a:0a:65:e5:6c:b6:37:
         cc:de:d3:b9:89:06:da:69:d0:9a:03:a7:20:22:8b:5a:d9:b4:
         62:ce:ff:60:60:d6:fc:ed:7d:08:d1:23:6e:93:9d:e3:df:e5:
         bc:ea:59:90:00:67:14:0d:25:b6:87:ac:c8:5a:a4:88:50:9e:
         a3:17:81:a0:e0:35:0f:c9:97:de:2d:03:7c:8c:b7:5c:6d:ef:
         0a:4c:86:43:32:53:87:5f:6a:ce:08:2f:00:18:6a:b8:11:f8:
         cc:35:ba:ec:fb:b8:59:e2:0a:49:ef:3d:eb:4a:35:43:33:2c:
         3c:1d:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----