Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9548e23e58af13faa7611ebbe1520387527f6881.roa
File:                     9548e23e58af13faa7611ebbe1520387527f6881.roa (raw, json)
Hash identifier:          /mFIB3+UJA5wxkvYlAZagey+t3nWyHzs88iB9mcKT1s=
Subject key identifier:   6B:D6:3D:4A:AC:A9:78:81:1A:DB:DA:2C:8B:9E:30:35:56:34:E2:39
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       181ABA
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9548e23e58af13faa7611ebbe1520387527f6881.roa
Signing time:             Fri 12 Aug 2022 17:47:11 +0000
ROA not before:           Fri 12 Aug 2022 17:44:41 +0000
ROA not after:            Mon 12 Aug 2024 17:44:41 +0000
asID:                     3790
IP address blocks:        2001:13d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579706 (0x181aba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Aug 12 17:44:41 2022 GMT
            Not After : Aug 12 17:44:41 2024 GMT
        Subject: CN=9548e23e58af13faa7611ebbe1520387527f6881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:3a:65:21:e3:f4:29:48:29:d3:96:bd:9b:
                    36:0c:e1:83:ba:8a:ad:13:41:be:00:53:ce:82:5f:
                    70:b2:c9:59:87:59:d2:8a:2b:d9:b2:32:32:d7:ec:
                    54:b0:a6:9a:d9:d1:c2:ee:c4:30:99:16:1b:c5:0b:
                    4b:36:3d:99:58:7c:6f:4e:68:3f:1c:85:6c:b6:af:
                    9a:ff:f7:e2:84:57:7f:fc:24:6b:c3:e2:30:c6:98:
                    ee:2d:28:f0:57:82:c9:4b:e1:c8:d2:ec:ee:1f:5e:
                    38:97:e5:c6:3b:62:96:1f:5d:bd:f4:09:77:1d:40:
                    0d:f1:b8:13:39:a7:66:9c:d4:2d:c1:d3:41:b0:a5:
                    4f:e0:25:b7:c3:35:55:ac:45:37:81:cd:a4:cf:9f:
                    29:59:c1:46:b5:79:3c:9c:13:93:f5:2a:c4:77:dd:
                    ad:95:16:00:3d:a2:17:2d:4c:c1:76:91:37:bd:c8:
                    58:c5:b9:9e:30:f3:64:e4:f7:62:d6:95:90:8c:ab:
                    1b:75:9a:b7:89:fd:28:33:cb:37:13:40:d5:5b:05:
                    ff:0c:93:45:21:a0:12:be:7e:47:1e:b3:9c:fa:fa:
                    4e:c9:94:fb:af:89:95:46:46:32:c2:86:cd:f8:53:
                    58:00:c4:5c:d6:ed:0d:6d:b3:82:c8:59:b1:1f:f5:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:3D:4A:AC:A9:78:81:1A:DB:DA:2C:8B:9E:30:35:56:34:E2:39
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9548e23e58af13faa7611ebbe1520387527f6881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:0b:3c:e3:02:b4:39:ca:eb:a7:d6:1a:70:a9:e1:0e:16:
         92:c4:85:eb:55:d6:cd:be:de:da:48:d3:b5:01:de:65:50:ed:
         c3:14:62:96:b5:f7:af:76:61:70:f3:81:5d:8c:e2:30:5e:9c:
         be:bf:cc:35:ff:e3:ba:b7:9f:71:76:d3:bb:19:11:0c:15:c9:
         d0:91:2f:7f:6a:b2:07:f2:a1:17:b1:98:39:26:61:a4:2d:01:
         10:13:7f:6b:ed:39:cf:76:e3:c2:88:2b:91:14:bb:86:19:4c:
         4e:cc:be:73:18:3d:9b:48:fb:5b:93:6a:de:9f:69:aa:bd:05:
         c7:93:dc:c7:fc:3e:d1:52:53:5d:46:b6:72:35:d2:a6:4f:90:
         55:fa:3c:e1:4a:2b:f2:c0:08:4e:96:58:e2:55:08:48:9a:71:
         e5:fd:9b:23:5b:5f:03:e8:a5:b0:42:ae:14:10:84:7d:d0:a1:
         e3:51:dc:ed:3a:1c:45:33:b2:52:73:a5:08:4f:63:92:fd:aa:
         d7:93:76:96:00:46:37:68:75:c0:b6:23:ad:30:35:71:b3:0a:
         24:b2:af:81:7d:19:ff:0f:19:00:85:6f:ff:5e:cb:9f:c3:84:
         9d:cd:1c:cb:53:c3:ba:3d:31:5e:89:75:66:a8:4e:e7:bf:39:
         0b:26:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----