Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/a2167ae8aca33a2a038638d238357050cede36df.roa
File:                     a2167ae8aca33a2a038638d238357050cede36df.roa (raw, json)
Hash identifier:          GvlrXHl5xm71GS1xpoh5E3HGa4T4n+tkeBxATdEuFzw=
Subject key identifier:   5A:86:93:8D:41:B8:6F:06:38:F0:7B:BF:32:D7:69:57:FB:B0:25:30
Certificate issuer:       /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial:       14F6E2
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/a2167ae8aca33a2a038638d238357050cede36df.roa
Signing time:             Mon 28 Mar 2022 11:20:43 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     265554
IP address blocks:        2803:aba0:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373922 (0x14f6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=a2167ae8aca33a2a038638d238357050cede36df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:42:c2:f7:b2:af:fe:db:b7:4a:ab:8e:54:8a:
                    7b:29:30:ca:0f:da:01:bf:f1:92:d4:f5:3d:f1:4f:
                    2b:71:cc:39:df:ad:1c:e8:fa:8c:bd:31:53:8c:0f:
                    d2:1b:42:e3:4f:e8:27:99:f8:b0:82:01:05:f1:80:
                    18:58:c7:7c:4d:a4:3f:6b:25:a4:81:a9:10:ef:2f:
                    e5:73:01:db:17:ea:64:3c:bb:5b:3f:41:00:4c:df:
                    79:ec:fc:64:2f:20:d1:16:f4:93:d8:f6:d0:76:9f:
                    c6:31:a2:1e:a0:1a:3a:03:d7:aa:32:98:0d:68:4b:
                    b9:86:22:9a:33:44:58:95:91:e8:af:1d:98:4a:0f:
                    2f:4f:0d:a5:be:39:7f:b2:88:83:ef:a5:73:de:16:
                    0b:f8:a9:29:f5:6c:c8:80:b7:d3:8a:f4:b4:af:b7:
                    e5:66:4d:1c:d5:14:85:f0:0a:bf:e9:a0:d2:e2:66:
                    60:03:90:9c:05:56:e5:88:45:68:ca:46:18:46:9f:
                    fb:8d:2e:2a:0f:1a:e9:27:34:fd:e0:43:1f:6a:e2:
                    70:91:13:6d:2d:3a:9e:d9:f6:d1:f7:04:aa:8e:5d:
                    98:84:8f:7d:d8:4c:e8:5f:f1:69:79:cf:7c:bc:15:
                    6d:9f:dc:0d:6e:bc:ec:da:a0:23:fd:94:8d:cd:6a:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:86:93:8D:41:B8:6F:06:38:F0:7B:BF:32:D7:69:57:FB:B0:25:30
            X509v3 Authority Key Identifier:
                keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/a2167ae8aca33a2a038638d238357050cede36df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aba0:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:6d:f8:1d:3d:42:92:45:85:8f:e9:ff:62:fd:a1:60:1c:
         84:d7:b5:f2:df:c7:f6:b2:7f:54:7c:31:be:49:c3:31:61:aa:
         3b:5a:e4:68:cf:68:6a:b5:78:55:85:08:f1:b2:ef:ca:a5:d3:
         0a:9e:11:b9:8e:44:24:c2:b0:55:13:3c:74:76:17:50:57:0f:
         e1:aa:39:b2:6e:76:69:f5:c0:59:4b:20:5e:42:20:6d:e1:39:
         dd:66:12:34:15:41:04:0a:52:db:40:cb:91:a2:40:93:0c:03:
         ed:6b:57:61:df:f4:d2:0c:71:55:81:a7:95:d9:ba:7c:7b:b0:
         8f:7e:bc:5f:7b:d7:e0:5b:ec:a0:55:19:35:08:46:7c:bc:7c:
         c1:34:a1:3d:5f:52:7d:de:e8:72:0a:78:3a:aa:27:94:13:25:
         e4:fa:05:74:8e:17:54:ca:03:d7:15:04:82:0b:c0:8f:5a:b9:
         6a:60:7f:6c:6b:60:fc:45:19:b3:19:64:e0:f2:07:1f:f2:7c:
         88:c4:39:af:98:85:f7:92:b9:88:04:64:32:3d:95:2f:25:df:
         a3:f7:be:2e:a3:46:33:18:7a:ab:db:1b:64:b9:9a:ad:51:65:
         06:ed:45:b6:74:52:9a:e3:41:1f:45:ac:d3:82:ff:f6:ef:c5:
         56:18:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----