Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/44abcebda5ab69bc4df19ee390a70ab93369bcac.roa
File:                     44abcebda5ab69bc4df19ee390a70ab93369bcac.roa (raw, json)
Hash identifier:          xwOwfRghZQY+Ni43Jo52mq8UvPHeWgu/TE/K1pidhHM=
Subject key identifier:   AD:83:D7:CC:0F:68:AE:18:9C:5F:79:BB:22:A2:6E:67:77:AC:F0:72
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       1ABE13
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/44abcebda5ab69bc4df19ee390a70ab93369bcac.roa
Signing time:             Wed 28 Sep 2022 16:58:08 +0000
ROA not before:           Wed 28 Sep 2022 16:57:37 +0000
ROA not after:            Sat 28 Sep 2024 16:57:37 +0000
asID:                     64120
IP address blocks:        2803:f080:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752595 (0x1abe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Sep 28 16:57:37 2022 GMT
            Not After : Sep 28 16:57:37 2024 GMT
        Subject: CN=44abcebda5ab69bc4df19ee390a70ab93369bcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:17:44:36:3a:47:b4:14:ef:cd:b8:93:f8:
                    7c:ad:f5:22:87:29:8f:ce:be:9f:47:46:ce:bf:a8:
                    0f:a6:41:5a:59:21:81:62:f0:43:f0:1e:3a:6c:20:
                    90:35:96:0f:fc:bd:47:d1:4f:1f:b0:31:5b:75:20:
                    51:25:90:77:1d:7e:d0:32:43:28:a0:a3:fa:bd:37:
                    cf:dc:1d:28:da:ee:81:f4:79:8b:18:ba:23:19:4d:
                    d2:ca:67:b2:d8:0b:5c:b6:d2:d5:a5:20:17:f2:78:
                    47:c5:71:96:75:34:ce:8c:da:31:88:74:a1:5a:3b:
                    31:65:05:47:2e:eb:e9:e7:a5:b4:f6:99:72:4b:d6:
                    32:de:27:e4:7a:06:ac:66:13:46:95:46:27:1c:42:
                    51:09:c4:1c:ca:c1:c3:49:ae:35:34:0e:9f:ec:dd:
                    f3:c9:c5:2b:83:7e:23:b7:1d:c0:e2:2f:12:fb:d9:
                    4a:97:12:d4:62:ba:78:91:bc:fe:ac:c7:0f:a7:c6:
                    6b:51:f7:e4:79:59:ed:f4:6c:47:1d:e5:da:db:a7:
                    7e:28:4d:45:a9:09:a1:c0:33:6a:7c:a8:21:43:3c:
                    e3:cd:2d:71:a1:88:c4:d4:2e:4c:d6:67:e4:f7:7d:
                    98:d7:cc:34:93:22:53:0a:7e:17:ed:8e:20:95:d2:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:83:D7:CC:0F:68:AE:18:9C:5F:79:BB:22:A2:6E:67:77:AC:F0:72
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/44abcebda5ab69bc4df19ee390a70ab93369bcac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         47:44:63:84:75:13:93:3b:05:73:6b:d9:3c:94:13:34:de:3f:
         88:a3:71:81:61:f1:40:cc:69:8b:03:6a:db:ac:57:b3:09:40:
         b0:06:70:b9:c1:da:03:37:6b:36:da:52:4c:95:87:7d:07:03:
         7e:b0:fa:8a:83:51:c3:a7:50:ab:6b:c8:65:47:38:22:72:8d:
         7d:cc:10:ad:88:15:c6:9e:18:22:8c:22:23:46:3d:40:b8:e7:
         c5:ad:8f:bd:59:50:43:f3:d5:7f:68:9f:b1:b1:49:ec:5e:66:
         fc:7e:65:b5:2b:ce:67:89:ad:e8:0a:a6:8e:98:3d:c9:82:33:
         75:73:00:19:47:44:9f:92:29:28:a8:96:d5:bd:60:65:83:03:
         82:9f:64:95:e2:bc:9c:d3:f1:0a:78:4a:db:78:8c:37:6a:49:
         e6:82:b1:5c:08:5e:02:97:9b:f3:ab:0f:46:04:fe:79:69:b4:
         c2:ef:8c:50:52:74:77:9b:35:43:c2:29:6d:b0:c6:b2:15:13:
         10:26:f5:89:41:3d:cf:a6:e0:6b:32:c9:fc:d9:69:2c:7d:5c:
         4e:6b:74:14:1f:4b:41:12:43:20:af:4c:4c:e2:4d:97:6e:44:
         d0:f1:12:29:07:90:26:fc:1b:7c:e9:b0:cb:4d:1b:04:6c:a1:
         e3:c4:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----