Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/ea44448492a97d3d97ec7e5c868c25c774260470.roa
File:                     ea44448492a97d3d97ec7e5c868c25c774260470.roa (raw, json)
Hash identifier:          GR9f2YOwO5oju5wU2vDTpUHhlWsx+NPrtVOr+PkMo8c=
Subject key identifier:   0E:57:F1:A5:0C:C2:E0:59:33:4D:7B:79:A8:F6:09:ED:F4:29:4E:29
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       165158
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/ea44448492a97d3d97ec7e5c868c25c774260470.roa
Signing time:             Tue 05 Apr 2022 03:28:36 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Fri 05 Apr 2024 03:00:00 +0000
asID:                     64120
IP address blocks:        2803:f080:8820::/43 maxlen: 43
                          2803:f080:8840::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1462616 (0x165158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2024 GMT
        Subject: CN=ea44448492a97d3d97ec7e5c868c25c774260470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:c3:e3:c0:75:7f:96:6f:2a:b0:29:e6:d3:
                    d0:29:a4:e7:7f:1c:fe:24:75:51:af:b8:74:f7:8d:
                    40:78:c8:be:62:63:73:b1:e1:2c:4b:53:23:27:35:
                    b7:8e:c8:9d:de:d9:fc:17:96:bf:46:11:c0:d9:10:
                    af:82:f5:3a:58:7e:a0:1b:24:44:12:8d:e7:8e:bf:
                    33:4a:5f:14:93:47:73:73:ca:e1:50:06:05:19:b4:
                    0c:c8:30:50:79:2f:b3:b1:e8:f4:5b:00:ed:87:bc:
                    67:2c:6d:97:f7:14:94:de:67:75:80:49:49:e6:a8:
                    5c:0c:df:4e:78:7d:ad:59:f9:b8:3f:a3:19:ac:d5:
                    d0:cd:fa:3b:be:2c:6e:43:03:67:3b:5a:fe:84:0e:
                    6b:d9:65:df:44:cc:d6:54:b9:a5:14:c9:52:de:4e:
                    68:81:46:e9:bf:ac:af:ab:ab:a4:e6:5a:59:81:ad:
                    f8:b2:7b:02:1c:f8:4e:a8:e4:6a:07:26:69:05:26:
                    b9:70:ff:d9:19:7b:98:aa:98:7e:8a:49:f3:93:8e:
                    85:30:14:36:d5:41:0c:22:93:e6:35:6a:8c:31:ed:
                    b9:3b:dd:7d:8e:c2:83:25:92:15:79:e7:47:4e:03:
                    82:75:c1:fc:0d:c6:aa:61:8a:38:1a:f7:d7:12:91:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:F1:A5:0C:C2:E0:59:33:4D:7B:79:A8:F6:09:ED:F4:29:4E:29
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/ea44448492a97d3d97ec7e5c868c25c774260470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:8820::-2803:f080:885f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         24:88:fc:c4:9d:70:1b:b5:83:af:6b:9d:97:3a:2a:4f:52:9e:
         46:80:5d:2e:60:0d:df:60:2c:c5:e7:b9:6b:3b:ef:95:86:2b:
         35:1b:20:c2:f3:9c:30:15:0f:bb:f2:c2:aa:ec:75:8e:ef:07:
         29:ce:0f:d7:ca:f7:d2:03:27:6b:6b:45:81:00:50:35:3c:92:
         ba:06:55:dd:a6:a6:49:4c:71:37:69:70:6d:e3:af:54:c1:d3:
         21:0b:66:1b:3a:eb:80:6a:c0:89:ef:42:9e:bf:78:4d:28:ac:
         88:b0:39:2f:73:ba:aa:bf:61:47:a8:1e:34:a3:b3:c3:9d:4d:
         59:0a:a4:58:59:dc:bc:7b:2f:95:1d:ce:3a:92:84:bb:cf:44:
         ee:8e:3b:28:bd:68:56:b1:d0:b9:ab:09:7c:c9:52:4b:79:d2:
         cc:e4:11:3e:ea:3e:67:07:37:33:38:65:0a:79:91:3a:c6:71:
         bf:bb:d4:37:04:20:45:9d:78:4f:55:c7:ba:65:78:4d:50:9d:
         4a:99:c2:39:11:00:7a:7a:25:01:e7:d3:d6:62:26:b7:31:7e:
         74:80:2a:61:10:95:5b:d0:81:91:e8:35:dc:d7:38:16:9c:40:
         97:ad:57:39:07:88:3f:38:9b:fc:5a:5c:5a:e4:d3:79:96:c6:
         10:70:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----