Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/40ca33674dd34593d91b47a09003ef83de1b106c.roa
File:                     40ca33674dd34593d91b47a09003ef83de1b106c.roa (raw, json)
Hash identifier:          OFbQ3cPQPMohaDMc7tMrIQXSMBCIzqXCcf3ZidARVYQ=
Subject key identifier:   2F:A8:09:A8:64:EE:F1:09:E6:D0:CE:7F:92:04:18:A7:DB:E0:F8:79
Certificate issuer:       /CN=1b671156f163047022ae7a64ac80be646ca248ce
Certificate serial:       17CCE0
Authority key identifier: CB:8F:FF:F1:2F:4A:72:E2:CE:AD:42:DA:90:A3:49:09:6F:0C:D0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b671156f163047022ae7a64ac80be646ca248ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/40ca33674dd34593d91b47a09003ef83de1b106c.roa
Signing time:             Tue 26 Jul 2022 17:46:00 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Fri 26 Jul 2024 03:00:00 +0000
asID:                     19429
IP address blocks:        2801:15:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559776 (0x17cce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b671156f163047022ae7a64ac80be646ca248ce
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Jul 26 03:00:00 2024 GMT
        Subject: CN=40ca33674dd34593d91b47a09003ef83de1b106c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:e9:4f:7e:7d:af:81:58:a7:61:5a:86:25:
                    54:74:73:56:b5:b0:41:d3:df:81:3d:cb:35:60:bd:
                    fa:03:77:56:b4:10:a3:50:b4:bb:b1:55:26:34:9f:
                    91:44:cf:fa:ce:09:a8:73:78:96:91:4a:18:f1:92:
                    ad:e1:24:f0:3c:52:46:84:22:27:d2:f6:20:e8:9e:
                    6d:c1:8a:6e:f0:23:57:ca:49:61:0e:dc:4c:69:81:
                    eb:d8:f0:7f:13:44:1d:c9:44:28:b9:f6:12:44:22:
                    a7:b3:cc:01:c9:a0:57:fe:7c:65:8e:3c:30:06:54:
                    f0:1a:9c:c8:c8:8c:43:94:57:09:b6:d2:5a:f3:4d:
                    94:86:f0:18:5b:44:64:0e:e9:20:45:c3:1b:34:71:
                    14:8f:d8:4f:2e:f3:ae:76:59:f2:6f:e5:57:5e:92:
                    bb:6b:0f:51:1c:a3:a5:64:59:51:3c:f8:92:b8:bf:
                    41:71:85:2e:db:3e:ad:88:ac:ba:8f:98:99:37:99:
                    d7:08:05:bd:bf:43:cb:8a:a7:82:e3:a4:80:e6:bf:
                    61:3f:7b:e2:33:71:a2:a4:79:4f:00:ec:0a:33:9b:
                    81:a8:61:13:5a:7d:1f:d7:c9:e5:47:74:5e:30:f8:
                    38:47:22:22:43:cf:6c:c2:ae:3c:f3:58:07:d6:81:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:09:A8:64:EE:F1:09:E6:D0:CE:7F:92:04:18:A7:DB:E0:F8:79
            X509v3 Authority Key Identifier:
                keyid:CB:8F:FF:F1:2F:4A:72:E2:CE:AD:42:DA:90:A3:49:09:6F:0C:D0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b671156f163047022ae7a64ac80be646ca248ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/40ca33674dd34593d91b47a09003ef83de1b106c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/1b671156f163047022ae7a64ac80be646ca248ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:0a:1c:22:d9:8f:71:f2:54:f9:be:0e:02:f0:09:7b:8b:f7:
         2a:27:3e:29:ca:e4:17:f4:a8:0b:9c:37:8c:2b:27:aa:6d:f2:
         69:1e:a8:8a:37:b5:2e:2c:5b:d5:af:34:09:df:3f:33:b8:7d:
         d7:d9:74:62:93:8c:1c:fc:ad:fe:f9:6c:7e:af:e9:00:af:88:
         c9:68:d0:8c:85:63:f7:14:d3:a9:bc:0e:a5:93:62:7d:af:8d:
         b9:58:b3:f1:47:b0:5c:36:0d:db:b9:ee:1d:7e:ce:93:38:4e:
         ef:49:3e:37:e4:55:5e:a5:59:ab:26:e3:50:5c:d2:55:bf:15:
         69:c5:f6:4b:7d:8f:00:43:16:59:a7:94:da:81:5f:c7:b1:18:
         c6:63:fd:34:6f:36:62:d3:ab:0d:91:66:70:32:f1:ef:8f:b6:
         85:7a:36:f0:ed:a5:a2:f4:ab:1d:18:95:5d:20:69:08:7a:c1:
         63:19:09:44:74:d6:d8:49:b2:19:78:3d:14:b9:01:ee:13:7d:
         cf:f1:61:e2:53:c2:1b:7e:19:93:b2:4c:97:28:2f:29:85:7e:
         05:2c:ef:fe:0e:02:29:ba:e4:87:41:6c:d0:74:dc:6d:6a:cf:
         be:47:c4:05:79:ff:8a:00:fc:5d:f3:d3:c3:47:d5:e1:46:6c:
         64:68:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----