Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/d6df7be53ea9d67dab8833df14708ec9be0c1fc5.roa
File:                     d6df7be53ea9d67dab8833df14708ec9be0c1fc5.roa (raw, json)
Hash identifier:          gfjVAOa7KbDq3Dsrnq/aeB6hRcNPQ6ILXG2yoVsLpts=
Subject key identifier:   26:29:8A:BF:55:CA:3E:65:AE:89:C9:AE:69:5C:EE:A5:E8:8D:BE:E5
Certificate issuer:       /CN=4fb1e072b1b2c5dc6972e25a3b19063dc5466874
Certificate serial:       06E8
Authority key identifier: F9:49:7C:85:E7:A0:DD:7C:CA:20:F2:66:62:19:B5:99:42:D3:B9:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/d6df7be53ea9d67dab8833df14708ec9be0c1fc5.roa
Signing time:             Tue 05 Jul 2022 23:27:19 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Fri 05 Jul 2024 03:00:00 +0000
asID:                     52341
IP address blocks:        2803:4720::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb1e072b1b2c5dc6972e25a3b19063dc5466874
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2024 GMT
        Subject: CN=d6df7be53ea9d67dab8833df14708ec9be0c1fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:01:10:21:99:b3:05:d5:ec:e2:4a:41:1c:
                    e7:6e:aa:9f:bd:7a:e4:90:eb:ad:56:52:11:a0:31:
                    e5:f3:1b:29:8d:39:f3:02:80:a8:3c:c5:f3:61:10:
                    e5:96:4c:65:c9:11:9d:ce:1d:2f:0d:62:29:99:b6:
                    7e:fb:c5:58:03:df:12:f4:eb:e1:e9:d3:13:58:37:
                    98:39:1b:a7:f9:1e:c4:50:2c:ee:4b:0d:bb:b2:21:
                    64:39:07:97:24:72:29:90:12:80:31:a9:03:18:dc:
                    25:46:a9:7c:bf:2e:05:26:6f:5b:aa:5c:fa:c4:d6:
                    72:78:46:a2:60:0c:ec:c1:d5:6d:2d:71:2a:25:43:
                    b2:22:95:c9:41:80:cf:ac:b1:69:7b:d6:cb:88:57:
                    f3:0e:f9:68:aa:ef:c0:8a:66:22:89:26:87:ae:c2:
                    78:8f:6b:ad:60:60:8d:95:48:65:6f:f3:e0:23:16:
                    06:0a:41:ed:7c:34:a9:0c:fe:9a:eb:96:4d:d3:bf:
                    f7:09:a2:68:5f:1a:93:07:e3:62:b5:de:6e:a5:9d:
                    06:a5:f9:f1:23:a5:64:4f:19:03:9a:35:dc:e5:e3:
                    d8:92:95:c5:75:23:33:e1:1f:a6:3f:16:aa:78:e8:
                    5c:25:f9:43:c8:56:43:d9:6d:46:f8:d7:da:3c:96:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:29:8A:BF:55:CA:3E:65:AE:89:C9:AE:69:5C:EE:A5:E8:8D:BE:E5
            X509v3 Authority Key Identifier:
                keyid:F9:49:7C:85:E7:A0:DD:7C:CA:20:F2:66:62:19:B5:99:42:D3:B9:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/d6df7be53ea9d67dab8833df14708ec9be0c1fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83fd79d2-8a95-4e23-b20a-084d47438e9b/4fb1e072b1b2c5dc6972e25a3b19063dc5466874.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4720::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:d5:40:c4:f0:5b:fd:9b:3b:c7:22:f0:cd:91:7f:6d:f8:19:
         a3:48:12:4c:f7:f3:4f:67:91:b5:c0:ea:bc:11:58:0f:e1:91:
         d5:38:97:9c:a8:21:ae:d4:23:4b:c7:cb:b1:ca:a6:22:90:b5:
         43:52:03:59:99:cd:c7:30:ec:88:e0:c2:e8:0c:b6:e2:c4:e5:
         4a:79:59:74:d3:ed:ee:6b:7c:ad:df:9b:30:55:92:42:5a:e0:
         c2:96:01:25:9f:15:91:48:e8:e7:30:8e:6f:7d:ca:ec:96:bc:
         5e:87:a5:96:9a:3e:25:12:01:22:41:df:68:b2:c3:93:d2:5d:
         a7:ee:46:6b:20:00:53:8e:d9:3f:e3:c5:89:f3:89:47:7e:e6:
         1b:2a:26:c8:70:09:11:4b:8d:f4:73:c7:ba:62:83:43:d4:aa:
         59:cd:07:1b:ca:e7:8a:66:1c:21:72:da:5e:86:d9:bf:2b:8a:
         a4:34:e6:de:65:27:f0:c8:92:b0:36:a1:0f:38:6c:28:8f:02:
         5d:a7:a5:3e:16:c6:c9:0c:70:54:94:ee:ed:05:05:a5:9d:af:
         d7:39:ef:68:14:03:cf:4c:79:6f:90:1a:e3:bd:6f:d6:4a:c4:
         1c:85:6e:8a:52:e8:97:5a:1a:9b:a5:c2:1c:d5:b5:33:24:73:
         08:92:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----