Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/cfe843b08a7cd7cdf9d71c17e4609d8952c0dde6.roa
File:                     cfe843b08a7cd7cdf9d71c17e4609d8952c0dde6.roa (raw, json)
Hash identifier:          Uz4zY/RicyVIHx0Zaeot4Cb7wXbPu+hVSILXuNlKNms=
Subject key identifier:   30:E7:2E:91:DD:FB:DA:28:56:26:47:D7:8C:A6:7D:39:D8:E7:52:F7
Certificate issuer:       /CN=b0c720a9a69baef973dad173f853967bbc985a77
Certificate serial:       01C1
Authority key identifier: B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/cfe843b08a7cd7cdf9d71c17e4609d8952c0dde6.roa
Signing time:             Fri 08 Apr 2022 15:18:53 +0000
ROA not before:           Fri 08 Apr 2022 03:00:00 +0000
ROA not after:            Mon 08 Apr 2024 03:00:00 +0000
asID:                     269800
IP address blocks:        2803:7360::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c720a9a69baef973dad173f853967bbc985a77
        Validity
            Not Before: Apr  8 03:00:00 2022 GMT
            Not After : Apr  8 03:00:00 2024 GMT
        Subject: CN=cfe843b08a7cd7cdf9d71c17e4609d8952c0dde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:be:fe:96:f3:5c:f8:b2:07:9f:dc:a7:e0:
                    bf:da:2c:1a:fe:61:e9:78:70:8d:a6:c2:07:9f:e0:
                    01:52:4e:01:4c:c4:eb:79:43:c0:82:38:a2:e0:27:
                    8f:da:2c:4c:12:44:00:34:4a:ad:7a:93:42:d5:0b:
                    63:01:d6:03:2f:57:b9:1e:57:82:5b:68:d3:e1:8c:
                    09:da:4b:ad:81:1d:ef:6b:4b:31:81:e7:07:4d:70:
                    06:1e:eb:40:7a:37:d9:8c:35:3c:6f:a8:97:a3:e2:
                    fd:f8:73:5b:99:45:5e:ae:2d:50:e6:f3:7b:1c:80:
                    3e:90:81:ab:4c:2d:12:22:5b:df:84:dd:05:c6:5b:
                    2b:54:3b:91:22:b2:86:b3:a1:03:58:69:b8:8f:97:
                    39:a6:b9:fb:74:72:7c:d4:48:4d:68:7b:a5:ab:92:
                    30:81:b1:5a:19:68:43:8b:db:e6:90:55:f2:e0:9e:
                    c6:9e:9f:4b:6f:3b:eb:df:c7:b6:1f:cb:aa:3e:39:
                    3d:94:12:9c:80:d8:79:ff:c8:8a:ee:e7:21:25:6b:
                    2e:86:e6:5f:36:31:83:cb:1e:cd:13:4e:1f:fd:c9:
                    8a:1e:a7:1a:ac:52:f9:19:6c:f0:f0:51:fd:c3:34:
                    b2:9c:a8:41:3f:36:22:83:b2:c6:32:8c:df:b4:4d:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E7:2E:91:DD:FB:DA:28:56:26:47:D7:8C:A6:7D:39:D8:E7:52:F7
            X509v3 Authority Key Identifier:
                keyid:B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/cfe843b08a7cd7cdf9d71c17e4609d8952c0dde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7360::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:87:9c:71:48:b3:74:f4:5e:16:39:7d:73:c6:40:e9:e7:dd:
         8d:c1:5f:14:1f:b6:b6:45:8a:cc:54:67:0d:0f:4a:9d:b7:ff:
         24:b8:ae:68:8a:7a:6a:38:b8:f8:41:76:75:92:87:0f:d0:b3:
         29:aa:aa:9f:f8:c9:30:9a:5f:76:2a:25:e0:02:30:a5:96:c8:
         84:b3:f6:97:59:c0:24:3e:60:54:07:c5:36:83:76:89:b0:dc:
         17:f6:c8:f7:1a:90:ee:af:a8:79:02:6b:9c:30:dc:e1:71:b8:
         c3:d2:19:50:35:0a:51:f4:65:35:0d:30:d2:2b:18:d3:dc:c3:
         c4:97:5c:9f:47:ef:30:03:51:6e:65:57:3e:a5:3e:a1:31:c5:
         5c:b8:35:0d:9a:f9:f2:e9:0b:cd:2a:51:5f:e3:0a:8e:7d:74:
         68:84:70:59:a5:b7:e4:58:d4:26:7f:ac:13:c8:ba:31:c0:34:
         41:0b:e9:c1:b4:e7:cb:02:34:f8:7a:54:b6:c2:4e:14:3a:b0:
         16:48:a8:fc:5a:1d:2a:30:24:8a:75:0a:be:ef:72:0f:ee:91:
         81:46:ca:d9:78:2b:d3:99:47:5d:0c:79:36:e7:ca:96:7e:2e:
         6d:6c:d4:83:26:1a:2a:94:16:61:11:f5:33:85:ff:89:2b:4d:
         21:2c:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----