Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/9f2ed607da5a1e4499c48583949b6c14b4710c6b.roa
File:                     9f2ed607da5a1e4499c48583949b6c14b4710c6b.roa (raw, json)
Hash identifier:          t6PrANIyUvL6MXxymHfFLoaWzTP9qaFl81PDVQhyOUw=
Subject key identifier:   D2:74:53:46:22:A1:91:13:A6:E6:23:24:90:B2:00:C5:02:C7:E3:77
Certificate issuer:       /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial:       1A1133
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/9f2ed607da5a1e4499c48583949b6c14b4710c6b.roa
Signing time:             Tue 25 Oct 2022 13:53:56 +0000
ROA not before:           Mon 24 Oct 2022 13:53:36 +0000
ROA not after:            Fri 25 Oct 2024 13:53:36 +0000
asID:                     52363
IP address blocks:        2803:6800::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708339 (0x1a1133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
        Validity
            Not Before: Oct 24 13:53:36 2022 GMT
            Not After : Oct 25 13:53:36 2024 GMT
        Subject: CN=9f2ed607da5a1e4499c48583949b6c14b4710c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:2d:c1:c4:db:4d:01:e2:e3:8d:7f:c1:e0:
                    6c:88:3b:3f:d4:8d:12:b0:2a:e3:9e:56:f4:1c:9f:
                    93:57:27:7d:b1:16:7a:50:ec:c5:d1:67:eb:a1:e0:
                    69:06:ba:fe:70:3c:0c:0c:3b:5e:44:e6:f9:b7:45:
                    fe:74:61:38:09:0b:c7:f1:86:89:5c:61:e9:9f:65:
                    0c:96:84:6e:d4:a3:87:b5:2a:01:f9:6b:85:b6:7d:
                    ef:84:05:64:68:be:59:90:82:95:c3:53:9f:00:8e:
                    b9:4c:b5:4e:9c:77:9c:75:ca:ed:f1:7e:c1:bb:cb:
                    cb:e7:4e:ec:8c:a1:76:a4:21:7a:bd:8a:d1:c9:59:
                    a0:e6:54:29:4e:da:11:62:d2:e3:60:14:8d:45:c4:
                    da:2e:35:d6:12:90:17:f8:6f:60:68:f8:81:1b:d4:
                    85:d0:12:64:e9:84:d4:70:75:1f:c4:3c:0a:2d:2e:
                    00:ce:b8:71:97:02:94:19:26:96:13:54:26:7b:19:
                    6c:f9:54:f9:51:3f:f8:30:3c:2e:14:df:64:37:91:
                    2d:12:37:99:21:d5:08:f1:63:87:a3:a5:68:65:94:
                    d0:98:87:19:54:57:1f:db:e3:48:a0:90:7c:6f:18:
                    0d:ef:76:43:8e:9d:68:fa:6d:c2:4b:25:c1:b6:fd:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:74:53:46:22:A1:91:13:A6:E6:23:24:90:B2:00:C5:02:C7:E3:77
            X509v3 Authority Key Identifier:
                keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/9f2ed607da5a1e4499c48583949b6c14b4710c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:b2:f9:4b:b1:a6:a2:ef:06:e2:35:a8:17:99:e2:b4:63:5f:
         64:2d:3b:01:f9:34:30:85:29:79:2e:39:e5:d2:4a:7e:d4:c4:
         21:2a:e6:8e:c0:42:72:e7:55:f8:72:c2:d8:3e:77:ae:c2:ff:
         ca:9f:c0:a7:14:a5:b0:67:76:8a:67:fb:6c:ea:66:b5:99:5d:
         a0:a8:29:7c:e1:95:d0:1c:b7:b4:2b:05:3b:c1:b0:8c:a7:fd:
         4c:99:e1:62:5a:0e:10:b0:95:ce:b5:7c:80:64:33:16:71:c3:
         9e:89:29:c9:4d:df:80:91:35:ff:a8:31:fe:6c:61:e8:e8:48:
         1e:d1:90:35:c3:c3:a6:8c:fd:5e:b0:9d:8c:59:42:a6:c0:f0:
         96:a8:a9:45:b2:cd:22:f0:e6:8b:ac:36:56:9b:ec:88:7f:0e:
         52:18:88:b3:c7:97:86:9f:05:20:95:cd:6b:5e:de:7b:fc:8d:
         b3:b6:12:84:5c:bb:e9:25:a4:49:c3:bc:a8:77:b8:31:65:fc:
         03:65:cf:51:b5:be:02:9a:ec:8b:96:d3:2a:6d:2e:c6:04:5d:
         d3:02:0f:69:5d:48:43:29:e1:74:37:4d:33:26:b7:09:84:a0:
         c2:16:14:6a:10:b9:f2:b5:a3:61:e2:a3:28:5c:b3:ff:8c:f3:
         aa:3e:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----