Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/6c0d1622114e19db605387192dc9c64a43be0452.roa
File:                     6c0d1622114e19db605387192dc9c64a43be0452.roa (raw, json)
Hash identifier:          tt0si6id9Fm1DKbe16HDdlIzyem8ZsDXGWsvkWX6O00=
Subject key identifier:   0C:BD:6F:C7:4C:53:D1:50:30:F0:D9:9C:E6:2B:B8:DE:0E:31:78:83
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       04F796
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/6c0d1622114e19db605387192dc9c64a43be0452.roa
Signing time:             Thu 01 Dec 2022 15:01:36 +0000
ROA not before:           Sun 14 Aug 2022 04:38:18 +0000
ROA not after:            Thu 15 Aug 2024 04:38:18 +0000
asID:                     3549
IP address blocks:        2803:6090::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325526 (0x4f796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: Aug 14 04:38:18 2022 GMT
            Not After : Aug 15 04:38:18 2024 GMT
        Subject: CN=6c0d1622114e19db605387192dc9c64a43be0452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:ac:30:8c:7a:3c:1f:8c:1a:81:e6:1f:ba:
                    83:74:b8:68:d4:36:8b:87:35:24:41:1f:7e:aa:14:
                    8d:69:a5:19:e5:a7:3c:fe:d3:e2:b8:94:bc:44:0f:
                    55:3e:b6:32:ce:82:05:84:b3:28:22:07:a8:52:76:
                    b5:e3:50:d4:af:46:5a:69:ef:6f:35:49:b7:ed:f4:
                    25:98:ee:05:53:cf:a8:55:d1:da:ef:95:d1:04:2c:
                    57:be:3e:9d:e4:2f:82:f8:1c:52:cb:0a:a7:55:df:
                    4c:5a:bd:46:3f:4e:1b:fb:bc:ef:6e:70:92:6d:dd:
                    3b:42:8d:50:b8:9f:f4:77:80:6f:cd:69:c4:a8:71:
                    3c:38:7e:d4:62:e6:46:90:77:a2:46:e5:e9:0c:d3:
                    7e:e5:38:c1:27:9c:76:63:23:aa:0f:a4:30:47:d3:
                    9e:b1:1e:1d:12:0b:34:21:17:d8:0c:c0:1e:e4:84:
                    13:cf:8d:17:c9:41:49:f4:de:22:45:5b:b3:4f:37:
                    c0:78:6e:88:65:95:4c:c3:1f:0a:3b:6d:3f:80:97:
                    66:b7:9b:9f:2f:d9:b2:af:5b:32:80:a3:06:99:be:
                    44:6e:f7:9b:7a:3f:63:6e:e2:16:f9:15:d2:1e:09:
                    0a:d8:f9:ed:02:58:db:ed:99:2e:5c:3f:cf:34:fe:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BD:6F:C7:4C:53:D1:50:30:F0:D9:9C:E6:2B:B8:DE:0E:31:78:83
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/6c0d1622114e19db605387192dc9c64a43be0452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:4e:a6:6c:c1:cc:2c:4d:7b:4a:6e:a8:c8:1c:00:40:e6:0b:
         c5:56:3b:47:68:06:2f:ca:9c:c2:50:38:f8:26:71:01:30:07:
         6f:d3:ee:9e:c5:bf:ed:56:5f:0b:0c:03:94:c4:62:d6:a6:02:
         37:43:9c:d7:0b:86:2d:5a:4b:03:6e:f4:03:48:14:e4:72:cf:
         42:40:42:46:3e:37:12:ae:93:4f:b8:ab:55:22:fd:4f:b8:d0:
         41:53:d8:df:a6:80:da:2c:0a:5c:5f:13:39:76:7d:7c:99:42:
         f9:c8:79:f3:1e:44:29:45:84:4d:61:19:01:2e:42:5f:f4:13:
         10:a2:6f:33:5d:35:a2:be:c2:16:aa:1c:8d:76:6a:c3:32:b5:
         2c:03:09:aa:74:be:a9:77:a8:51:ba:f0:86:1b:59:46:1d:6b:
         1d:ab:17:a3:0e:e2:38:b3:a9:3c:5d:40:60:87:42:f6:58:3b:
         f9:fe:56:43:fe:cf:b0:9f:5c:42:ea:11:0c:ce:e6:d1:fb:90:
         f0:f9:bd:e7:74:dc:10:c1:6b:42:4c:f5:66:a8:2c:7c:c8:25:
         34:87:23:f8:df:9c:09:e1:4e:51:76:fb:90:c3:7d:54:a7:78:
         e0:32:b8:3a:4b:10:f5:17:a6:ec:39:03:af:1d:94:06:9a:c8:
         80:28:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----