Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/40fbd14263e87ad476c948ca4bdd3644e09d137a.roa
File:                     40fbd14263e87ad476c948ca4bdd3644e09d137a.roa (raw, json)
Hash identifier:          BiC8XeoYg5NREWsXt6R9WhPBMZy56SG5zZK3mXVOWuA=
Subject key identifier:   C7:08:80:37:00:3A:1C:5A:C4:9B:32:4E:59:71:92:1F:3A:B8:03:5C
Certificate issuer:       /CN=0ab54f870629d44668b4eafe72acded873a82381
Certificate serial:       04CE00
Authority key identifier: A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab54f870629d44668b4eafe72acded873a82381.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/40fbd14263e87ad476c948ca4bdd3644e09d137a.roa
Signing time:             Mon 02 May 2022 19:46:52 +0000
ROA not before:           Mon 02 May 2022 03:00:00 +0000
ROA not after:            Thu 02 May 2024 03:00:00 +0000
asID:                     265671
IP address blocks:        2803:7ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314880 (0x4ce00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab54f870629d44668b4eafe72acded873a82381
        Validity
            Not Before: May  2 03:00:00 2022 GMT
            Not After : May  2 03:00:00 2024 GMT
        Subject: CN=40fbd14263e87ad476c948ca4bdd3644e09d137a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:30:f0:1a:44:a1:ec:75:33:8e:94:d5:83:
                    c1:8f:af:15:92:e6:75:f5:04:de:60:f8:13:18:ae:
                    b2:e2:f6:77:92:2d:d1:49:71:8d:da:ed:10:79:da:
                    a3:3c:c4:be:5c:84:2a:b5:01:c7:2e:0e:f3:4a:19:
                    8e:e1:07:70:1f:a3:00:81:f2:cd:61:5b:41:60:75:
                    31:a7:df:93:a9:3f:ed:91:f7:c9:d2:22:50:3c:e3:
                    61:0c:7a:e9:1d:7d:1f:d1:85:f0:6f:ef:e6:9a:03:
                    d1:65:f6:01:bd:bd:98:52:fa:f0:76:06:6a:cc:77:
                    c1:2f:7f:4c:45:b7:cd:59:36:49:a9:86:24:95:67:
                    d1:dd:00:8b:41:94:64:96:81:83:55:e8:bc:ca:9f:
                    b8:c2:8b:24:14:a7:09:61:98:f4:aa:5d:5d:aa:bc:
                    ad:a1:e1:71:cc:ad:66:cb:71:69:c1:01:9f:22:0c:
                    b1:0d:d3:6f:d0:72:1d:4a:7c:db:3a:83:29:8f:53:
                    6d:fe:b8:2c:8b:96:d5:4b:88:84:db:ca:30:bc:17:
                    08:8d:0b:db:a4:8a:a9:96:75:6a:24:4b:f6:bd:ce:
                    7c:f0:42:76:5b:6a:9e:a5:1f:49:fc:9e:2d:a3:1b:
                    e3:11:cd:57:d9:6a:91:90:e4:36:63:ab:1b:b4:2b:
                    4b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:08:80:37:00:3A:1C:5A:C4:9B:32:4E:59:71:92:1F:3A:B8:03:5C
            X509v3 Authority Key Identifier:
                keyid:A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab54f870629d44668b4eafe72acded873a82381.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/40fbd14263e87ad476c948ca4bdd3644e09d137a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/0ab54f870629d44668b4eafe72acded873a82381.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:01:63:df:88:07:76:6b:70:e6:73:0d:61:aa:fb:de:71:63:
         1d:1c:74:36:be:c4:56:a1:7c:41:b0:c0:fd:e4:25:20:3f:9b:
         32:05:c5:13:75:68:96:90:51:9d:38:d6:38:6e:7a:a3:00:2d:
         e4:3d:78:b2:b0:cf:5f:d9:37:7f:fd:1a:2f:9b:47:be:f2:46:
         54:9b:60:46:07:eb:31:38:9b:fb:3c:fb:46:3f:b0:bc:3c:04:
         ed:d4:fb:21:3a:03:ad:5f:c1:dc:74:0b:84:7e:ad:95:9c:da:
         59:0c:2a:05:d4:38:63:2f:a8:95:54:9b:f9:40:7f:86:e2:2c:
         9e:3a:58:9e:fe:ec:d8:c9:ed:bc:38:c7:70:23:b2:95:e6:16:
         0c:25:89:f3:14:a5:cf:12:c0:fd:af:a0:bb:c4:a5:31:97:9d:
         81:67:da:ee:ef:11:aa:48:4a:45:3d:d7:8d:7a:af:5d:fd:0d:
         09:9c:04:5f:57:a8:39:5f:ed:51:a5:c2:e8:9e:35:56:a9:c0:
         fa:47:79:a0:15:07:1c:46:9c:22:95:05:de:5b:23:1b:8c:3d:
         a2:4b:b3:b5:18:bf:16:85:66:9f:6a:e0:5b:33:4c:aa:c7:d7:
         4b:b2:51:6c:83:c8:cb:77:5c:50:55:cf:d3:81:32:00:d6:58:
         72:b0:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----