Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/b679f50d11ea2352ff44c2429691722be082f867.roa
File:                     b679f50d11ea2352ff44c2429691722be082f867.roa (raw, json)
Hash identifier:          XPZ3QMms9v680Dw1wYVfqqYOcJTmzNH9bZjf+kIVsCM=
Subject key identifier:   E2:13:A9:20:34:E2:7D:78:57:B1:78:C5:F7:14:DB:85:2A:F3:D9:7B
Certificate issuer:       /CN=3a61a7a9840080a44173f942095ac78ead239107
Certificate serial:       0C73B7
Authority key identifier: 33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/b679f50d11ea2352ff44c2429691722be082f867.roa
Signing time:             Thu 06 Oct 2022 18:41:36 +0000
ROA not before:           Sun 08 Aug 2021 03:00:00 +0000
ROA not after:            Thu 08 Aug 2030 03:00:00 +0000
asID:                     64120
IP address blocks:        2803:8a10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816055 (0xc73b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a61a7a9840080a44173f942095ac78ead239107
        Validity
            Not Before: Aug  8 03:00:00 2021 GMT
            Not After : Aug  8 03:00:00 2030 GMT
        Subject: CN=b679f50d11ea2352ff44c2429691722be082f867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:63:26:11:17:5c:07:51:3f:4b:28:86:45:c7:
                    d6:6b:1b:b8:d0:c8:05:21:3c:4d:3a:33:46:7b:4d:
                    77:d4:a4:5a:65:ef:00:20:c1:1a:f0:95:f9:4a:f7:
                    57:7a:dd:f5:90:85:68:b4:6a:f2:f5:5e:ac:97:84:
                    0f:aa:a1:f4:49:65:55:cc:9b:cf:f2:f6:94:2f:c0:
                    47:be:92:a4:a6:0a:d5:91:47:43:0c:b9:3f:43:31:
                    76:da:39:98:90:66:9f:e4:7b:e2:0f:e2:fb:31:a9:
                    1c:4f:69:1a:94:16:2a:2c:cb:d1:c1:cc:58:41:23:
                    36:ee:40:fc:c3:c7:fb:cc:32:77:51:18:67:27:7b:
                    51:c6:70:98:22:17:3d:71:83:4b:52:7c:e5:72:e6:
                    1d:27:42:03:c3:be:83:55:35:8e:88:89:75:e4:cf:
                    7a:00:ce:99:d3:ef:45:47:cc:fe:48:8b:52:8f:03:
                    4b:c2:6b:76:48:27:b3:b4:9c:16:f1:8c:a4:b4:63:
                    eb:fd:65:d7:20:91:0d:ba:71:78:85:8a:c8:81:6e:
                    33:c1:86:4c:1a:c1:03:fc:1b:bb:48:21:ae:c4:ae:
                    46:3c:8a:e6:6d:81:34:73:d4:1e:68:44:12:7f:22:
                    6a:55:a1:33:f6:33:05:81:1f:ca:a5:08:cc:6a:cd:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:A9:20:34:E2:7D:78:57:B1:78:C5:F7:14:DB:85:2A:F3:D9:7B
            X509v3 Authority Key Identifier:
                keyid:33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/b679f50d11ea2352ff44c2429691722be082f867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:73:de:5e:4d:16:70:0b:e5:2a:8b:48:57:37:dd:84:2e:
         66:ee:c0:8b:1e:5b:c3:a3:26:16:f1:b7:6c:44:f8:f0:a9:c3:
         09:78:ca:5c:73:3a:92:90:6d:3c:3c:4b:e7:41:1a:a2:8d:93:
         7d:46:1f:bc:67:2f:85:c0:51:01:0a:df:f3:a1:c5:0d:8c:08:
         aa:6b:c2:a9:5d:05:02:ff:25:78:3b:2f:a5:b8:61:c1:e4:93:
         3c:ad:b2:43:c2:a0:3c:49:1e:7c:e8:4b:db:80:6d:e0:9d:67:
         ce:85:24:ad:e3:da:5a:e1:75:95:68:b1:a6:69:03:ec:5d:8f:
         bd:63:8e:8d:a9:0d:4c:64:20:3b:a5:9e:65:a8:27:c0:f1:b6:
         be:f3:e8:7e:80:42:cc:4d:49:92:81:af:cf:04:5a:87:1a:f0:
         07:50:c7:4b:d9:d3:ea:52:ea:2e:f4:37:bc:9c:7f:f8:ad:a8:
         20:b9:5b:3c:e6:e8:43:b1:61:9d:07:40:ba:6e:c1:1b:2c:54:
         57:d7:c6:88:31:73:82:18:d1:4e:e3:ac:61:48:ac:c6:32:70:
         1e:13:d5:5f:68:4c:34:e1:69:0d:52:9b:3e:3c:33:bd:c3:38:
         a7:54:3b:0c:ca:ac:d8:0d:d0:72:c5:1f:17:25:06:6f:e8:51:
         e2:aa:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----