Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa
File:                     453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa (raw, json)
Hash identifier:          6sf6uif99o7mh5qxJkmcpXgUO3l3wG4EgD121KJLWZ8=
Subject key identifier:   8F:81:96:1B:9C:DE:A1:C3:E4:52:7F:9C:DA:98:68:29:ED:E5:BC:37
Certificate issuer:       /CN=7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1
Certificate serial:       12DA0B
Authority key identifier: F6:DB:39:46:AA:ED:84:59:F5:60:2F:AD:AC:A4:A2:49:FC:F8:61:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa
Signing time:             Mon 13 Dec 2021 20:34:02 +0000
ROA not before:           Mon 22 Nov 2021 03:00:00 +0000
ROA not after:            Sat 22 Nov 2025 03:00:00 +0000
asID:                     267755
IP address blocks:        2803:b3a0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235467 (0x12da0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1
        Validity
            Not Before: Nov 22 03:00:00 2021 GMT
            Not After : Nov 22 03:00:00 2025 GMT
        Subject: CN=453dde26cd0c82e9e9c5f90185029fd475c29d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:6e:89:0f:43:b3:76:9e:45:00:6f:25:8e:
                    fb:ea:09:e1:36:48:02:7c:0c:28:58:86:e1:47:8f:
                    3f:10:a6:ba:fb:ed:86:94:1e:c7:87:03:fa:41:32:
                    68:68:8e:2f:2d:4b:14:fd:16:bc:49:c9:e6:dc:04:
                    92:b4:57:60:bf:b3:93:19:80:4f:19:a7:1c:58:4b:
                    cd:3b:e8:ea:94:f0:20:11:f4:82:3a:3a:03:19:be:
                    69:5f:1c:c0:83:6e:60:79:67:77:b6:c1:a2:b4:fc:
                    df:24:1a:3d:da:e8:aa:56:37:e4:e5:ae:ad:ff:c7:
                    ca:8e:b4:ab:68:d0:00:8b:06:f4:7e:55:a8:59:cc:
                    f6:80:03:ee:16:8d:af:b5:f3:28:2c:17:c3:37:4a:
                    73:7a:68:c2:e9:90:ac:a6:3b:d3:08:ab:39:3a:b5:
                    09:cd:9f:97:02:4d:eb:26:a8:27:eb:66:bc:a2:26:
                    65:13:ab:41:de:c4:b4:42:57:c1:8f:55:a7:41:aa:
                    e8:1c:7d:b4:8f:94:8f:e3:83:0c:4c:1e:d0:ff:b7:
                    97:a6:e9:5d:b7:47:ea:e0:e1:7e:19:14:73:56:28:
                    d6:16:61:77:61:8b:ad:8d:1a:e2:5c:bb:4f:d5:95:
                    95:ec:cd:92:e7:b3:d9:0c:c5:59:27:f0:0c:67:8a:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:96:1B:9C:DE:A1:C3:E4:52:7F:9C:DA:98:68:29:ED:E5:BC:37
            X509v3 Authority Key Identifier:
                keyid:F6:DB:39:46:AA:ED:84:59:F5:60:2F:AD:AC:A4:A2:49:FC:F8:61:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/453dde26cd0c82e9e9c5f90185029fd475c29d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b41f2abb-1db0-4187-9f17-6ecd3ccc8df4/7d372407b50eba1bb8f7652248fdb0dcc3dfe7f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b3a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:8f:a7:f6:ec:34:bb:b2:a9:fd:ed:3e:70:53:4b:0d:9e:a8:
         36:d0:57:4a:34:0b:ba:bc:5e:70:d4:c1:17:56:1c:03:48:9c:
         4e:74:66:39:8a:93:9d:4a:0d:3a:af:00:60:7f:2d:71:7a:d1:
         27:a6:f0:60:71:07:0a:04:0a:a7:5a:b0:2b:e5:cc:38:e9:26:
         7c:a2:e3:46:2d:6a:08:9f:ac:6a:cd:fc:1f:99:07:09:4c:d5:
         1e:04:66:50:cd:07:15:23:ba:31:a1:43:ee:3f:3d:40:bd:d8:
         7d:fb:c8:cc:65:4c:7a:8c:91:53:f9:be:87:2f:96:5b:a9:33:
         72:66:e3:f6:3a:ca:7d:1c:df:65:57:73:89:c0:ef:27:be:5c:
         01:e2:9b:d6:b7:3f:08:86:9c:50:ee:ba:3f:d6:2b:15:c3:8e:
         13:50:4a:43:3c:95:46:d7:e3:03:5a:75:38:d9:4b:dd:a2:c4:
         bf:1c:ff:7e:82:6f:5e:6e:78:1a:88:bc:c8:0c:53:1f:6a:78:
         d6:a1:b8:65:89:df:78:4d:30:f1:3a:f3:d2:3a:29:69:c1:c0:
         7b:80:95:c7:ec:47:a6:bd:9c:3a:0d:b1:dd:aa:4e:57:85:ce:
         35:c3:65:78:84:98:3e:79:a0:31:83:81:a9:c2:42:17:b8:dc:
         53:1f:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----