Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/50658ac3a2cc23e58ae8ca0b3f6e982a2243f879.roa
File:                     50658ac3a2cc23e58ae8ca0b3f6e982a2243f879.roa (raw, json)
Hash identifier:          Qmt7Jtv6nEOJo5pD5rZImfkfbhA0eel8ALHHAU8LX18=
Subject key identifier:   54:12:BD:77:19:EB:4B:47:47:5A:A1:D5:58:E9:68:A3:D3:99:B6:C7
Certificate issuer:       /CN=a00f13820b977914dc96250807fd66f6707db9ec
Certificate serial:       1812E5
Authority key identifier: 62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/50658ac3a2cc23e58ae8ca0b3f6e982a2243f879.roa
Signing time:             Fri 01 Jul 2022 02:26:34 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     266742
IP address blocks:        2803:ab20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577701 (0x1812e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=50658ac3a2cc23e58ae8ca0b3f6e982a2243f879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:7d:72:46:a9:62:f7:cc:1c:f0:af:63:5a:
                    7a:2a:aa:56:9d:80:6f:5d:5c:69:31:c6:aa:90:b0:
                    35:91:b6:fa:c6:38:e9:e7:74:4d:81:e3:d2:24:e6:
                    e6:77:a5:88:89:62:0c:a7:f4:36:69:3b:96:22:7a:
                    e9:8b:da:af:ab:80:51:87:7e:3c:0c:d2:d2:ab:0a:
                    28:3f:6d:fc:f3:c0:cc:44:f2:1c:ae:3f:5d:c3:b1:
                    92:8f:80:80:8d:78:08:b7:84:04:f2:f8:13:55:a0:
                    5e:b2:3a:69:f0:d4:6d:36:5a:61:2b:ec:e1:36:07:
                    ae:9c:4f:ab:2d:c9:83:de:7d:08:87:9c:7f:fc:a9:
                    49:8c:2a:c9:49:22:84:2b:0a:fc:d1:20:a3:f9:ee:
                    eb:37:3a:9d:3e:15:92:ab:3b:ab:ec:3f:e0:80:e4:
                    da:66:d7:5a:ba:6c:66:11:fa:cd:33:c2:13:48:01:
                    c0:1b:7a:78:2d:8b:82:ac:0f:c5:06:d5:d3:2f:ee:
                    c4:e8:b3:60:62:2e:1b:9f:b1:61:08:31:ff:74:63:
                    b4:df:e4:c3:9d:a8:ca:03:d6:06:05:ea:85:f4:7e:
                    5b:2f:cc:f2:11:7e:a2:e9:45:5e:7f:a2:28:ad:50:
                    ec:8e:d2:af:52:13:4f:4c:4b:f2:1b:36:c6:15:11:
                    ff:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:12:BD:77:19:EB:4B:47:47:5A:A1:D5:58:E9:68:A3:D3:99:B6:C7
            X509v3 Authority Key Identifier:
                keyid:62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/50658ac3a2cc23e58ae8ca0b3f6e982a2243f879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:74:57:10:73:37:bd:b1:c4:fa:05:b3:93:db:7e:fe:1d:
         00:e9:51:6e:eb:a6:50:21:62:db:c0:3f:06:9d:73:1b:5c:16:
         d6:db:de:c3:15:14:23:63:ef:9d:7b:33:e7:79:b6:95:1a:a4:
         9c:e8:16:a2:41:f3:9d:7b:a9:e3:a8:4d:01:2a:8c:26:6f:1a:
         ce:44:a3:47:33:15:d7:de:cb:82:a6:b6:ca:19:68:b9:92:e5:
         96:d0:34:2a:a7:1f:dc:8c:b5:78:72:4c:3f:99:dc:d4:47:8e:
         83:2b:64:58:e5:97:54:1a:80:6f:75:c8:84:43:78:34:c8:24:
         86:d9:09:c4:78:ab:7e:c2:f0:2b:93:39:e3:4b:4e:ea:c6:6f:
         be:c0:85:61:ef:0b:ff:1c:c2:a6:0d:8a:8e:88:db:be:03:89:
         eb:51:b0:cd:53:01:1b:38:28:d3:de:70:4c:ba:ad:b9:2f:81:
         fe:22:a2:0e:27:bf:14:7a:90:9a:d4:6e:2d:15:da:47:58:fa:
         a0:aa:b9:a0:01:93:c1:d7:a5:5d:96:77:b0:a2:b1:c5:8b:61:
         18:43:e8:f2:c9:cf:39:cf:3b:9e:d5:37:38:3d:82:1b:2f:5a:
         1b:3c:78:8a:81:63:c9:76:55:74:5d:96:b8:aa:f0:38:0f:3b:
         c1:c5:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----