Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/0bc998f9c8b3def7007d980454eb713b26f9062a.roa
File:                     0bc998f9c8b3def7007d980454eb713b26f9062a.roa (raw, json)
Hash identifier:          LbBs9jNvivatTJZyBewTKQqI4qkhAGsm9OHATqddCv8=
Subject key identifier:   2B:47:BE:C4:8A:89:63:AB:89:CC:63:6B:53:EB:A0:6C:9E:81:24:ED
Certificate issuer:       /CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
Certificate serial:       16FCCA
Authority key identifier: 0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/0bc998f9c8b3def7007d980454eb713b26f9062a.roa
Signing time:             Fri 02 Dec 2022 11:36:38 +0000
ROA not before:           Thu 01 Dec 2022 11:35:15 +0000
ROA not after:            Mon 02 Dec 2024 11:35:15 +0000
asID:                     207036
IP address blocks:        2803:9c0::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506506 (0x16fcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
        Validity
            Not Before: Dec  1 11:35:15 2022 GMT
            Not After : Dec  2 11:35:15 2024 GMT
        Subject: CN=0bc998f9c8b3def7007d980454eb713b26f9062a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:09:dc:41:8b:69:43:0a:0c:c1:7d:6a:d7:
                    6c:22:09:89:35:97:d6:77:5c:4b:47:9f:7d:93:35:
                    bd:9b:06:b5:8a:15:c5:90:29:68:b9:08:e1:4c:67:
                    50:2a:72:4e:3d:f2:95:59:e0:a4:34:f1:a1:24:a7:
                    e7:a7:df:c9:ac:6a:50:41:cf:30:04:d7:aa:fc:18:
                    30:46:91:6a:04:99:19:50:bd:7b:79:40:e0:2b:26:
                    dd:07:85:a6:14:0a:be:0d:40:75:5f:ce:0c:28:6e:
                    e7:88:a3:c5:d2:5b:46:c7:3e:e0:02:63:0f:22:43:
                    19:48:0d:8a:6a:09:a1:45:ed:4a:8f:f5:cd:8a:02:
                    3c:59:a9:5e:0d:b2:ad:19:fa:ca:3e:c5:fc:f8:47:
                    a4:bb:f9:49:e0:c8:13:a3:be:f6:2a:21:29:76:89:
                    07:57:cc:57:f5:d7:0e:5c:99:53:be:79:17:c0:ff:
                    e3:8b:3f:e1:65:a8:bb:37:94:8d:49:ed:c4:73:69:
                    16:db:a2:9d:f0:1d:ae:7b:60:96:b0:72:ea:aa:42:
                    d8:80:e7:7c:ea:36:ae:37:dd:d7:ea:ba:e3:7d:4f:
                    97:ee:26:77:af:b8:7e:56:32:bd:9a:38:17:b3:3b:
                    4b:0a:45:71:3a:8e:58:f5:47:d2:0d:31:bf:33:38:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:47:BE:C4:8A:89:63:AB:89:CC:63:6B:53:EB:A0:6C:9E:81:24:ED
            X509v3 Authority Key Identifier:
                keyid:0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/0bc998f9c8b3def7007d980454eb713b26f9062a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/9144c0a44649b8dc574f61d431e56ed273ddb9f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:62:8a:c5:39:01:b8:dc:f5:15:7b:37:55:68:ed:c9:fc:
         c2:d2:c1:79:b9:60:f1:7e:2d:94:f3:d9:8a:16:99:19:b8:72:
         12:79:7f:fa:10:e6:94:12:f2:54:e4:2b:0d:9d:57:41:4f:39:
         8f:9e:78:59:48:a5:45:c2:cb:fa:af:06:8e:4d:fa:ea:6d:37:
         27:dc:ba:20:57:70:66:9c:c7:fa:77:55:07:eb:ef:b2:1f:a3:
         fc:d9:7f:18:9f:9f:ea:d6:10:02:b8:f1:96:ff:b7:6a:f7:b9:
         d6:31:01:bb:6a:7c:86:52:08:38:98:75:ed:56:15:eb:7d:87:
         a2:cd:eb:4c:9d:59:10:9c:fd:dd:8b:38:48:4c:10:9e:25:de:
         db:61:ed:3b:a9:9e:bd:a3:2f:8a:56:fe:b0:80:a4:fa:38:d8:
         d3:ba:3c:69:97:5c:0d:66:ad:5d:e6:6d:8a:d7:90:64:17:39:
         f0:25:5a:f4:d2:a9:ba:49:71:34:a3:e6:bb:53:b6:5b:95:09:
         c3:39:4a:4c:40:4d:b6:ba:6d:be:f4:e9:a8:0e:77:4c:b6:74:
         54:34:35:20:04:b0:25:7a:9e:9f:7d:5a:86:82:eb:fc:69:80:
         03:37:7e:d2:b2:15:39:73:5b:e2:38:dd:a0:af:91:90:f7:87:
         c2:9e:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----