Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/3125000184afbc2cb3c6d9765de80670c046a410.roa
File:                     3125000184afbc2cb3c6d9765de80670c046a410.roa (raw, json)
Hash identifier:          8gUQU975BgAke0G73MGcvAAGMWD/k+ZMv1V26TYF79Q=
Subject key identifier:   1F:0C:BD:9B:D6:F2:B8:58:F2:C5:02:87:6F:B1:6F:1B:87:8C:BD:24
Certificate issuer:       /CN=d907662ec76d6ba4a1e2cdb479e31012f43c1385
Certificate serial:       672F
Authority key identifier: 19:26:1F:04:EA:BE:3D:18:55:3E:96:C7:D7:94:DE:68:E4:1F:9F:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d907662ec76d6ba4a1e2cdb479e31012f43c1385.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/3125000184afbc2cb3c6d9765de80670c046a410.roa
Signing time:             Thu 03 Feb 2022 23:29:18 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Sun 01 Feb 2026 03:00:00 +0000
asID:                     272056
IP address blocks:        2803:bd10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26415 (0x672f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d907662ec76d6ba4a1e2cdb479e31012f43c1385
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2026 GMT
        Subject: CN=3125000184afbc2cb3c6d9765de80670c046a410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:e4:fe:16:e5:b9:bc:27:62:40:f8:03:e5:
                    b5:64:98:84:df:b5:04:9b:7d:60:fe:ae:a2:8e:7e:
                    6a:6a:76:b5:61:11:1c:3b:4d:3c:bc:44:48:cb:b9:
                    43:89:d5:ef:cc:fa:57:d6:e3:e2:fb:cd:90:24:29:
                    1c:90:ad:b9:87:87:fe:12:c0:71:84:3d:5e:af:c0:
                    b2:ef:40:dd:18:a5:39:53:56:66:d2:df:2a:78:ec:
                    24:ec:1d:d2:f1:9f:98:e0:87:1d:08:6e:22:89:5d:
                    6a:fb:8e:85:83:6a:c2:c0:64:fc:ea:ee:d0:aa:4e:
                    d9:5f:76:f5:8b:27:69:8f:d3:34:1b:e2:79:b0:2f:
                    fe:20:a3:53:95:26:41:ac:ac:5c:58:b7:87:d6:ee:
                    7d:71:d1:ce:e1:8d:c1:84:62:74:04:11:d4:ea:42:
                    f2:cd:f2:d5:ac:47:ef:4a:fb:dd:f7:16:8e:b4:b1:
                    6a:49:2d:27:af:59:a9:e2:cf:8c:5d:79:40:22:21:
                    70:61:31:de:78:1d:0d:9d:bf:4a:7d:52:29:ee:5c:
                    6e:fd:cc:2b:b4:81:67:92:77:20:e5:11:27:b0:7e:
                    9c:4f:91:11:4c:bb:6e:08:54:89:99:bc:2b:20:3e:
                    f2:19:fd:4e:3e:16:a2:7b:42:a2:32:1b:9f:71:24:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0C:BD:9B:D6:F2:B8:58:F2:C5:02:87:6F:B1:6F:1B:87:8C:BD:24
            X509v3 Authority Key Identifier:
                keyid:19:26:1F:04:EA:BE:3D:18:55:3E:96:C7:D7:94:DE:68:E4:1F:9F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d907662ec76d6ba4a1e2cdb479e31012f43c1385.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/3125000184afbc2cb3c6d9765de80670c046a410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/d907662ec76d6ba4a1e2cdb479e31012f43c1385.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd10::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:a7:c9:cf:58:b6:c0:e8:68:08:cf:4f:f5:20:8e:cf:fa:11:
         78:4e:8c:2a:60:cd:a1:06:88:1a:21:a3:59:7c:e8:10:22:f8:
         bf:e9:dc:86:cb:f9:bb:d6:a4:e3:8d:ae:58:4b:d9:d2:64:41:
         8a:e3:b5:11:ce:f4:74:f7:5f:ef:03:ca:73:98:a7:3e:35:a1:
         0f:70:86:46:4b:0a:0c:09:b4:6a:c1:f6:87:7c:a4:5a:40:40:
         fe:3b:d9:92:6c:79:5f:c2:4e:a8:a4:ad:7d:5e:2b:53:5a:92:
         cb:ed:ec:1a:0b:ea:32:2e:a3:42:5a:21:cd:86:95:c2:6a:41:
         41:f4:d7:80:f0:a5:d4:42:83:c4:d7:ba:75:28:48:50:18:4c:
         7a:79:66:b6:1f:57:da:9a:c3:4d:5f:e5:90:80:72:46:04:e5:
         29:a4:f1:f5:fa:66:6c:ec:a8:9c:c7:33:c8:13:b9:93:14:b5:
         5e:e1:eb:cf:34:9e:89:70:db:25:58:aa:11:e4:de:9d:2c:62:
         6a:a6:4c:0c:eb:ad:de:0d:d8:83:2b:36:5f:48:60:e6:46:8f:
         33:20:b7:41:50:4b:59:b3:c8:fb:a1:94:fd:fd:45:4a:1d:59:
         5b:5e:99:65:f2:b3:ca:79:a5:26:e5:83:ca:d8:a5:54:19:55:
         a8:03:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----