Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/962d3160f9fd28ec4f7cb4ced3a81cfead7fd352.roa
File:                     962d3160f9fd28ec4f7cb4ced3a81cfead7fd352.roa (raw, json)
Hash identifier:          PaMAzIiRv/RKjIEqm0I03BSXn3nHkHp1NxFaaApQI/8=
Subject key identifier:   3D:75:F3:59:BC:F0:F9:B2:CA:82:D5:A0:78:7B:B0:92:2B:98:65:C4
Certificate issuer:       /CN=1be9f9f11cc9399507d52793d27263cec20dfef0
Certificate serial:       0649
Authority key identifier: 18:C6:F5:2D:90:C0:73:5D:CB:66:2A:13:AE:EF:B3:50:F3:42:59:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1be9f9f11cc9399507d52793d27263cec20dfef0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/962d3160f9fd28ec4f7cb4ced3a81cfead7fd352.roa
Signing time:             Wed 02 Feb 2022 18:53:19 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Thu 01 Feb 2024 03:00:00 +0000
asID:                     272019
IP address blocks:        2803:c510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be9f9f11cc9399507d52793d27263cec20dfef0
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2024 GMT
        Subject: CN=962d3160f9fd28ec4f7cb4ced3a81cfead7fd352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:c0:52:25:09:d3:06:f6:4c:1d:1e:4f:f8:
                    ba:4d:45:9f:bf:44:ef:d8:57:21:3b:8b:dd:4d:82:
                    92:86:58:c3:96:94:a9:a1:5b:84:42:70:22:3e:49:
                    a1:e5:f1:1a:0c:9d:85:f6:b3:f9:1f:33:ef:a9:55:
                    3c:42:4f:0d:83:f9:1e:e9:3c:b1:ed:82:5f:95:d9:
                    fa:96:76:d9:fb:12:95:c2:a4:d6:17:18:dc:be:b0:
                    f6:25:d1:96:c7:3a:14:b9:d5:25:43:e5:71:cd:e4:
                    1d:17:42:30:ef:63:bc:21:71:ae:35:b9:77:e2:0c:
                    aa:1a:98:75:59:a3:eb:87:4e:ba:08:e1:90:d5:69:
                    fd:38:2d:a5:fc:86:18:d4:46:e9:bd:89:5d:03:a1:
                    89:cf:b5:f8:61:9c:17:c4:ef:37:53:44:29:a8:49:
                    df:47:36:3a:ab:9a:13:78:98:b1:56:e5:4e:8c:8c:
                    5c:1a:06:54:4a:da:6b:96:24:25:45:b2:66:0c:9e:
                    f0:75:7d:9f:0c:bd:1f:09:c0:fe:fa:3b:25:44:c4:
                    dd:e9:43:0a:a3:33:eb:1c:03:de:7d:a5:07:e6:20:
                    fd:84:59:dc:79:51:4e:ca:c8:92:cf:fa:cb:1b:57:
                    0d:e8:7c:45:6a:a6:5f:74:49:e0:f1:fa:58:f1:c2:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:75:F3:59:BC:F0:F9:B2:CA:82:D5:A0:78:7B:B0:92:2B:98:65:C4
            X509v3 Authority Key Identifier:
                keyid:18:C6:F5:2D:90:C0:73:5D:CB:66:2A:13:AE:EF:B3:50:F3:42:59:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1be9f9f11cc9399507d52793d27263cec20dfef0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/962d3160f9fd28ec4f7cb4ced3a81cfead7fd352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/1be9f9f11cc9399507d52793d27263cec20dfef0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c510::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:53:f6:58:42:3f:46:23:a2:47:ed:f8:88:33:c1:4e:be:
         f1:25:35:0d:99:ec:d3:7b:86:d9:4d:09:ed:b8:23:25:62:41:
         bd:72:88:70:a1:b7:99:af:0b:5b:5f:ea:03:2a:d6:fd:d1:59:
         c0:26:a0:1e:f9:77:ba:2a:40:0c:f6:8c:0c:ae:98:ce:46:b1:
         e5:5b:a7:a3:e1:60:5c:41:10:a5:af:65:96:20:c7:59:1c:06:
         44:c9:15:37:58:b9:74:64:44:c9:c6:cf:b4:56:33:5a:9d:51:
         5d:f6:bf:e6:c4:f9:dc:48:8f:c6:9d:7c:4e:7a:c6:16:15:d5:
         e9:97:cc:b6:03:7f:e3:f4:a7:58:81:4c:db:45:a5:72:d5:61:
         8c:1d:9e:05:05:df:05:ea:85:0a:5c:52:2a:bd:69:f7:47:e1:
         fb:6f:42:bb:03:4c:64:ee:c0:4c:a0:6a:95:35:72:af:3d:eb:
         c1:2f:c4:50:93:8f:1f:81:ab:0f:ac:77:b6:44:19:92:5b:61:
         25:b6:b9:82:e4:fe:36:ab:b7:cf:88:2c:5c:42:3e:16:e0:8a:
         d7:95:54:85:07:50:7e:01:6e:e2:61:10:c8:b9:e1:d5:a2:ea:
         91:ac:6b:ef:a9:3a:05:ac:89:cc:20:db:f6:c8:8b:fa:ba:0e:
         7e:12:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----