Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3ca259e-610f-4980-af1c-e8e75911f37d/f60c45b56e4bfc9fa84f2996371a669a4cf0a75b.roa
File:                     f60c45b56e4bfc9fa84f2996371a669a4cf0a75b.roa (raw, json)
Hash identifier:          xIUAyiQhM7yRUqmQOZh7+s9ihn5Giy6f2q4nh2g4c9k=
Subject key identifier:   A7:45:51:67:14:60:67:83:9A:C8:D0:F3:1E:DD:13:F8:2B:64:F1:AD
Certificate issuer:       /CN=63450b3c0778d6311cf9149853d0a4570a98068c
Certificate serial:       03CD
Authority key identifier: 2A:FC:B4:CF:F5:B6:C5:92:2C:4C:76:65:74:B8:98:12:29:48:52:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63450b3c0778d6311cf9149853d0a4570a98068c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3ca259e-610f-4980-af1c-e8e75911f37d/f60c45b56e4bfc9fa84f2996371a669a4cf0a75b.roa
Signing time:             Wed 19 Oct 2022 13:36:15 +0000
ROA not before:           Tue 18 Oct 2022 13:36:07 +0000
ROA not after:            Sat 19 Oct 2024 13:36:07 +0000
asID:                     269850
IP address blocks:        2801:11:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63450b3c0778d6311cf9149853d0a4570a98068c
        Validity
            Not Before: Oct 18 13:36:07 2022 GMT
            Not After : Oct 19 13:36:07 2024 GMT
        Subject: CN=f60c45b56e4bfc9fa84f2996371a669a4cf0a75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:09:76:a4:2b:fe:b1:b2:17:d9:b6:cd:48:
                    aa:ee:1a:d3:49:a5:25:3a:8b:e4:eb:45:20:33:0c:
                    c0:91:7e:92:9e:e0:f4:9e:a8:43:fb:7c:84:c4:32:
                    31:b5:a3:c0:6a:8b:4c:e9:72:90:ed:59:ff:bf:9e:
                    2b:5f:bd:ea:a3:d8:9d:d7:4b:ac:68:93:50:84:e4:
                    e5:ff:ee:ad:8b:dc:dc:24:e3:29:17:88:de:89:6f:
                    99:fa:04:b7:8e:50:97:32:2f:64:89:b1:89:88:12:
                    e8:41:16:5d:dc:dd:03:02:a1:f9:60:23:40:e7:39:
                    6a:8e:c3:7e:09:65:1f:f3:32:7a:ec:77:98:60:54:
                    26:52:74:d2:d7:72:e6:76:81:ac:06:9d:34:42:a9:
                    32:8e:99:24:79:fe:e5:ee:88:14:e9:a5:d6:8b:38:
                    c5:3f:a5:94:be:ea:a3:e5:50:be:e6:bd:9e:ca:5a:
                    f9:6c:bc:a8:35:a2:64:87:6d:95:bf:78:86:0c:6c:
                    48:aa:e2:15:e7:cc:e6:b7:7b:c1:9e:c2:ad:ad:e8:
                    3d:21:3f:37:3e:df:68:c1:2b:a7:17:20:1f:52:ef:
                    43:bd:82:bd:99:08:b8:15:83:d1:3f:78:be:c3:b9:
                    2b:90:2f:42:53:ce:28:42:ec:c4:a9:bc:d6:b1:87:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:51:67:14:60:67:83:9A:C8:D0:F3:1E:DD:13:F8:2B:64:F1:AD
            X509v3 Authority Key Identifier:
                keyid:2A:FC:B4:CF:F5:B6:C5:92:2C:4C:76:65:74:B8:98:12:29:48:52:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63450b3c0778d6311cf9149853d0a4570a98068c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3ca259e-610f-4980-af1c-e8e75911f37d/f60c45b56e4bfc9fa84f2996371a669a4cf0a75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3ca259e-610f-4980-af1c-e8e75911f37d/63450b3c0778d6311cf9149853d0a4570a98068c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:f5:e2:97:41:41:a7:97:04:9d:c4:39:a8:70:78:69:4b:
         c7:46:67:d4:f9:3c:99:40:48:3a:65:52:3b:d2:5c:fa:21:ba:
         c6:2c:62:d1:1b:b0:92:d0:6a:94:53:82:82:13:d6:8a:a0:fc:
         48:0a:e7:60:bf:bb:36:82:18:a5:2d:33:5c:dd:95:80:bd:ca:
         29:75:5e:fb:a2:e6:9b:1c:53:18:33:d2:18:c4:37:d5:7e:5c:
         39:0c:fb:d3:bf:c4:ef:e7:52:0c:ab:d0:99:98:fc:58:0b:8b:
         43:f9:58:68:2a:df:ba:e8:bc:7f:59:7f:f3:1c:43:6c:a7:b7:
         8b:b6:57:82:e8:31:b8:40:03:d9:18:a4:8b:6b:24:ef:a2:e8:
         1f:b1:00:9f:21:da:ad:ab:c5:64:12:54:45:96:52:98:61:39:
         af:0e:4b:72:b6:53:f9:af:de:91:94:9e:b8:3d:4e:14:e5:af:
         01:4e:80:cf:0d:1e:44:e6:47:b2:d2:16:11:1f:9b:b7:bd:90:
         ff:7f:5a:dc:b8:06:0e:2b:3f:0e:74:1a:2e:e8:03:c2:4e:03:
         67:cd:9b:87:8e:64:b7:f2:ce:98:82:77:f9:9a:6b:57:c5:d7:
         cf:b4:d7:20:0e:07:5d:b7:bf:5f:f4:20:87:68:c7:87:20:f6:
         dd:6b:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----