Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4cc9022-2c71-4bbe-b67b-cbf73a4c5d8e/5822ae86a13a76e61ff8fa93baae8835d3e04807.roa
File:                     5822ae86a13a76e61ff8fa93baae8835d3e04807.roa (raw, json)
Hash identifier:          mjfc//VkSNnrkHn81fz5GdhT8EbUAp9Je3rgRTxDOZY=
Subject key identifier:   32:FC:32:E2:69:3D:F0:41:D0:2F:75:F5:2D:80:4B:73:12:A2:E9:EB
Certificate issuer:       /CN=cd977b8e50834e28a7a2ab93df661f9916fc0503
Certificate serial:       012D
Authority key identifier: F1:A2:F0:BB:60:66:2B:51:82:82:6F:50:D0:A5:C6:F8:11:9F:AC:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd977b8e50834e28a7a2ab93df661f9916fc0503.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4cc9022-2c71-4bbe-b67b-cbf73a4c5d8e/5822ae86a13a76e61ff8fa93baae8835d3e04807.roa
Signing time:             Fri 11 Feb 2022 17:56:42 +0000
ROA not before:           Fri 11 Feb 2022 02:00:00 +0000
ROA not after:            Sun 11 Feb 2024 02:00:00 +0000
asID:                     270148
IP address blocks:        2806:3c6::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd977b8e50834e28a7a2ab93df661f9916fc0503
        Validity
            Not Before: Feb 11 02:00:00 2022 GMT
            Not After : Feb 11 02:00:00 2024 GMT
        Subject: CN=5822ae86a13a76e61ff8fa93baae8835d3e04807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:06:94:bf:75:03:f4:93:ce:fc:4c:cb:aa:
                    a6:a3:cc:18:b9:44:b4:e8:aa:86:39:0a:c3:04:d1:
                    bb:74:1c:80:99:95:01:03:cf:ec:8c:72:88:58:bc:
                    6c:46:db:a0:5b:33:fc:28:b0:84:48:5f:a4:83:2c:
                    d7:8f:1a:d0:d9:aa:c7:dc:cb:be:79:65:f6:3a:da:
                    87:71:10:7f:d7:bd:bb:0f:17:28:d3:d6:da:34:24:
                    f6:20:80:a4:d2:53:c8:5c:c5:30:25:da:bf:dc:d3:
                    5c:80:f3:21:a1:83:3e:94:b6:e5:98:3a:d5:f0:90:
                    01:21:3c:06:4a:59:5e:ad:16:33:88:55:9c:c8:97:
                    f1:29:a3:23:bc:a5:50:38:1d:6c:be:cf:b3:a2:39:
                    7e:05:ad:b6:04:6d:6e:b6:27:45:e9:48:30:8e:b2:
                    b0:14:b1:62:52:60:6f:da:b9:ed:d2:b2:08:07:37:
                    fa:3d:86:f7:5a:f0:79:1a:14:da:6d:21:fe:f4:37:
                    fe:26:b0:f8:78:ee:62:4e:4f:eb:b1:74:c3:ca:8d:
                    e6:15:be:e1:5c:f9:b2:42:56:7f:d7:14:19:ad:a7:
                    a8:d2:74:08:ee:55:fd:c1:83:49:a5:03:56:21:a8:
                    0d:4d:7e:61:81:79:d5:7f:f2:92:9b:ab:d2:44:94:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:32:E2:69:3D:F0:41:D0:2F:75:F5:2D:80:4B:73:12:A2:E9:EB
            X509v3 Authority Key Identifier:
                keyid:F1:A2:F0:BB:60:66:2B:51:82:82:6F:50:D0:A5:C6:F8:11:9F:AC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd977b8e50834e28a7a2ab93df661f9916fc0503.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4cc9022-2c71-4bbe-b67b-cbf73a4c5d8e/5822ae86a13a76e61ff8fa93baae8835d3e04807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4cc9022-2c71-4bbe-b67b-cbf73a4c5d8e/cd977b8e50834e28a7a2ab93df661f9916fc0503.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:21:ff:d1:e0:99:88:19:57:98:2e:25:0c:af:57:75:db:
         c9:a2:55:88:03:8d:b8:72:ae:26:b3:3d:d4:f1:93:4e:37:91:
         e8:87:e9:64:cd:4e:3c:69:43:0f:72:12:59:05:5d:ec:bc:3d:
         de:5e:94:51:3e:d5:a6:f2:92:87:fd:cd:93:9e:4d:75:32:19:
         38:fb:90:07:b2:11:a9:31:fd:3e:73:1f:5a:8f:28:1f:2a:c2:
         3a:43:56:cb:fe:11:e4:a1:df:b9:f5:8e:4c:e1:6e:4a:11:fe:
         7c:c1:d7:3c:03:15:c3:ca:ee:a5:0c:a1:a8:3f:dc:a1:39:1a:
         c8:87:24:c1:fa:c0:17:67:a3:24:9a:ae:e9:ae:25:09:de:6b:
         b8:78:3c:45:8f:71:38:ef:54:44:62:66:b6:b1:a7:21:7a:4d:
         fe:bd:45:c2:c7:a5:59:36:30:0a:73:0f:a3:ed:f9:aa:0f:e3:
         e0:df:b1:2c:76:f5:c2:96:94:de:37:17:fd:36:f6:57:b8:4e:
         b7:93:27:6d:1b:1b:3c:6a:e2:7a:a6:94:7f:ea:a3:5a:88:a0:
         26:4b:f1:7e:53:95:2b:03:25:fb:79:33:0d:c8:c9:37:d6:29:
         9a:3c:7e:4e:0f:f7:6f:3d:62:43:15:5b:ae:a1:3c:db:0c:35:
         1b:f2:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----