Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/2274f834fc806de9f0ef0ea00f64e3c3bcc1d0e2.roa
File:                     2274f834fc806de9f0ef0ea00f64e3c3bcc1d0e2.roa (raw, json)
Hash identifier:          BgICHvWM4t1bIPyygUgzeOoJY7XSS/7K1W3IobhAcOw=
Subject key identifier:   DC:E4:E4:09:5A:BC:B1:3F:11:3F:F3:26:FC:11:98:8C:95:59:2C:3A
Certificate issuer:       /CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Certificate serial:       0F4A16
Authority key identifier: 13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/2274f834fc806de9f0ef0ea00f64e3c3bcc1d0e2.roa
Signing time:             Tue 26 Jul 2022 17:20:02 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Fri 26 Jul 2024 03:00:00 +0000
asID:                     270049
IP address blocks:        2803:ade0::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002006 (0xf4a16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Jul 26 03:00:00 2024 GMT
        Subject: CN=2274f834fc806de9f0ef0ea00f64e3c3bcc1d0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:e3:c3:30:3e:b9:8f:f6:38:db:fb:1c:0f:
                    2a:47:1a:46:86:8f:dd:20:af:6e:c9:95:01:2b:dc:
                    59:08:2a:fb:97:c3:2a:24:81:0d:e6:f7:f1:5b:a2:
                    1c:5e:02:6f:1e:d9:6e:bb:75:ab:bd:2c:be:de:9e:
                    a7:00:b5:28:f8:4f:f7:49:b8:fc:4a:36:f0:8e:1c:
                    f5:46:1e:89:6d:05:59:27:27:ec:1e:51:e5:23:bb:
                    60:b9:4e:b3:24:52:12:8e:71:b7:91:b3:bf:57:89:
                    3e:ef:06:ee:c9:6b:79:71:2b:0f:5b:bc:12:3a:6b:
                    88:46:37:42:ee:37:7f:32:01:ff:a4:04:ce:c5:a2:
                    bb:cf:cb:59:2e:10:d7:81:d7:ca:59:71:d9:cd:21:
                    14:6a:ef:ce:34:b8:10:ee:4b:92:c3:27:97:49:1f:
                    13:d0:10:34:47:0d:90:88:33:de:f7:8d:e5:23:de:
                    bf:88:bc:92:0e:f5:30:ec:d8:57:43:ca:e7:de:24:
                    17:1b:db:77:84:fe:db:28:00:56:0c:a4:7e:8e:0c:
                    28:e5:60:bd:8a:47:33:e8:a6:d3:98:ec:4e:2d:1c:
                    d9:60:01:ba:09:28:bb:a1:13:e4:da:ba:eb:0f:b2:
                    ce:7c:92:93:62:32:c4:d2:97:b9:11:3f:5f:0b:fe:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:E4:09:5A:BC:B1:3F:11:3F:F3:26:FC:11:98:8C:95:59:2C:3A
            X509v3 Authority Key Identifier:
                keyid:13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/2274f834fc806de9f0ef0ea00f64e3c3bcc1d0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ade0::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:bb:02:b8:1c:0f:7f:cd:84:fd:e9:bf:08:31:f7:bf:e2:f9:
         cb:5b:83:af:55:de:58:31:d8:73:46:bc:99:e5:11:26:69:39:
         f7:72:e2:40:db:f8:e0:c8:a9:46:07:a1:d1:bf:2d:28:a8:f6:
         75:6b:b4:91:77:ee:de:31:2a:9e:60:52:fe:b1:83:bc:e5:af:
         fa:84:81:7c:82:1f:ea:64:7d:69:2e:f8:6d:4a:84:7a:87:3d:
         9f:0b:f9:b6:88:c3:77:9f:16:a2:55:f3:49:3b:20:a9:39:be:
         71:81:0a:a4:64:f9:7e:d6:dc:4e:9f:c7:c2:22:ed:e6:00:0f:
         e5:ad:73:73:b5:8a:6e:2a:da:b5:3f:32:69:c1:d7:fc:94:b5:
         95:06:5e:02:8c:cf:10:a3:a4:f3:12:22:27:ee:c4:49:b9:55:
         b8:58:bf:4e:1a:2a:cb:5b:6f:f7:1c:f4:30:8d:99:01:77:b0:
         27:a7:4d:1d:b4:8a:84:77:df:b4:db:64:8c:25:e7:3a:b7:6a:
         e0:1c:af:1f:62:55:58:7a:8f:93:ec:bb:18:0b:2a:14:af:0e:
         a4:0b:1f:dd:e3:f1:4f:e3:9f:1c:4e:4f:a4:4d:9b:46:40:c8:
         00:c6:7d:ef:df:70:90:04:78:0b:1b:59:78:90:f7:f8:50:3f:
         e0:d9:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----