Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/17fa3e561ceb003db220c6140c6baa242cb0caf9.roa
File:                     17fa3e561ceb003db220c6140c6baa242cb0caf9.roa (raw, json)
Hash identifier:          qkOM4/x26qncmdrTkwRq856qkLlUnVXMYte1zgtRuc4=
Subject key identifier:   3C:BD:ED:33:20:B7:A2:9E:48:CC:EB:A4:5E:3D:74:74:63:9F:06:A7
Certificate issuer:       /CN=51cc36a73e0bbe2b338c61fa1df595670735aa98
Certificate serial:       1259
Authority key identifier: 9D:83:6B:D4:65:8F:74:C8:F7:10:6A:FE:03:A6:FD:62:01:88:BF:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51cc36a73e0bbe2b338c61fa1df595670735aa98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/17fa3e561ceb003db220c6140c6baa242cb0caf9.roa
Signing time:             Thu 06 Oct 2022 23:30:10 +0000
ROA not before:           Thu 06 Oct 2022 23:28:00 +0000
ROA not after:            Sun 06 Oct 2024 23:28:00 +0000
asID:                     19422
IP address blocks:        2800:840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4697 (0x1259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51cc36a73e0bbe2b338c61fa1df595670735aa98
        Validity
            Not Before: Oct  6 23:28:00 2022 GMT
            Not After : Oct  6 23:28:00 2024 GMT
        Subject: CN=17fa3e561ceb003db220c6140c6baa242cb0caf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:70:ad:74:88:53:50:67:bd:81:2e:d0:c9:
                    52:a3:ef:42:74:89:55:ad:54:04:a4:41:a9:9d:2d:
                    e8:83:16:d5:44:d5:bc:55:20:07:d2:ee:a7:3d:e5:
                    e3:ac:c5:7e:aa:2c:98:78:dd:c0:c5:4e:93:b3:b6:
                    97:d0:1c:5d:3f:84:f4:d9:26:83:2a:cf:0d:61:ea:
                    1d:a3:7c:35:8c:ad:f1:67:d4:f5:f4:91:aa:25:ab:
                    46:35:db:5a:13:ad:97:4c:fa:e0:e8:0e:55:75:e6:
                    06:cd:87:39:75:35:55:b4:88:89:10:94:43:00:60:
                    23:64:65:45:b1:7a:2b:56:b0:b7:a2:26:8c:08:4a:
                    d4:f4:90:06:9f:31:ea:bb:32:0d:6b:20:87:24:88:
                    7c:66:7c:96:82:f6:26:84:28:4e:f3:a4:50:ee:97:
                    56:fa:ca:ce:89:dd:6e:80:99:70:e5:06:1a:a3:b8:
                    b6:10:e1:ce:7f:d5:d7:a5:7b:bd:35:17:59:4f:fa:
                    a4:1d:6e:17:47:fd:b0:4c:d2:ee:85:8b:6f:8d:3f:
                    5f:af:08:17:ac:80:1e:89:d6:8d:8a:69:5f:6b:a7:
                    5e:ed:1e:9a:aa:f7:fe:ec:1d:34:13:e6:72:2c:aa:
                    84:aa:6e:5d:b9:0a:08:96:a4:91:2d:f8:e8:0f:d7:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:ED:33:20:B7:A2:9E:48:CC:EB:A4:5E:3D:74:74:63:9F:06:A7
            X509v3 Authority Key Identifier:
                keyid:9D:83:6B:D4:65:8F:74:C8:F7:10:6A:FE:03:A6:FD:62:01:88:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51cc36a73e0bbe2b338c61fa1df595670735aa98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/17fa3e561ceb003db220c6140c6baa242cb0caf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/51cc36a73e0bbe2b338c61fa1df595670735aa98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:00:74:b7:80:23:0e:80:97:3e:b4:e4:41:c5:00:35:91:
         66:df:0b:24:74:af:c1:b9:aa:c1:55:50:1c:3a:17:37:b4:3d:
         46:a2:1d:1a:2e:72:5f:60:14:63:5e:56:f0:14:52:3a:0e:33:
         a7:e0:7d:de:2a:66:61:5a:cf:64:6c:a9:ff:cb:38:2e:b4:05:
         65:0e:15:ef:9e:0e:51:0d:25:d1:89:b0:7a:7b:02:fd:a4:f7:
         60:d2:e8:64:b7:a0:59:7d:ce:0b:a4:ec:89:61:e3:a6:2b:a5:
         d0:3b:c2:92:e2:2f:00:46:56:fd:36:fd:69:92:a6:d9:96:90:
         7b:74:61:2c:e9:72:fc:a5:8c:29:b9:59:66:06:2f:85:e9:82:
         63:f8:f2:21:13:b9:b2:c2:32:e7:3b:75:2b:e9:83:b3:05:6a:
         85:3b:7d:08:5f:b8:38:17:ca:9e:49:b6:f7:ee:d0:17:20:32:
         2f:b0:ba:c9:d4:ac:92:1e:9f:c9:1a:8d:04:1f:bf:49:cd:77:
         81:ff:c1:b5:cf:64:8b:55:36:1e:60:43:3f:ec:c7:ef:77:c4:
         b3:1a:e4:39:a7:de:bd:8b:c7:4e:a1:fa:e2:7d:71:f8:ec:35:
         66:32:93:b3:9e:19:68:df:b0:00:47:e5:ee:6e:cd:05:57:77:
         f0:43:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----