Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/07f041221b8bae3fc3366645c3d7ab643ff27f3a.roa
File:                     07f041221b8bae3fc3366645c3d7ab643ff27f3a.roa (raw, json)
Hash identifier:          brLv9/SmAg3neRNj0MO+EMUISffR/MQfnqwquz0dVdo=
Subject key identifier:   2C:9F:C8:93:13:C1:D5:91:65:62:F8:AA:04:06:67:E0:88:3D:93:37
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       16808D
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/07f041221b8bae3fc3366645c3d7ab643ff27f3a.roa
Signing time:             Sat 11 Jun 2022 02:02:35 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     267849
IP address blocks:        2803:ac60:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474701 (0x16808d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=07f041221b8bae3fc3366645c3d7ab643ff27f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:f9:5f:2d:4a:52:2a:f5:f2:61:44:91:f3:
                    d6:67:0d:10:78:4a:6d:be:02:2b:cd:ca:07:a9:15:
                    f6:f8:74:c8:08:fb:e6:98:dd:f4:fa:2b:7f:21:f5:
                    1f:7a:d2:f6:26:9d:dc:07:76:e2:5c:8b:17:be:38:
                    20:1b:8b:bc:60:be:fd:06:34:7d:3e:6d:39:60:0c:
                    2a:aa:38:15:75:e1:da:20:40:63:51:38:8e:a6:ce:
                    9c:15:63:4b:73:51:09:ac:4e:84:0c:01:e4:fd:7a:
                    09:27:f4:7b:bc:88:94:dd:7a:7a:9f:97:7e:20:b4:
                    88:5b:30:44:b9:69:38:48:ce:3e:12:a5:d0:26:7f:
                    54:67:b5:85:59:88:e2:05:f7:b4:f2:d7:15:ef:2f:
                    d1:c5:b5:c2:c2:da:3e:f0:5f:e2:b1:52:96:60:cd:
                    45:c0:13:74:81:0c:43:6a:c4:9c:7a:f7:d5:be:93:
                    41:77:5c:58:de:c7:85:f2:e0:df:c7:07:7b:15:52:
                    87:a7:89:ae:e2:0f:47:df:7b:90:38:cd:32:bd:4b:
                    ec:bc:b4:bf:2c:bb:7e:bc:64:5b:d9:a6:92:a5:9b:
                    3e:23:ed:43:25:60:c8:2a:c7:d7:e1:f6:6a:f7:39:
                    ed:d6:cb:4d:fc:b2:44:a4:e3:4a:19:4c:61:7e:a2:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:C8:93:13:C1:D5:91:65:62:F8:AA:04:06:67:E0:88:3D:93:37
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/07f041221b8bae3fc3366645c3d7ab643ff27f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:f3:9c:6b:79:c1:ff:7a:fa:5d:fc:16:34:12:5f:88:3a:
         3d:75:3e:70:fb:f5:b5:e2:b3:f2:60:78:aa:31:e8:20:30:2f:
         7c:29:bb:20:dd:28:4d:3b:1e:07:d9:cd:7a:fb:f0:3d:72:d2:
         79:f0:d4:69:56:2e:d9:53:4c:d4:c2:5e:ab:52:1a:6f:48:99:
         2b:d7:4e:96:0a:5b:a4:87:bc:47:1d:0d:a7:3d:7f:3d:c5:6a:
         7b:ab:9a:b2:53:03:0d:f8:c0:45:c3:c3:95:8d:90:1d:bc:e0:
         75:38:0d:ed:f4:98:a2:78:b2:bf:04:05:00:80:8d:d8:78:ea:
         2f:71:f3:79:7f:7e:4e:18:9f:d3:5f:67:b2:b8:38:b4:01:95:
         27:09:73:e1:1e:69:fd:dd:6c:49:b4:73:08:20:50:66:d6:e3:
         b0:e8:49:4e:85:8c:5d:ce:4d:91:d7:d5:93:5a:60:ae:eb:1c:
         72:b5:c3:53:00:43:8b:4d:65:e1:a6:19:49:bd:dd:b8:7a:45:
         b0:97:cc:80:26:54:87:b4:88:6d:fb:d2:0f:5f:39:87:ee:73:
         d4:69:ce:b3:f7:90:3f:7f:dc:9f:d1:d4:43:1b:c5:1b:84:19:
         8f:84:03:c6:2a:e6:05:a6:23:ad:bc:89:49:fd:f2:5e:32:73:
         9d:52:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----