Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/788ccba7aaf9e0cdbd4953d19eea9091e3e49177.roa
File:                     788ccba7aaf9e0cdbd4953d19eea9091e3e49177.roa (raw, json)
Hash identifier:          9mMZEl+mjpPNYxmGcG8/ClwG2c5zFc7q0U+wlUAd8oY=
Subject key identifier:   BF:25:C3:B3:B2:32:E4:4E:21:D8:3A:8C:48:95:29:FD:43:12:B5:C2
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       167C28
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/788ccba7aaf9e0cdbd4953d19eea9091e3e49177.roa
Signing time:             Sat 11 Jun 2022 02:00:01 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     267849
IP address blocks:        2803:ac60:2f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473576 (0x167c28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=788ccba7aaf9e0cdbd4953d19eea9091e3e49177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:d9:96:ce:25:c3:80:03:9d:13:8c:0e:79:
                    e5:66:33:10:b4:cb:d7:70:df:35:45:53:c4:39:ce:
                    2b:ad:59:c3:7d:b5:3f:6f:3d:46:7c:3d:11:22:97:
                    bd:52:1b:2e:eb:1e:e3:a1:9f:65:5b:32:02:78:bc:
                    1b:7d:ee:a8:54:fd:3f:0a:b1:5a:7b:a1:4a:63:f1:
                    af:0e:f0:e5:77:4c:ed:5d:8a:3e:9e:2b:ef:f6:bc:
                    a2:3b:1b:3c:0b:ed:b5:fd:23:c0:8e:80:cd:fc:63:
                    78:a6:a7:31:f5:7e:f4:d8:2e:3b:71:a7:0f:a2:db:
                    cf:66:4d:71:5a:75:a7:5e:ca:aa:2a:18:ab:09:f2:
                    c1:05:f4:69:cb:95:e2:c8:f1:52:8d:28:99:62:3b:
                    ec:f2:31:d6:a1:33:df:c2:f0:6a:de:b7:e7:85:d5:
                    74:81:00:b2:03:5e:8c:62:c6:21:86:8f:82:19:f0:
                    a6:20:42:dc:e7:34:06:30:82:57:ee:c6:bd:06:f9:
                    a3:71:0c:ac:d7:11:1e:83:00:b5:f2:73:39:b0:cf:
                    fe:39:89:ee:2c:10:22:38:e2:b5:b8:d6:b0:cb:19:
                    bc:c7:65:ec:a3:36:10:b4:98:7a:1c:d5:7a:0e:e7:
                    f2:4f:5a:e1:a8:1c:24:5a:68:b0:44:e8:f0:9b:94:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:25:C3:B3:B2:32:E4:4E:21:D8:3A:8C:48:95:29:FD:43:12:B5:C2
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/788ccba7aaf9e0cdbd4953d19eea9091e3e49177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:bf:76:8f:5e:ab:12:79:ca:96:96:cd:19:b9:f8:a4:da:
         74:0b:f5:41:24:9d:31:43:a7:1e:24:56:16:86:1d:ae:cc:e2:
         b1:cb:d1:00:cc:54:b9:0a:97:a3:49:8b:50:8d:f8:e0:2c:61:
         51:01:ec:7d:76:4a:bc:b5:48:3a:1c:73:aa:aa:69:c0:55:6d:
         08:ff:ef:18:0c:7e:17:18:f5:a1:c0:cc:0c:4b:4f:7a:5a:eb:
         4f:ba:0f:c6:b1:d1:7e:a1:01:1e:e1:9a:d5:fe:88:e2:de:bd:
         a3:06:b0:84:fd:5e:3e:45:5c:3f:1a:e8:5d:c3:3b:43:76:e0:
         24:39:a3:45:b2:84:71:3f:53:57:bf:86:a9:60:3b:16:eb:29:
         44:46:ac:77:ab:b4:00:04:7b:49:a3:f2:23:e6:14:a5:f4:d8:
         7e:c7:0a:ba:73:63:3c:56:5c:7b:29:30:95:89:1d:04:c6:0f:
         7e:15:ba:1e:98:fc:71:b2:0c:fa:a1:b5:bf:98:0e:70:ac:71:
         6e:35:c2:e0:b4:3f:dd:d9:ae:16:0d:44:2d:4d:e1:43:86:12:
         b9:77:ab:2a:52:9c:1e:e9:e6:57:83:72:07:84:ec:e6:b8:4c:
         63:52:54:91:2d:58:5c:8b:08:2c:84:7b:24:a4:46:96:26:4c:
         10:2b:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----