Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/7a40b54b0773643f3e3ec0063db62957846c7798.roa
File:                     7a40b54b0773643f3e3ec0063db62957846c7798.roa (raw, json)
Hash identifier:          8S7Ccla42kWOs9/U+204eB0+WUsAGQBIVOKHBRVfPYg=
Subject key identifier:   8A:ED:05:8A:CF:25:F6:1E:3D:5E:4C:B9:C6:1A:0E:BC:1F:2B:75:D8
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       16C16C
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/7a40b54b0773643f3e3ec0063db62957846c7798.roa
Signing time:             Sun 19 Jun 2022 05:33:57 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Wed 19 Jun 2024 03:00:00 +0000
asID:                     267849
IP address blocks:        2803:ac60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491308 (0x16c16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Jun 19 03:00:00 2024 GMT
        Subject: CN=7a40b54b0773643f3e3ec0063db62957846c7798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:e2:d6:57:ea:55:29:9a:0e:ab:7c:c0:19:
                    34:ef:8d:61:8f:6f:89:b7:82:d7:e8:c9:82:d2:81:
                    93:5f:f6:15:97:e1:06:08:06:0b:f7:df:15:d9:f8:
                    6b:e4:3a:22:a1:ee:88:78:30:95:b1:a5:ca:60:65:
                    56:bb:b1:10:bd:75:0e:b4:59:2e:4f:6b:f8:c5:19:
                    85:15:ee:a0:22:a8:e9:08:fa:86:7b:c2:19:d3:00:
                    d5:61:65:11:68:22:33:69:11:94:42:67:a1:7f:75:
                    55:e8:6d:89:05:6c:29:41:b8:52:ca:e6:7c:5e:25:
                    cc:ee:79:03:bc:96:ff:1c:5e:7e:f7:21:7a:ca:6d:
                    0a:32:62:c0:7f:63:a9:01:eb:fa:19:c6:69:e6:2f:
                    2e:ef:b2:23:82:fc:58:05:f3:77:ca:73:28:d5:30:
                    c1:1d:29:91:84:35:0a:63:d4:04:dd:05:b5:b3:16:
                    63:0c:a8:d0:f6:dd:d8:19:b0:96:5d:90:16:6c:70:
                    a5:33:2c:fd:a6:0b:ba:20:61:cd:bf:91:5a:e7:2c:
                    6e:63:18:2a:f4:cb:3f:cb:06:39:70:a1:97:23:c4:
                    da:80:ed:22:85:b2:f6:8f:26:a9:8f:9d:ee:8c:54:
                    33:49:41:9b:71:17:a3:28:94:2e:90:b8:7a:e6:b7:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:ED:05:8A:CF:25:F6:1E:3D:5E:4C:B9:C6:1A:0E:BC:1F:2B:75:D8
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/7a40b54b0773643f3e3ec0063db62957846c7798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:88:1d:34:74:5f:59:3f:12:29:27:0b:45:74:5b:9a:28:fb:
         c9:b7:91:da:a7:24:13:70:9e:c7:f7:af:ad:0c:55:b7:08:b1:
         c5:38:10:e8:74:0d:1e:70:cd:6a:8f:55:37:d9:32:f9:14:41:
         b7:fd:75:77:f3:8d:ab:11:1b:b2:41:74:a7:03:ca:59:fc:88:
         93:f0:49:a2:bb:09:a8:c6:03:f0:54:fe:9c:51:87:98:e0:21:
         b2:0f:1d:68:9d:40:51:a6:ca:97:e9:4d:9c:b3:db:b8:18:7e:
         e0:f7:f8:27:91:fb:ee:fa:d2:3f:45:c9:5b:48:78:8d:e0:f9:
         08:9c:a9:3c:d8:f4:f6:06:cd:47:13:02:13:b6:74:e8:f3:51:
         c8:34:e9:34:e7:d6:32:5e:e6:9e:f7:85:ae:93:a4:9f:32:36:
         48:9c:92:a7:43:32:bd:17:fe:46:38:c9:d9:db:43:87:d2:4d:
         19:1a:45:4a:4e:23:05:3a:46:ee:3b:76:19:d6:73:90:eb:6a:
         26:d0:49:7b:c9:3a:c3:d6:6b:d1:9b:b9:95:b6:a2:e0:c7:3e:
         73:8b:49:3f:c4:4c:c7:51:2f:b8:c3:7d:3a:32:00:13:7a:6d:
         05:4a:3c:ed:ec:82:b0:79:17:5c:11:71:d3:50:20:4e:c7:35:
         64:dc:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----