Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/97833a429c768f8de81b7bd0fab145990c5f56a1.roa
File:                     97833a429c768f8de81b7bd0fab145990c5f56a1.roa (raw, json)
Hash identifier:          YL5R2fxmWyaex+6ZWfEZVy7NTm6WnAKP1cSEzwkG9TA=
Subject key identifier:   AA:CD:F6:D6:B8:DE:AD:2C:76:9E:7D:59:70:28:D6:8B:5A:2B:48:6F
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       167491
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/97833a429c768f8de81b7bd0fab145990c5f56a1.roa
Signing time:             Sat 11 Jun 2022 01:56:04 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     267849
IP address blocks:        2803:ac60:20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471633 (0x167491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=97833a429c768f8de81b7bd0fab145990c5f56a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:ca:dd:0f:ac:0e:a9:2b:69:bc:a7:36:f2:
                    26:92:dc:e6:2c:3e:5b:0c:3f:33:ea:f9:ea:fd:16:
                    64:49:99:d6:12:a2:ad:c6:7a:1f:ec:84:80:33:9b:
                    1c:26:99:f7:1a:ca:f5:66:a1:ab:8b:9d:a1:f9:ba:
                    31:21:20:39:b8:0c:91:69:78:15:96:aa:d2:a1:3e:
                    5b:ac:58:b8:37:f0:d3:63:4c:0f:66:74:90:45:72:
                    91:9e:4d:06:73:01:23:15:d8:d5:79:00:b4:a8:08:
                    39:43:5d:1f:c6:17:27:cf:88:3d:d2:58:3c:dd:6b:
                    2c:1b:89:bf:a0:b7:ca:4c:91:10:d7:df:c9:5e:f0:
                    b8:d3:94:30:75:28:79:c4:67:2d:3a:d9:cf:b0:6a:
                    ba:05:a8:01:e7:49:b8:98:28:60:39:eb:b3:94:cb:
                    f6:b4:f9:83:55:6b:99:00:31:1d:b4:2f:8c:6a:a8:
                    24:7d:b5:66:71:92:30:37:8c:08:39:5d:8b:9f:1d:
                    99:17:14:fe:52:3d:1a:fc:7e:77:0a:b1:09:a8:ec:
                    4b:bb:e8:c1:e7:5e:c2:94:f2:8a:07:66:96:3c:2c:
                    eb:30:9d:7c:0d:3f:b6:f1:97:27:0d:08:6a:3b:be:
                    9c:0f:69:f3:44:c1:32:96:04:87:ca:eb:63:0d:44:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:F6:D6:B8:DE:AD:2C:76:9E:7D:59:70:28:D6:8B:5A:2B:48:6F
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/97833a429c768f8de81b7bd0fab145990c5f56a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac60:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:47:57:67:1c:a6:c4:c8:e1:e6:07:b8:64:8d:a9:0e:fb:
         50:16:92:a6:fe:a4:48:a2:38:f3:53:16:0b:97:22:83:71:1d:
         bd:17:66:c3:a6:c2:20:fc:2f:e1:ca:3a:36:5e:ff:a7:66:5d:
         6e:d3:91:8e:90:4f:b7:07:50:7b:fb:8e:01:0d:6d:4d:e8:85:
         21:1c:87:07:e0:33:e8:5a:4e:cc:a6:a0:43:59:ab:e7:05:12:
         22:ae:99:98:83:e7:39:a0:59:62:4c:3c:6e:98:61:2b:0e:22:
         ba:e3:45:d7:8a:a7:3c:9c:f3:a4:fc:f7:f5:b6:64:ef:b3:c0:
         ea:c3:d4:f1:e1:45:b0:4f:38:a1:aa:d2:90:0f:f3:ba:77:30:
         70:76:fc:80:aa:eb:ee:c5:8b:2a:ba:c8:18:0d:8d:21:17:a0:
         4c:71:2c:b5:83:6d:b8:a0:4b:98:56:a4:87:57:92:9b:82:08:
         60:ec:17:18:e4:8d:4f:e1:39:ad:f2:7c:40:5a:b0:f9:67:74:
         a6:a7:94:7a:d9:11:b6:3e:05:af:3b:03:98:ff:09:87:a8:13:
         cc:e3:06:56:1b:84:85:61:a4:43:12:2b:7f:09:08:ea:49:0a:
         c7:c7:5b:3b:31:96:43:38:fd:8f:36:d0:4f:4c:2a:48:17:74:
         aa:36:5f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----