Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/38ec38f7c9665e7a2a349822142e9f11eb71c5b5.roa
File:                     38ec38f7c9665e7a2a349822142e9f11eb71c5b5.roa (raw, json)
Hash identifier:          fyDrxGDFEKch4bWy7171Nkej4Xp4fiaU1dpOI3F91t0=
Subject key identifier:   00:0F:43:CD:83:13:CB:B3:05:16:6B:81:F5:98:40:49:E1:B2:CC:74
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       17B81C
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/38ec38f7c9665e7a2a349822142e9f11eb71c5b5.roa
Signing time:             Fri 13 May 2022 16:02:33 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     16509
IP address blocks:        2801:0:62::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554460 (0x17b81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=38ec38f7c9665e7a2a349822142e9f11eb71c5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:93:d8:96:ef:96:93:6c:f3:46:d7:ee:e9:
                    f5:13:87:8b:ae:4a:b2:37:fc:2d:1e:94:fa:ea:77:
                    74:31:07:6c:e7:a7:3c:c1:db:28:1f:bc:ce:9a:6b:
                    d1:5a:b0:7b:ed:65:94:58:e2:f3:25:58:45:7b:cf:
                    a4:9d:ab:49:e3:dc:69:60:e0:a0:aa:39:8e:7d:2b:
                    40:b5:5c:1d:10:cd:83:a8:2c:45:27:5d:a2:a4:7d:
                    14:6c:4b:1b:ba:77:36:9a:eb:9d:95:b0:6c:ac:fe:
                    48:ae:f7:5e:74:60:01:98:c7:8b:14:7c:4a:b3:5b:
                    10:3c:55:ca:94:71:8a:bb:55:b3:4b:3c:9b:ca:22:
                    68:9c:93:b6:67:5e:b9:4d:6d:73:e2:a9:b5:d3:7f:
                    32:df:37:d0:37:38:99:a0:0b:6c:86:15:53:23:7e:
                    3d:1d:42:fe:73:bc:71:ca:c2:56:50:95:39:13:5f:
                    2d:e0:77:b8:1b:15:b3:b7:10:ce:15:8b:38:52:51:
                    78:8a:c0:64:3a:d8:da:38:a7:4c:3c:42:49:5f:3b:
                    e2:a9:09:93:f8:63:9e:54:c2:b5:35:4a:5d:e5:61:
                    e2:46:2d:c6:03:27:54:5a:ee:3b:ee:e7:f9:3f:f4:
                    17:41:0e:db:aa:eb:89:99:91:b5:e4:b2:d0:7b:d6:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:43:CD:83:13:CB:B3:05:16:6B:81:F5:98:40:49:E1:B2:CC:74
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/38ec38f7c9665e7a2a349822142e9f11eb71c5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:62::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:d5:7c:56:20:e9:bb:f0:45:d2:70:06:92:ce:8c:a7:d9:f0:
         ed:f7:a0:86:fc:80:43:45:cc:99:00:4a:bc:a4:51:be:f9:c9:
         91:2c:ed:ae:ba:82:b9:89:d3:4f:3a:3d:a3:06:4c:ba:e6:c0:
         f8:21:92:53:3b:3d:17:bb:9f:23:b8:f2:a4:23:08:f5:40:d5:
         d5:62:15:41:ee:f4:62:fc:22:23:13:6a:a9:fd:96:a1:84:48:
         80:6a:74:61:4a:22:3b:04:a3:75:28:e6:2f:c9:cc:b5:32:9f:
         17:2b:a6:db:5b:e3:c1:71:35:f5:42:ac:21:41:cc:19:cb:d3:
         aa:f7:f8:0e:44:fc:49:0a:b7:ec:ff:b9:9d:76:77:38:30:72:
         7a:d0:7f:f1:cd:98:8b:e2:bc:39:69:a5:59:ac:1f:46:fd:24:
         20:14:83:37:3b:58:d9:04:c8:4a:7c:cd:df:1a:5a:d7:d1:c8:
         34:5b:21:1e:a0:5d:e5:dc:e0:36:dc:46:52:89:1e:b2:eb:72:
         ef:f8:f1:d9:ac:8c:51:39:17:49:f7:35:73:9c:62:62:e7:6f:
         ff:27:c1:fe:ef:bf:b2:fa:1e:7f:a9:f5:3b:5e:26:2c:3d:cb:
         00:cb:10:af:96:9c:ff:8e:c7:96:e7:2a:26:6a:05:42:11:55:
         81:b4:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----