Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/cf613c9d72d3dbd6b4253d11378a8e1eaa7d5879.roa
File:                     cf613c9d72d3dbd6b4253d11378a8e1eaa7d5879.roa (raw, json)
Hash identifier:          mmcScitwaGQKmQJLmlP37NhKpkaq5UPk9sDsVSYsrZg=
Subject key identifier:   51:44:1A:41:98:08:31:55:2E:56:8A:24:96:63:3E:84:2C:87:CF:DD
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       17A30E
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/cf613c9d72d3dbd6b4253d11378a8e1eaa7d5879.roa
Signing time:             Tue 10 May 2022 23:36:42 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     16509
IP address blocks:        2801:0:60::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549070 (0x17a30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=cf613c9d72d3dbd6b4253d11378a8e1eaa7d5879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:0d:73:64:c8:df:c3:62:ca:fe:c0:82:9a:
                    77:f4:9d:77:b7:28:c8:92:4e:6d:d2:32:25:17:f8:
                    97:6c:00:6c:d0:1d:1a:e4:9b:f0:d0:ff:c1:ee:e1:
                    58:16:78:ba:d1:d5:8a:1a:b9:a6:29:64:22:0b:de:
                    21:e7:06:69:4e:64:9e:4e:3f:09:21:64:13:5a:14:
                    62:11:a3:1c:61:83:b6:54:ef:3e:44:a4:52:aa:af:
                    76:9a:10:ce:a0:7a:97:c9:09:b8:8b:f4:51:f6:d1:
                    65:5b:0a:67:6d:e6:b0:42:41:a5:56:a3:89:a3:25:
                    39:84:64:53:ac:ca:2a:f1:77:f7:a2:77:86:ef:79:
                    87:b9:92:f6:66:f5:7a:d9:e8:da:d9:32:12:69:67:
                    6e:17:02:34:dc:1c:a3:b8:51:f5:8f:79:a1:ae:24:
                    fd:64:9c:eb:38:8f:a5:1e:ad:9b:7f:3d:e8:92:93:
                    f8:af:7b:92:a8:24:03:76:8e:4c:22:64:27:4d:0d:
                    e7:b3:52:dd:f1:fe:b8:5c:b6:68:0a:02:52:f6:05:
                    62:8f:b7:f1:b6:ee:01:f0:f0:3f:4e:c7:24:88:48:
                    40:09:38:ff:44:45:5b:73:43:b5:5a:bb:2d:18:5a:
                    95:f1:5e:1e:6d:26:9e:02:14:b3:c4:f8:12:01:aa:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:44:1A:41:98:08:31:55:2E:56:8A:24:96:63:3E:84:2C:87:CF:DD
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/cf613c9d72d3dbd6b4253d11378a8e1eaa7d5879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:60::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:d7:20:4e:09:85:81:cd:67:0e:38:13:d0:12:9e:63:24:
         e2:ca:26:b9:fd:49:7d:fd:c1:e3:0f:49:55:3c:6f:83:a4:ec:
         13:d6:e1:d4:d1:e3:8b:20:84:d4:f1:c5:87:8c:7a:2d:c1:a4:
         61:f5:e3:00:39:0e:ad:32:56:1f:e8:85:0b:c1:5f:5a:ba:60:
         65:67:87:72:51:87:13:7a:f5:c5:1c:99:35:48:35:18:25:6a:
         5c:63:37:a2:60:4d:54:9d:2d:1c:bb:c1:33:d7:cf:44:d5:2b:
         75:37:0b:dd:e9:28:9a:d4:2a:21:79:dc:72:22:72:29:fd:8a:
         a0:16:56:a4:e3:f3:a4:6f:b7:02:da:6f:3a:9f:50:97:e2:12:
         4f:a5:11:24:5e:54:f0:c2:d6:53:83:2c:92:33:c5:5d:82:84:
         ca:03:fd:ec:3f:c5:a9:04:e0:ae:9c:82:fb:93:34:b7:f0:71:
         99:97:b6:e4:fa:e6:3f:05:12:84:00:e8:d3:8d:65:d6:43:08:
         55:c7:67:e2:9e:31:37:fc:35:24:52:cd:c3:51:74:1a:ca:4d:
         08:9a:e4:3b:1f:f0:ff:6c:90:92:df:a0:fb:15:7a:da:ee:88:
         2f:86:9a:72:bd:66:50:3f:e5:66:c5:eb:cc:4e:14:2a:05:6d:
         c7:7e:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----