Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/8162578238579f74ceaa10cd84d470f9fba5f13b.roa
File:                     8162578238579f74ceaa10cd84d470f9fba5f13b.roa (raw, json)
Hash identifier:          8i4kK9TZlatRYm6mFXMRznHOgRmUINjBLE1C5+oY+WI=
Subject key identifier:   38:99:9F:C9:44:C9:B4:9F:19:96:65:A6:F2:86:B9:52:F0:84:07:AE
Certificate issuer:       /CN=05494298ecc662a5797ae3a631ee83303a944b5f
Certificate serial:       1017
Authority key identifier: DA:8F:F5:C6:F1:07:9E:BF:70:CA:47:BC:F1:09:87:55:78:74:25:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05494298ecc662a5797ae3a631ee83303a944b5f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/8162578238579f74ceaa10cd84d470f9fba5f13b.roa
Signing time:             Mon 30 May 2022 20:10:07 +0000
ROA not before:           Mon 30 May 2022 03:00:00 +0000
ROA not after:            Thu 30 May 2024 03:00:00 +0000
asID:                     269750
IP address blocks:        2800:bd0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4119 (0x1017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05494298ecc662a5797ae3a631ee83303a944b5f
        Validity
            Not Before: May 30 03:00:00 2022 GMT
            Not After : May 30 03:00:00 2024 GMT
        Subject: CN=8162578238579f74ceaa10cd84d470f9fba5f13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b5:6f:9b:19:6a:ca:86:07:69:c4:32:cd:c8:
                    41:c8:e5:cc:2e:31:c1:22:67:1e:8a:ac:e1:ed:9e:
                    e4:ff:03:03:ef:e6:0f:25:b1:c1:14:c5:4e:93:c3:
                    fb:98:03:a3:aa:57:8a:74:ed:ed:2e:d6:0e:46:f3:
                    45:38:8b:1e:bd:e5:be:56:7d:06:73:c4:3c:55:b0:
                    15:8c:e3:c2:2d:a9:ef:05:87:b1:70:0a:3a:92:42:
                    e6:2b:b7:8f:34:c0:f1:f3:e7:fb:e7:60:92:3f:2f:
                    1e:f1:61:78:c9:34:c2:a3:a5:24:c9:02:ef:62:94:
                    e7:90:29:af:f3:4b:c3:55:e5:45:ea:a1:05:b2:d1:
                    65:bf:54:bd:b6:94:c7:27:fa:44:85:eb:57:2d:e7:
                    00:85:f3:ce:b3:70:d5:c6:52:bb:ab:b9:4f:75:f0:
                    92:92:c3:e8:cb:8f:bd:33:ad:14:34:7d:a9:71:4e:
                    5f:14:be:aa:a9:be:d5:cf:52:a9:ee:89:c8:8a:91:
                    d5:f9:ba:1b:e8:8b:0f:83:67:9e:32:a9:b3:9a:df:
                    49:0c:16:c9:61:3d:76:94:49:ab:dc:23:cf:b9:89:
                    e9:bf:17:af:2f:9c:0f:48:e4:b5:01:b6:ca:a9:b0:
                    1f:1f:0d:f1:20:59:fb:04:97:67:88:d2:49:3f:13:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:99:9F:C9:44:C9:B4:9F:19:96:65:A6:F2:86:B9:52:F0:84:07:AE
            X509v3 Authority Key Identifier:
                keyid:DA:8F:F5:C6:F1:07:9E:BF:70:CA:47:BC:F1:09:87:55:78:74:25:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05494298ecc662a5797ae3a631ee83303a944b5f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/8162578238579f74ceaa10cd84d470f9fba5f13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef58a62f-40a8-4ba0-9635-921558eae0ff/05494298ecc662a5797ae3a631ee83303a944b5f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:35:2f:65:9b:39:04:ae:e0:3e:89:c7:e3:19:54:b7:e5:b8:
         fc:51:00:62:ba:eb:a0:71:01:6c:6b:cb:8f:24:f6:c3:92:bc:
         b8:ba:db:45:4b:20:71:b0:2a:a4:95:07:de:60:9a:8c:c0:05:
         51:ce:3d:4a:07:ee:5b:fe:1d:26:80:cc:d5:96:5e:c8:8c:36:
         df:8e:ca:08:f7:d0:b0:9c:eb:e3:7e:d2:4d:da:a4:05:3a:c7:
         0a:21:f2:fb:95:b0:22:0e:48:e2:e5:0a:d7:5c:0f:24:a9:86:
         82:65:22:93:75:6e:c7:a0:20:76:b4:28:49:27:18:69:4b:ba:
         8d:e3:51:86:3e:e1:85:03:01:2a:9a:2c:80:41:2f:87:4d:2f:
         a2:40:a8:bc:6c:0a:cf:e7:58:cb:45:3d:76:f1:61:01:6a:45:
         9b:2b:d1:79:12:ff:a0:c1:80:97:5d:5d:9c:95:3e:8a:a4:37:
         d1:01:14:73:0c:0f:2d:11:35:5d:dc:fe:1b:68:dc:4f:51:3a:
         4e:f3:ef:7e:1c:6c:8c:6d:01:39:95:91:c8:cd:0c:23:39:20:
         aa:7f:5e:45:c1:f7:c1:2e:1f:20:ad:df:8f:71:cd:dc:3b:95:
         dc:42:96:5f:c4:4c:e9:a8:36:37:d6:38:13:04:a7:e3:1b:58:
         9f:28:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----