Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/835dae8ff892e06a7f7ea5d1e8293e99f1a27670.roa
File:                     835dae8ff892e06a7f7ea5d1e8293e99f1a27670.roa (raw, json)
Hash identifier:          LQ0mRFPJ1TBjFZygXnINMgIUsKGmzOPWIgQPcISXLZc=
Subject key identifier:   4E:0E:42:C5:7E:8F:E5:9E:18:52:F2:C1:58:B5:E4:51:B3:B4:C8:0F
Certificate issuer:       /CN=0ddbf792b115f55518c995da70f164795ee00d93
Certificate serial:       2B1A
Authority key identifier: 08:80:BE:5B:2A:D1:3B:A5:12:08:15:DD:84:DF:40:57:EB:AB:2D:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ddbf792b115f55518c995da70f164795ee00d93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/835dae8ff892e06a7f7ea5d1e8293e99f1a27670.roa
Signing time:             Mon 12 Sep 2022 22:06:23 +0000
ROA not before:           Mon 12 Sep 2022 22:01:02 +0000
ROA not after:            Thu 12 Sep 2024 22:01:02 +0000
asID:                     16509
IP address blocks:        2803:a810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11034 (0x2b1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddbf792b115f55518c995da70f164795ee00d93
        Validity
            Not Before: Sep 12 22:01:02 2022 GMT
            Not After : Sep 12 22:01:02 2024 GMT
        Subject: CN=835dae8ff892e06a7f7ea5d1e8293e99f1a27670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:10:9a:99:0c:5c:d8:62:6c:4d:88:0c:8e:
                    9d:bb:d8:ac:73:c0:df:c9:ca:67:49:17:b9:99:47:
                    40:58:79:70:bc:78:16:cd:31:23:56:84:68:11:91:
                    c1:6d:f0:cc:24:f3:6a:2c:41:f9:9d:e1:55:80:31:
                    bb:d7:94:53:aa:6a:ef:60:ae:18:41:fb:12:05:b5:
                    e7:1c:a5:9d:81:b1:c8:f3:07:72:e9:ed:13:dd:f0:
                    c8:4d:69:13:2d:84:a4:4b:6c:b8:28:87:34:e7:6f:
                    fd:a8:0c:99:06:8b:aa:fd:a3:83:95:00:18:b5:61:
                    5a:be:67:40:f1:a9:72:6f:0c:69:b0:43:1e:f6:47:
                    e2:03:ba:9c:4a:f9:e2:ce:af:1b:5c:43:64:e2:6d:
                    67:c7:f6:88:d2:6e:cb:09:6b:d9:b0:b7:0f:1e:db:
                    53:4b:6e:d1:8e:df:36:32:14:17:77:31:ec:b6:f2:
                    50:29:75:4a:fc:52:0d:17:2e:c6:38:89:0d:2b:af:
                    47:2d:0e:5a:a4:f6:47:36:87:c9:7e:0b:54:da:2b:
                    6e:01:a8:15:25:27:de:d1:db:72:b1:f9:07:46:0d:
                    c5:6a:c5:12:5f:ac:73:34:ba:62:af:bb:8a:cb:d9:
                    bb:86:bd:b8:d9:df:e1:a5:1d:65:4f:32:73:46:04:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:42:C5:7E:8F:E5:9E:18:52:F2:C1:58:B5:E4:51:B3:B4:C8:0F
            X509v3 Authority Key Identifier:
                keyid:08:80:BE:5B:2A:D1:3B:A5:12:08:15:DD:84:DF:40:57:EB:AB:2D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ddbf792b115f55518c995da70f164795ee00d93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/835dae8ff892e06a7f7ea5d1e8293e99f1a27670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/0ddbf792b115f55518c995da70f164795ee00d93.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a810::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:15:cb:d5:93:7e:2e:2d:7c:4c:e9:6b:a5:a5:f4:6c:08:90:
         a0:ee:83:b0:98:59:64:d1:4a:69:7e:3d:10:f0:b6:11:59:17:
         46:ea:f4:18:8a:6f:5f:a8:5b:87:02:55:d2:32:79:dd:70:83:
         23:32:af:46:a9:66:43:97:67:ff:b3:4a:fe:19:b1:ae:a7:f9:
         7e:f1:36:77:60:26:ee:ae:08:1c:c0:b0:ad:a1:bf:a5:63:ef:
         63:a9:f7:93:6d:74:7b:63:fd:75:d6:0a:73:d6:e2:1a:ac:b5:
         85:3f:3d:20:d3:2d:23:08:c9:d7:de:d4:71:06:93:7e:c3:6f:
         45:e2:bc:99:19:7d:58:4b:97:d7:f8:56:f9:f2:5c:a0:01:bc:
         58:06:c1:95:bb:c0:d0:d4:e6:ee:51:65:46:50:7e:8a:a2:e1:
         3f:30:c9:7d:f5:7a:3c:ac:df:95:10:b0:7a:a9:10:24:58:10:
         fd:90:99:d9:da:66:44:e0:07:6d:ec:05:0f:cd:05:af:e3:fa:
         e0:03:53:ee:60:f2:5c:40:cf:4f:85:73:79:8d:35:ac:ac:5a:
         e4:a0:44:11:e5:9b:9b:4b:63:21:77:de:10:2c:4c:9d:5f:7c:
         a3:67:12:d6:a7:61:a8:3d:34:22:81:4b:3b:82:ab:d1:5c:13:
         b8:36:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----