Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2cdeac2-5dce-4688-b727-2c3d519cacfc/9a0fa55f9d09cb34cc6593839068ccce6eb54563.roa
File:                     9a0fa55f9d09cb34cc6593839068ccce6eb54563.roa (raw, json)
Hash identifier:          Ed7k08oh/8CIwcp2Zuu1r/XW/S3uxstCnDipv9sClfQ=
Subject key identifier:   81:5A:C8:97:50:08:A4:8A:96:EB:1B:05:08:CA:F3:6F:63:06:AC:20
Certificate issuer:       /CN=278ece83bf3d97a9a8cbb8804fdff61aa6de3b95
Certificate serial:       01CB
Authority key identifier: E8:E6:2F:A6:C6:39:37:54:F3:01:B2:43:CC:25:58:9E:BF:F9:55:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/278ece83bf3d97a9a8cbb8804fdff61aa6de3b95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f2cdeac2-5dce-4688-b727-2c3d519cacfc/9a0fa55f9d09cb34cc6593839068ccce6eb54563.roa
Signing time:             Wed 23 Nov 2022 13:46:40 +0000
ROA not before:           Tue 22 Nov 2022 13:44:21 +0000
ROA not after:            Sat 23 Nov 2024 13:44:21 +0000
asID:                     14080
IP address blocks:        2801:10:d800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278ece83bf3d97a9a8cbb8804fdff61aa6de3b95
        Validity
            Not Before: Nov 22 13:44:21 2022 GMT
            Not After : Nov 23 13:44:21 2024 GMT
        Subject: CN=9a0fa55f9d09cb34cc6593839068ccce6eb54563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:20:96:11:9d:94:04:de:85:56:19:9b:9e:2c:
                    b5:e9:b7:df:f6:06:a2:ba:e7:1c:35:af:fe:d0:84:
                    ad:e1:a3:dc:2b:b3:25:c0:72:32:4a:ef:10:8f:9e:
                    50:0b:53:59:55:5b:8a:78:f8:4d:54:93:d7:5f:b0:
                    1e:ce:8a:ab:e9:d2:a5:01:67:6c:71:a1:3c:c3:ca:
                    5b:d2:3f:f5:41:a3:81:59:00:b9:48:2f:82:47:d3:
                    69:fb:5f:51:0a:03:54:52:1d:47:d2:37:0d:84:a9:
                    e0:11:d3:5b:97:9f:0e:b2:16:59:bb:82:e4:fe:fe:
                    56:64:55:9f:a1:e3:da:d1:1d:6b:1e:b9:50:d8:57:
                    33:5a:5f:a9:13:2a:c2:4f:3e:e8:01:b7:0a:02:9e:
                    9a:70:23:c1:9a:fc:6f:8f:86:b8:cf:c7:4b:e7:42:
                    92:7b:83:7f:81:14:5e:93:c8:60:7d:f6:68:dc:66:
                    b3:91:9c:74:44:f8:15:b8:52:ca:f3:45:18:50:74:
                    55:ab:a1:9c:d9:af:e5:9e:41:44:ba:0a:8b:3c:b7:
                    74:24:69:1c:dd:4d:ba:cb:d6:c3:1e:08:07:3d:1d:
                    3b:c6:b7:de:c4:59:b8:de:f6:cc:91:bb:3e:d7:e5:
                    b5:e7:78:07:cb:5b:22:87:5a:69:e8:8f:6f:32:55:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5A:C8:97:50:08:A4:8A:96:EB:1B:05:08:CA:F3:6F:63:06:AC:20
            X509v3 Authority Key Identifier:
                keyid:E8:E6:2F:A6:C6:39:37:54:F3:01:B2:43:CC:25:58:9E:BF:F9:55:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/278ece83bf3d97a9a8cbb8804fdff61aa6de3b95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2cdeac2-5dce-4688-b727-2c3d519cacfc/9a0fa55f9d09cb34cc6593839068ccce6eb54563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f2cdeac2-5dce-4688-b727-2c3d519cacfc/278ece83bf3d97a9a8cbb8804fdff61aa6de3b95.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:d0:55:fe:e7:1f:e8:26:ee:fb:22:f7:0e:38:d2:7a:1e:
         3e:17:85:92:06:e4:f4:09:09:69:71:55:67:a8:41:d4:e3:a0:
         0a:75:22:36:80:e4:fa:90:67:a0:2d:55:59:6b:14:6c:e8:98:
         ca:26:f4:2c:93:7a:8e:e3:41:e6:14:a2:38:b3:f8:6d:45:36:
         56:e4:b0:6f:1e:f8:41:46:46:4c:ca:a1:18:64:5a:14:17:c9:
         55:4d:a0:57:d9:27:ed:fc:48:02:e2:73:59:ce:db:ed:ae:cb:
         d5:22:18:58:d1:43:bb:e5:2a:66:df:32:a0:71:36:8e:13:ed:
         60:25:4b:34:27:bd:e7:36:31:56:fe:9e:7b:ea:60:18:84:77:
         bf:a5:21:04:5a:01:fa:a0:10:87:a8:e3:1c:03:89:36:57:3d:
         fa:e6:c6:93:a1:41:67:09:fe:b8:6c:0a:4f:9d:33:a0:e7:9f:
         d6:1f:ce:c8:cc:dd:4f:79:77:0c:5e:f0:c0:60:da:85:b0:95:
         1f:2e:a5:a0:ba:55:a4:f5:1c:ec:62:7c:3d:77:73:7f:3e:14:
         d7:e2:33:b8:14:5b:66:ec:ff:27:2b:7e:8d:31:3d:7d:fb:c8:
         a7:49:cf:7f:91:ca:ac:9c:57:d0:63:42:79:d4:24:cd:12:ab:
         96:e5:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----