Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/6680d0949b3fc4710b921c0290ebe8c60e8f3c79.roa
File:                     6680d0949b3fc4710b921c0290ebe8c60e8f3c79.roa (raw, json)
Hash identifier:          Vn4oF1OJgE2HtN37tbJQuItscYdOPhdRVXqq+yVhIyA=
Subject key identifier:   CE:B6:B1:6E:14:0B:D6:5D:EA:E0:8B:04:AA:08:2C:1B:D1:D5:4A:6D
Certificate issuer:       /CN=22186b09ccdf865006a12efd8444a8fa73b7c154
Certificate serial:       0285
Authority key identifier: B0:3C:3B:73:C9:BE:F4:82:69:CA:4E:F8:7A:47:22:56:79:FB:84:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22186b09ccdf865006a12efd8444a8fa73b7c154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/6680d0949b3fc4710b921c0290ebe8c60e8f3c79.roa
Signing time:             Wed 07 Sep 2022 16:04:51 +0000
ROA not before:           Wed 07 Sep 2022 16:01:31 +0000
ROA not after:            Sat 07 Sep 2024 16:01:31 +0000
asID:                     272855
IP address blocks:        2803:2290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22186b09ccdf865006a12efd8444a8fa73b7c154
        Validity
            Not Before: Sep  7 16:01:31 2022 GMT
            Not After : Sep  7 16:01:31 2024 GMT
        Subject: CN=6680d0949b3fc4710b921c0290ebe8c60e8f3c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:f1:43:0c:5d:de:5d:b7:8c:e7:5a:d3:04:
                    39:61:e0:2f:e7:f8:1b:43:4b:e8:56:7b:fc:78:ef:
                    d1:1c:e5:bb:e9:84:b8:a7:d5:47:73:a3:b1:84:32:
                    dd:d6:15:1c:f5:bf:3b:91:13:f4:bd:8a:7d:13:b9:
                    48:5e:79:75:fb:e4:fb:4b:a9:b6:62:41:da:97:a1:
                    d3:59:63:ff:ed:e4:7e:12:75:f6:15:5e:6e:4c:16:
                    19:22:02:89:94:67:21:16:da:87:3b:2b:f6:43:53:
                    62:ba:4e:15:37:c7:03:b7:79:1e:5b:9f:21:ba:3f:
                    eb:89:46:5d:c8:b0:1e:be:a8:1d:fc:10:d2:ff:f6:
                    de:5e:b4:1c:b2:37:19:20:3b:94:b8:5e:7c:ef:51:
                    fa:15:11:b5:fd:89:58:bb:c4:9f:66:c4:24:8d:9e:
                    69:52:ce:58:fb:f0:a5:22:47:15:cf:b6:9f:e0:de:
                    d3:5a:1c:02:be:e4:7b:e2:94:74:c5:e8:a8:07:57:
                    c5:dd:90:de:d2:47:75:7a:2f:bc:fb:b7:20:08:07:
                    37:ee:bd:b5:d4:fb:ab:3b:f7:ea:55:8f:65:53:3b:
                    d2:47:d6:f1:10:f5:af:23:55:c1:43:17:fc:a8:1d:
                    9b:f4:bf:03:dd:fd:3e:58:fb:a3:02:e5:80:e6:7f:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:B1:6E:14:0B:D6:5D:EA:E0:8B:04:AA:08:2C:1B:D1:D5:4A:6D
            X509v3 Authority Key Identifier:
                keyid:B0:3C:3B:73:C9:BE:F4:82:69:CA:4E:F8:7A:47:22:56:79:FB:84:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22186b09ccdf865006a12efd8444a8fa73b7c154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/6680d0949b3fc4710b921c0290ebe8c60e8f3c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/22186b09ccdf865006a12efd8444a8fa73b7c154.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2290::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:25:37:68:f4:90:81:13:ac:71:07:82:c6:68:7c:2d:3c:
         14:1f:f7:13:e8:43:88:b5:9f:18:83:48:17:74:7e:f9:1a:cf:
         b1:6c:0e:78:e1:b9:de:f4:61:05:d9:f2:8b:f2:b8:17:d2:32:
         be:a2:35:23:cb:e7:82:27:c8:f8:31:47:fc:61:09:fc:a8:b5:
         40:3d:37:2c:9d:34:70:75:ea:3a:34:16:94:63:24:3e:05:68:
         a9:77:02:62:da:b5:f4:81:99:d3:fe:a9:35:70:55:0d:2c:03:
         00:5e:76:9e:61:c8:44:b0:63:04:55:ba:96:fe:6b:3f:b8:48:
         1d:52:f0:63:8f:5d:10:65:89:f7:a4:11:62:cb:11:43:8a:7b:
         3b:ee:df:a2:89:88:36:ac:b4:5d:eb:d1:c5:2d:91:56:a8:4f:
         83:70:10:05:c5:80:cc:31:8d:fc:b9:ac:07:fe:f2:41:41:c9:
         2c:2e:88:25:2d:a5:b4:14:d7:0f:85:77:c0:65:5d:f2:57:1e:
         ea:98:5c:09:4e:da:5a:a4:1e:3a:23:5d:ea:72:e8:c0:1c:28:
         46:74:c7:cb:1e:26:27:d8:8b:c3:d7:b7:55:d6:52:dd:5c:36:
         1d:c5:14:35:c5:ed:10:dd:89:a0:08:6d:27:92:79:0e:8d:f4:
         af:31:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----