Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/fc3bd512323a61eb162eae4dae1f1c4d29f3f73a.roa
File:                     fc3bd512323a61eb162eae4dae1f1c4d29f3f73a.roa (raw, json)
Hash identifier:          7zTOLNZwgj30ipfrQpyxFGWUA848u/q10IZUo3i9OkA=
Subject key identifier:   F1:29:A1:2C:91:44:B0:63:2C:B9:4F:16:BB:90:44:8C:29:A5:E7:F9
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       16A39C
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/fc3bd512323a61eb162eae4dae1f1c4d29f3f73a.roa
Signing time:             Thu 14 Apr 2022 16:40:03 +0000
ROA not before:           Wed 13 Apr 2022 03:00:00 +0000
ROA not after:            Sat 13 Apr 2024 03:00:00 +0000
asID:                     266841
IP address blocks:        2803:52c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483676 (0x16a39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Apr 13 03:00:00 2022 GMT
            Not After : Apr 13 03:00:00 2024 GMT
        Subject: CN=fc3bd512323a61eb162eae4dae1f1c4d29f3f73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:93:75:73:1b:9f:84:07:47:2d:eb:b3:e7:f1:
                    6f:43:47:4d:04:f3:7a:46:84:70:e7:11:02:6f:54:
                    3f:16:65:95:0f:d4:ac:20:fc:44:06:b2:49:4f:79:
                    5b:07:cf:ed:f0:68:f2:e4:90:46:9e:a1:3f:3f:db:
                    13:53:53:0e:a1:09:d8:fb:56:03:e2:74:b3:5a:8e:
                    88:a5:78:ba:d7:e0:be:43:0d:c5:5e:34:5c:7d:0f:
                    ca:0d:1d:dd:fc:0e:05:17:05:4b:65:4e:67:79:4c:
                    47:ad:77:57:ab:84:94:51:5a:bd:7b:6a:1f:04:f1:
                    b6:d8:85:5f:fa:f9:15:be:9b:4b:fb:ed:6d:74:66:
                    42:82:d1:1c:dd:1a:a3:f7:91:9a:32:17:50:f5:cd:
                    99:30:0e:47:5c:ea:05:b2:2d:37:9d:f8:04:f3:d6:
                    f9:15:dc:47:39:2f:f3:74:15:72:9f:34:35:3f:df:
                    20:17:61:cb:79:42:19:cc:7d:52:76:7c:de:41:05:
                    b0:c5:41:d3:87:11:99:21:f8:74:32:ea:0a:d2:81:
                    24:00:31:b9:0d:2a:fd:12:13:25:99:91:71:04:43:
                    f2:ad:ea:62:44:87:0f:fe:77:dc:11:bf:6f:5a:3e:
                    2d:14:61:bd:7a:79:fa:b2:6a:a1:0f:f3:5d:a1:c1:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:29:A1:2C:91:44:B0:63:2C:B9:4F:16:BB:90:44:8C:29:A5:E7:F9
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/fc3bd512323a61eb162eae4dae1f1c4d29f3f73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:52c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:73:47:8a:65:9f:7f:c0:2c:ce:8d:a6:c6:d1:32:a9:ad:de:
         70:76:6f:09:b1:c7:08:cb:48:07:bf:42:61:52:5d:d8:c1:40:
         28:7b:ab:94:b0:d3:a4:15:14:5d:e6:9b:31:93:12:2a:90:0b:
         20:d6:00:e0:e9:9c:f2:44:72:94:e9:b7:4a:8b:7c:73:9f:24:
         b5:f6:93:f6:49:06:69:da:22:30:d2:82:51:54:89:1c:57:b5:
         7b:5b:a5:55:4b:d4:c7:d5:57:6f:c4:19:f7:1c:08:7f:23:5b:
         af:74:96:81:a6:a3:bf:ca:17:66:55:7c:37:e2:b6:93:ce:83:
         b6:c5:30:2e:a8:02:82:8c:29:c7:19:ee:f1:e9:f5:dc:fd:97:
         20:1f:ba:3c:02:81:e8:4c:da:b7:34:b8:cf:86:47:e1:4d:8c:
         9f:f5:23:b9:2d:c3:a2:6e:2d:1b:00:d7:7d:31:f2:d4:85:61:
         b5:00:fe:10:22:f7:91:0d:12:bb:d9:be:d0:a3:4c:14:c3:f7:
         0b:fe:ce:57:bc:8b:35:ff:7a:8c:10:66:ae:3f:7a:74:4c:29:
         c3:1b:03:7a:c2:e6:7a:d9:a6:1c:9b:57:da:2a:96:f8:13:0f:
         f3:a7:8c:64:0e:f2:cd:7d:fc:4c:52:7e:c0:06:b3:96:dd:4d:
         03:99:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----