Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/724866cbf48dc22f9ea0687967c09a1fb6361118.roa
File:                     724866cbf48dc22f9ea0687967c09a1fb6361118.roa (raw, json)
Hash identifier:          ginzv7WS7TIf5FaxN4dJlhGSsnuVuFUydS0/2JMbvJs=
Subject key identifier:   3C:B9:2C:AE:48:C5:1C:54:AF:DB:D5:81:96:29:36:06:5A:99:EB:50
Certificate issuer:       /CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
Certificate serial:       1AAB84
Authority key identifier: 65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/724866cbf48dc22f9ea0687967c09a1fb6361118.roa
Signing time:             Fri 20 Jan 2023 05:36:24 +0000
ROA not before:           Thu 19 Jan 2023 05:35:33 +0000
ROA not after:            Mon 20 Jan 2025 05:35:33 +0000
asID:                     264637
IP address blocks:        2803:af60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747844 (0x1aab84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
        Validity
            Not Before: Jan 19 05:35:33 2023 GMT
            Not After : Jan 20 05:35:33 2025 GMT
        Subject: CN=724866cbf48dc22f9ea0687967c09a1fb6361118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:70:72:f3:1e:44:d7:cc:b3:ab:7b:27:92:
                    8d:4b:60:9f:67:01:5e:b2:03:12:72:61:fa:33:78:
                    0c:7b:b3:80:8b:23:11:86:3b:48:8e:34:1b:52:c4:
                    5c:61:e3:1b:e7:be:f6:6e:be:6e:2a:6f:a6:10:6f:
                    c4:79:86:bb:e9:87:c5:2b:74:ac:48:e9:f1:ec:2f:
                    d5:f5:09:0d:62:14:44:8e:88:c2:ce:d5:55:3b:d5:
                    18:91:a9:14:ee:75:ed:ef:41:11:93:e2:c8:8c:83:
                    6d:3c:7f:7d:de:01:4a:aa:6a:42:b4:7d:b3:5d:1a:
                    c1:e1:31:63:c6:51:79:13:d2:f9:3f:20:d5:ed:13:
                    30:6c:23:7a:c4:5a:92:6e:27:c5:38:81:fa:56:fd:
                    90:8e:f2:76:ba:45:68:59:b4:fa:67:5f:2e:06:3c:
                    7c:41:98:f3:0e:9f:67:ad:31:75:ab:ad:06:38:59:
                    1a:9a:b9:fb:fb:74:f9:5f:bb:2a:2c:32:fc:f0:5a:
                    4f:1d:f9:67:8a:fc:39:17:20:cc:2a:3d:0d:ef:b9:
                    9a:6c:c7:72:02:d5:47:3f:3d:7a:48:16:05:e7:53:
                    42:16:81:67:24:10:52:78:cc:6e:db:f7:c7:d0:ac:
                    8a:8e:dd:d5:b7:f3:59:30:e9:1c:41:25:28:9b:88:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:2C:AE:48:C5:1C:54:AF:DB:D5:81:96:29:36:06:5A:99:EB:50
            X509v3 Authority Key Identifier:
                keyid:65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/724866cbf48dc22f9ea0687967c09a1fb6361118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:8c:e7:6c:62:4c:48:65:5d:23:fe:a8:7e:a0:dd:d4:26:ac:
         66:c1:72:20:ce:6d:c5:fb:9d:4c:c4:7e:38:c7:bb:5d:c0:16:
         0d:e2:17:5f:78:fd:29:5a:db:af:a4:08:98:3a:3b:1b:a4:75:
         1b:54:4b:7e:15:68:22:17:e1:62:ef:ce:52:f7:da:f7:3a:27:
         92:59:40:6d:c5:b2:43:25:b8:d2:17:f8:42:5a:09:cd:32:8f:
         0d:b2:12:9c:9a:10:c2:85:68:9a:0b:93:0b:55:0d:ac:78:aa:
         0e:33:9f:c5:ae:a9:91:08:ca:38:cc:90:21:87:3c:5f:fb:a2:
         e3:bf:86:17:b1:3d:b8:e4:2d:19:33:15:c6:f4:d8:cd:71:ec:
         84:7d:b7:62:41:96:c0:63:a0:2f:8a:84:93:61:9f:06:88:24:
         b9:8f:78:5f:db:52:40:a9:2b:32:0e:17:eb:a0:d7:25:f4:51:
         d6:5e:87:3b:2d:53:75:45:c5:56:f1:cd:b2:77:20:91:6c:01:
         1a:ad:e5:1e:17:71:10:d7:82:85:b2:2a:ee:12:95:7c:85:85:
         00:be:b8:70:c0:5b:90:e9:4b:94:d8:3b:e0:62:1e:cc:01:f9:
         fb:10:81:db:9a:e4:ec:15:c8:51:5e:74:04:c9:ab:6c:45:07:
         bf:dc:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----