Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/357de8edcc5ba6f6e2843da07a2bc06ebc6b1f0d.roa
File:                     357de8edcc5ba6f6e2843da07a2bc06ebc6b1f0d.roa (raw, json)
Hash identifier:          G1lkH8DvRQXCfyvb22rgfIfVfsRdyxzXeNbDrIJMHkU=
Subject key identifier:   07:6B:9D:E5:69:41:74:E7:00:A7:AA:3A:0A:8F:0E:EF:76:9A:7F:5B
Certificate issuer:       /CN=228e26e6d35fd1c575922b6f33809c64b17fdcdf
Certificate serial:       021978
Authority key identifier: CD:09:B3:F6:D7:21:DF:00:59:16:18:1A:54:28:98:85:00:80:D9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228e26e6d35fd1c575922b6f33809c64b17fdcdf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/357de8edcc5ba6f6e2843da07a2bc06ebc6b1f0d.roa
Signing time:             Mon 29 Aug 2022 14:53:27 +0000
ROA not before:           Mon 29 Aug 2022 14:52:37 +0000
ROA not after:            Thu 29 Aug 2024 14:52:37 +0000
asID:                     13489
IP address blocks:        2801:1c:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137592 (0x21978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228e26e6d35fd1c575922b6f33809c64b17fdcdf
        Validity
            Not Before: Aug 29 14:52:37 2022 GMT
            Not After : Aug 29 14:52:37 2024 GMT
        Subject: CN=357de8edcc5ba6f6e2843da07a2bc06ebc6b1f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:41:51:1c:94:df:3b:af:a9:1b:b2:b3:19:9a:
                    3d:61:0e:28:10:a5:1d:8c:69:01:59:3d:63:f7:27:
                    fa:2d:42:a1:f0:6e:20:52:94:49:66:9c:ec:07:74:
                    d5:ab:0e:8d:0c:73:0c:4b:47:e3:41:61:a9:50:30:
                    5a:bd:6d:dc:e3:08:bb:92:4b:f4:d1:49:e4:ec:58:
                    9c:62:ce:5c:1e:a0:0f:45:dd:ba:ed:c3:08:b2:30:
                    5d:3d:91:22:ca:c3:de:f4:34:ac:9c:a4:fe:b3:9a:
                    ba:c6:5d:37:f6:4a:d6:85:77:7b:81:c0:67:57:a4:
                    f3:dd:fb:9b:d0:b8:e9:03:e7:f9:a7:1b:43:01:da:
                    cb:fa:77:31:53:3c:31:9e:87:f2:6f:b8:56:a7:0a:
                    55:f2:a3:be:7d:2e:2d:2f:70:13:ae:0f:b9:33:58:
                    1d:b5:d8:e0:98:76:a8:02:5a:4e:12:f2:37:f2:c4:
                    12:7b:02:b6:47:0e:e0:3d:79:b5:ae:a2:22:cb:13:
                    6a:06:dd:03:1d:57:b2:e1:2c:89:f3:2f:74:60:29:
                    49:2a:5f:a7:60:75:7b:a9:91:a7:49:d2:88:e4:0b:
                    2e:d5:38:d4:e4:da:c9:d5:50:47:3e:47:2d:74:c6:
                    a2:c7:fe:93:fa:0f:8d:16:58:6d:19:41:77:bb:d2:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:9D:E5:69:41:74:E7:00:A7:AA:3A:0A:8F:0E:EF:76:9A:7F:5B
            X509v3 Authority Key Identifier:
                keyid:CD:09:B3:F6:D7:21:DF:00:59:16:18:1A:54:28:98:85:00:80:D9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228e26e6d35fd1c575922b6f33809c64b17fdcdf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/357de8edcc5ba6f6e2843da07a2bc06ebc6b1f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/228e26e6d35fd1c575922b6f33809c64b17fdcdf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:17:ea:aa:17:e7:a7:fb:b7:65:79:b5:94:1c:bf:33:b6:3c:
         f0:ba:d8:b3:48:d7:dc:86:3f:40:f0:4d:bf:fd:aa:8d:23:c3:
         4e:1f:30:82:da:9d:37:d3:61:f0:ff:46:1d:65:2e:ac:0e:65:
         11:05:66:db:e3:ca:08:8d:c0:f6:0a:38:7a:8a:3e:2f:46:39:
         f7:39:05:e3:52:f3:02:56:f3:b7:47:da:51:3e:83:ef:96:e1:
         6f:24:dc:2d:4d:ee:1c:62:d5:68:e1:b0:f6:9a:0c:ad:a3:b2:
         80:cb:7b:02:8e:0c:4f:47:b7:b6:a1:c6:75:7f:08:ad:fe:fd:
         5d:bb:c5:9b:fc:55:da:69:ae:cd:ef:75:5a:8f:57:f8:44:b4:
         42:dd:19:7b:03:b3:39:cb:58:60:92:1c:0d:6a:6e:15:0d:54:
         a7:58:b2:3c:69:33:0b:18:fb:48:5b:c9:32:d0:4c:0c:62:cc:
         22:b7:96:e7:af:72:eb:c9:7e:bc:30:74:a0:1e:3f:eb:0a:cb:
         cb:15:b2:f3:e2:9f:01:90:e8:67:6a:ff:c0:d6:ee:98:a9:e5:
         ce:18:4a:a6:aa:9e:94:48:d3:c1:58:0c:a3:0e:f3:25:6c:ac:
         25:88:11:c2:2f:6d:e0:52:52:d1:7c:c1:a7:dd:0b:40:70:aa:
         47:c6:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----