Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/28c73b240c8a2a49cbcd97a243810c4004d5f263.roa
File:                     28c73b240c8a2a49cbcd97a243810c4004d5f263.roa (raw, json)
Hash identifier:          9hq3GJBcGa1tmCSxSH41xbIn1YoeBwN10tDG2gEv9Pg=
Subject key identifier:   34:78:8C:DF:DE:36:E9:40:25:7B:E8:CD:C2:4C:36:1F:C7:A0:87:D4
Certificate issuer:       /CN=ad065aa23b9d845c69244ed137643f2db242863c
Certificate serial:       0B8FD8
Authority key identifier: DB:33:74:B5:93:46:27:19:52:C1:C9:26:C0:D7:2F:F4:50:AD:5F:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad065aa23b9d845c69244ed137643f2db242863c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/28c73b240c8a2a49cbcd97a243810c4004d5f263.roa
Signing time:             Fri 17 Jun 2022 20:33:23 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        2801:17:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757720 (0xb8fd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad065aa23b9d845c69244ed137643f2db242863c
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=28c73b240c8a2a49cbcd97a243810c4004d5f263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:9f:3a:db:c7:6f:d2:a1:56:87:76:3b:95:
                    3b:b8:4d:5d:e6:6a:08:ad:71:12:28:b2:91:85:0f:
                    84:7a:a5:b7:42:57:c9:66:49:55:e1:3b:8a:75:fe:
                    27:d8:74:a3:36:7e:0d:01:ab:4e:28:56:e7:28:25:
                    47:af:18:ec:32:a3:3d:32:59:3b:81:dc:d0:1c:3a:
                    40:fc:b7:94:45:f7:12:2c:a7:57:45:f0:49:1b:a8:
                    82:4d:7e:17:49:85:9f:ed:0e:2e:74:f0:44:d2:1b:
                    c6:b1:07:33:d7:99:16:cd:2a:3f:d6:df:10:2a:2d:
                    c7:7e:3b:45:6c:e1:7b:88:d2:1c:2d:2d:f3:d1:d0:
                    a1:7d:2c:0c:e7:12:f3:2f:de:52:4b:c5:d8:9d:46:
                    3b:79:8e:45:c5:1a:6b:21:df:ef:4c:c7:dc:21:ab:
                    18:f2:cc:10:95:b9:1c:a2:20:ba:a4:1e:a9:e2:73:
                    85:4d:c9:76:64:da:8f:0c:28:4f:a3:f4:35:c7:d9:
                    95:f1:2a:6b:42:f6:e7:41:88:fb:cc:bc:60:ac:0a:
                    9e:f2:ff:ac:ec:40:a0:49:94:cb:a7:1c:75:c1:97:
                    fb:77:da:b7:f8:5f:36:e8:eb:5d:80:8d:96:3a:be:
                    fb:08:e7:14:de:e4:78:f6:1d:d3:e9:b0:66:34:fd:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:8C:DF:DE:36:E9:40:25:7B:E8:CD:C2:4C:36:1F:C7:A0:87:D4
            X509v3 Authority Key Identifier:
                keyid:DB:33:74:B5:93:46:27:19:52:C1:C9:26:C0:D7:2F:F4:50:AD:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad065aa23b9d845c69244ed137643f2db242863c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/28c73b240c8a2a49cbcd97a243810c4004d5f263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/ad065aa23b9d845c69244ed137643f2db242863c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:a5:57:84:4b:a1:96:f2:e9:79:4b:d0:ba:86:2b:f7:d5:
         1f:07:60:1b:83:d9:cc:92:20:72:ca:b2:82:53:9c:bc:b2:b4:
         e1:da:aa:4a:dc:6c:e3:d1:88:8f:45:db:0a:7a:5c:4f:70:f5:
         a6:4f:cb:bd:90:ef:6b:8b:f8:42:bc:22:ea:61:be:af:6b:70:
         09:4e:1e:20:85:80:68:7a:91:6b:e7:aa:d7:3c:a6:49:c8:7c:
         79:6a:1a:3e:ce:56:bd:b9:89:90:6e:b6:f1:45:7a:eb:3c:61:
         60:93:ae:74:6e:80:6c:f1:42:c7:e8:e7:cc:b4:c7:ee:92:2b:
         82:ec:88:a2:75:70:50:b2:e7:8d:d8:2d:7a:f5:14:ba:dc:19:
         bf:29:39:ec:76:37:34:60:9a:f4:1e:a2:cc:c8:06:9f:2f:0e:
         d6:be:b4:a0:45:03:c0:74:dd:a2:d5:59:1e:83:64:2d:d2:8a:
         64:27:be:aa:89:93:50:62:b0:dd:38:a7:47:25:77:fe:66:e4:
         ad:b7:2b:4d:c6:6f:9c:e4:4e:5b:a9:15:ca:29:8d:f7:73:b3:
         13:4a:f5:f1:52:fd:fb:97:25:d7:f3:44:09:eb:36:1c:7e:33:
         52:ab:b8:19:c0:0c:3e:97:47:ef:c6:92:d7:e0:51:f9:f0:c8:
         de:e3:d7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----