Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10a9984d-ffc8-491c-b592-7dc0eb7c4d05/5639cb6cc617625eb6556567808f204f3d23fece.roa
File:                     5639cb6cc617625eb6556567808f204f3d23fece.roa (raw, json)
Hash identifier:          4vE6HQEHEkw57pPnCnF5cFmDWZ413op9q0/PI1EmdEc=
Subject key identifier:   F0:D2:6F:DF:D5:D7:66:5E:78:1F:49:E6:B1:01:28:26:92:36:36:BB
Certificate issuer:       /CN=78a7bd2217d6eb96e1a0d7b8f64a7b622d0de607
Certificate serial:       0429
Authority key identifier: 37:6F:46:72:B8:A2:DB:6B:5C:52:9D:1E:9B:AC:D7:40:76:E7:02:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78a7bd2217d6eb96e1a0d7b8f64a7b622d0de607.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10a9984d-ffc8-491c-b592-7dc0eb7c4d05/5639cb6cc617625eb6556567808f204f3d23fece.roa
Signing time:             Sun 11 Sep 2022 16:12:55 +0000
ROA not before:           Sun 11 Sep 2022 16:11:25 +0000
ROA not after:            Wed 11 Sep 2024 16:11:25 +0000
asID:                     272018
IP address blocks:        2803:4510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a7bd2217d6eb96e1a0d7b8f64a7b622d0de607
        Validity
            Not Before: Sep 11 16:11:25 2022 GMT
            Not After : Sep 11 16:11:25 2024 GMT
        Subject: CN=5639cb6cc617625eb6556567808f204f3d23fece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:21:a2:95:e3:5d:79:62:c2:08:01:37:61:0e:
                    10:99:13:04:fc:16:80:2f:07:e9:1c:c7:9b:26:fd:
                    51:a8:48:d8:80:21:c0:c3:94:8c:43:01:74:7d:63:
                    61:3c:79:66:fc:fb:9d:80:c5:c1:9d:b2:5f:8e:61:
                    d0:99:02:bb:09:76:73:1a:d4:06:e6:b4:11:f1:df:
                    4c:7c:76:2e:b6:67:b5:1b:57:2b:9a:8e:2d:ae:e7:
                    27:9b:e0:78:a7:63:e9:d3:63:a1:c2:6c:88:5b:45:
                    f0:a2:92:89:e3:7c:6f:32:f7:99:db:ab:39:8e:f6:
                    47:ff:b3:10:13:b8:8f:23:ea:8e:7a:1b:ef:da:cc:
                    93:ac:7f:a8:ab:25:63:fc:65:6c:8f:3a:1b:70:8d:
                    12:ae:d2:75:2b:70:4f:56:7d:8f:f6:fc:c2:c9:fd:
                    9d:dc:e3:26:e8:0c:fd:15:df:d2:a6:4e:5d:89:17:
                    86:ee:9f:0e:01:6f:bf:bf:79:4c:ec:26:e5:fb:4a:
                    0b:65:c9:fb:3b:5d:8f:17:96:6c:cb:3b:88:89:94:
                    c4:b2:7c:29:58:2f:7c:4f:b6:a9:f7:60:0f:df:2b:
                    3b:85:f5:66:17:21:42:c0:a3:70:89:d5:95:14:6e:
                    55:14:66:86:ef:a2:38:9d:f9:d5:e2:53:9f:00:49:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D2:6F:DF:D5:D7:66:5E:78:1F:49:E6:B1:01:28:26:92:36:36:BB
            X509v3 Authority Key Identifier:
                keyid:37:6F:46:72:B8:A2:DB:6B:5C:52:9D:1E:9B:AC:D7:40:76:E7:02:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78a7bd2217d6eb96e1a0d7b8f64a7b622d0de607.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10a9984d-ffc8-491c-b592-7dc0eb7c4d05/5639cb6cc617625eb6556567808f204f3d23fece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10a9984d-ffc8-491c-b592-7dc0eb7c4d05/78a7bd2217d6eb96e1a0d7b8f64a7b622d0de607.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4510::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:14:48:f3:5c:f3:56:e5:9a:b6:a3:6a:45:3d:2e:93:35:
         0a:21:f3:20:a7:ba:b7:b2:0e:12:7b:2c:e0:75:bc:35:b3:99:
         f9:c3:c3:b7:18:7c:73:9e:23:0c:9d:0c:96:0b:0c:50:cc:7f:
         31:0a:7b:c0:4e:cb:03:4a:17:15:26:26:86:6e:ce:cd:3a:01:
         f4:72:c6:45:97:b7:24:39:46:56:30:d8:91:6b:78:27:f1:7a:
         25:ae:49:74:91:b5:e4:79:ad:ab:18:6e:fa:ca:82:95:9c:5b:
         64:6b:02:df:15:b4:ee:fc:29:65:75:bc:f7:ea:26:44:14:06:
         89:25:18:22:ff:4d:3d:e9:63:60:a7:90:a6:c9:a5:24:38:a3:
         e3:f3:5d:68:2c:eb:a6:22:32:7c:72:b5:ea:fc:4a:1a:50:6a:
         87:c5:c1:e1:c6:ff:1a:3c:f4:b3:78:5d:9d:d7:73:57:c5:63:
         04:c1:92:43:a3:0d:de:cb:c3:b0:98:45:f6:14:d3:9f:3a:5f:
         ad:5a:c7:7a:4d:57:f6:02:bc:45:43:fc:ba:00:52:72:b3:2f:
         45:74:1e:fc:24:9e:ca:ff:0a:13:86:39:e7:e0:2d:f8:d7:65:
         cd:cd:1b:09:8e:90:87:78:5a:0e:08:63:dc:ee:42:22:b6:11:
         b6:43:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----