Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/f897fd8659de92a2ef31d0a4ad68992a4dc6fe18.roa
File:                     f897fd8659de92a2ef31d0a4ad68992a4dc6fe18.roa (raw, json)
Hash identifier:          KMYc0RUYRNXq1E/wUSqDLQWyXiQGC1FrpLolXOKu2v0=
Subject key identifier:   85:00:C7:E9:6E:07:A5:31:AE:C7:A1:65:00:C0:8B:83:E1:3F:D0:37
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       188139
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/f897fd8659de92a2ef31d0a4ad68992a4dc6fe18.roa
Signing time:             Tue 12 Jul 2022 14:46:38 +0000
ROA not before:           Tue 12 Jul 2022 03:00:00 +0000
ROA not after:            Mon 12 Jul 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        2800:800:930::/48 maxlen: 48
                          2800:800:940::/48 maxlen: 48
                          2800:800:950::/48 maxlen: 48
                          2800:800:960::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605945 (0x188139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: Jul 12 03:00:00 2022 GMT
            Not After : Jul 12 03:00:00 2060 GMT
        Subject: CN=f897fd8659de92a2ef31d0a4ad68992a4dc6fe18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9d:58:2c:3c:1e:f9:62:e1:e4:b6:f0:ec:ca:
                    f7:ce:35:a0:dd:3f:34:72:2a:72:78:4d:b0:fc:85:
                    3a:f8:bc:98:c6:6d:44:4f:21:0d:fa:e3:4a:39:35:
                    40:90:e6:b3:c0:c9:42:d6:ac:c0:9c:87:0b:6c:c8:
                    ea:4b:73:f8:39:4f:d3:f3:cd:72:5b:e2:01:13:15:
                    9c:dc:e0:24:4d:28:26:a3:f6:3a:c9:b5:60:47:1e:
                    94:1d:8b:da:44:31:8d:3c:92:e3:c4:7f:91:c8:d3:
                    4b:d2:cb:7b:d2:15:d3:63:de:0c:55:b9:13:51:e7:
                    7a:09:93:c4:9e:2a:6c:8a:2d:b6:6e:6e:00:79:9d:
                    91:92:7d:d6:e2:76:5a:f7:e5:87:81:b3:48:34:1a:
                    7b:61:b5:f6:a2:6b:c9:04:6f:e9:0d:92:cf:fb:76:
                    0e:13:98:35:39:a6:c3:ce:c0:f3:6c:09:56:8e:a9:
                    52:9e:1b:22:dc:5c:61:9c:9c:b0:ff:ed:ef:9c:20:
                    73:e5:09:31:d6:51:89:da:52:97:b7:57:13:6c:f2:
                    51:d6:01:9a:fe:b5:4c:9f:a4:46:06:bd:a9:76:f9:
                    a6:07:b9:5d:96:a1:77:1f:c4:80:d1:80:d6:7a:eb:
                    bc:aa:5b:0f:4c:f5:9f:f5:7e:06:2d:9d:9d:5f:bc:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:C7:E9:6E:07:A5:31:AE:C7:A1:65:00:C0:8B:83:E1:3F:D0:37
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/f897fd8659de92a2ef31d0a4ad68992a4dc6fe18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:800:930::/48
                  2800:800:940::/48
                  2800:800:950::/48
                  2800:800:960::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:52:c3:31:0c:00:83:64:1e:5c:87:a8:25:b8:12:4c:23:
         2b:ab:94:4e:2f:59:82:66:68:52:d9:ae:26:97:72:f4:a2:4a:
         bf:d6:6c:64:00:e9:b8:83:76:f0:20:6b:84:03:ad:d1:d0:56:
         4e:8b:85:08:ab:60:86:fa:43:36:53:8f:32:5c:d8:0c:99:78:
         03:84:5d:3f:89:3e:d5:fa:76:c3:00:12:09:a1:12:e8:51:88:
         7e:22:19:4d:0a:7c:b9:13:4c:50:6d:7f:74:18:0e:00:72:a7:
         64:fa:b3:1b:87:3a:0e:a0:9c:9a:1c:ad:d8:cf:e0:70:25:93:
         5b:6f:87:a2:64:81:07:38:90:47:45:e9:6c:9d:7d:2b:73:c7:
         4e:b9:a4:d4:3a:e4:16:75:3e:ec:58:0b:74:4e:c8:08:c8:6b:
         20:c9:22:69:02:81:2f:5b:33:3a:e3:90:ab:cf:6c:9e:a8:65:
         83:77:d7:e5:a5:7c:9c:09:6b:a4:ce:30:48:6e:02:c5:b8:83:
         f8:7a:af:64:ae:53:ef:98:32:4d:97:40:09:8a:ba:04:be:50:
         bb:09:9c:33:46:bb:1d:eb:e6:da:d2:b9:92:ef:f9:cb:07:0e:
         5b:6a:0b:5b:7c:06:19:e5:7b:29:48:ca:34:75:78:f1:13:29:
         8c:7a:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----