Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/5a768db9e442a44078c1dc1068d5d89aaba200a4.roa
File:                     5a768db9e442a44078c1dc1068d5d89aaba200a4.roa (raw, json)
Hash identifier:          J7rdfZ1Qr2js/BGRDd0KurgZ1VbIkrIdbP55ek1MaPs=
Subject key identifier:   87:4A:62:15:63:8D:9A:09:1F:42:0A:7E:1A:FA:81:9D:22:73:A0:BA
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       02D1
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/5a768db9e442a44078c1dc1068d5d89aaba200a4.roa
Signing time:             Mon 17 Jan 2022 23:20:44 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     269735
IP address blocks:        2803:960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=5a768db9e442a44078c1dc1068d5d89aaba200a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:13:9f:d3:7e:65:5a:dc:35:cd:fe:e9:2f:
                    0c:7f:f6:4d:29:a2:41:ad:7e:3a:23:25:5b:63:be:
                    46:2d:33:fc:8e:df:9a:cf:62:7d:0a:8d:1d:cb:7d:
                    30:6b:20:41:92:fc:ee:ee:c1:bb:ab:8a:e2:d7:8c:
                    2d:9a:9e:2d:ca:92:64:78:20:7d:62:2b:8b:cb:91:
                    32:03:cd:b6:5a:0b:75:0d:ae:54:24:cc:aa:b7:39:
                    10:3a:5b:58:cc:1f:c1:47:18:17:b5:a6:07:77:2a:
                    ed:93:dd:65:4c:8c:d5:dd:ce:99:97:df:03:db:73:
                    4d:32:bd:96:c7:90:1c:d5:63:d3:a1:cc:48:07:5f:
                    1e:4b:bf:64:e4:d5:04:e4:d6:43:c4:11:70:87:90:
                    b6:c2:54:4f:f9:ef:ef:a3:8f:3a:0c:65:5c:32:cf:
                    e4:b6:5b:f6:e7:d0:ca:09:94:11:b7:1b:59:1c:0e:
                    bf:fa:b3:fb:57:55:b9:49:f3:c6:14:9a:78:76:ff:
                    08:59:7c:46:fc:fc:c6:4b:bd:42:10:5f:dd:35:9f:
                    75:36:72:a9:82:7a:e1:9a:04:4e:0b:9a:9a:ce:19:
                    e7:9c:79:86:e3:f3:83:7f:46:70:df:f1:7c:6a:27:
                    75:6e:48:56:74:8b:ee:ed:c2:82:d8:23:c2:82:59:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:62:15:63:8D:9A:09:1F:42:0A:7E:1A:FA:81:9D:22:73:A0:BA
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/5a768db9e442a44078c1dc1068d5d89aaba200a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:960::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:fa:02:c0:54:ba:ce:b7:bd:63:18:f5:0e:d1:1c:ce:74:66:
         3a:d7:d2:7b:3e:88:a5:65:df:0a:ba:2b:e7:28:38:3e:e5:e2:
         0f:e1:2e:99:1f:90:52:5f:e4:47:95:67:2a:7f:81:46:e5:79:
         5f:49:69:b4:e5:17:35:c5:0e:dd:fb:6c:b2:4f:d3:98:71:4c:
         7b:f0:18:46:97:e0:df:6c:87:f3:c3:35:31:f8:1c:3d:64:3e:
         52:6d:19:4e:ab:f2:f3:bf:19:70:bb:35:41:bb:bb:a2:dc:60:
         a6:51:b8:00:f0:fc:81:4a:08:fc:ce:f2:c2:25:17:6e:b7:10:
         e7:63:dd:d6:6a:97:d9:47:4e:69:60:6b:00:39:45:e0:f3:16:
         73:a7:97:c7:70:c9:f6:2a:dd:b5:d1:4e:32:04:b7:56:f7:b1:
         3d:79:a9:29:c4:25:5f:8c:b6:65:dc:55:7a:a5:71:1c:d5:53:
         b8:78:c8:b3:78:ae:47:0d:7f:64:a6:11:37:12:0e:78:49:c7:
         3f:a5:28:3a:fc:3d:b7:f5:37:fa:cd:81:ea:5f:db:69:90:5e:
         58:f1:91:14:8a:5c:8b:c0:d3:2b:a4:37:68:74:14:58:ba:77:
         60:d5:e4:ef:1a:bc:09:fc:23:9c:9e:fb:64:6f:39:b5:99:23:
         91:ef:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----