Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/cfb14fc051a0066f97f79bb9cb1d232d818dd81d.roa
File:                     cfb14fc051a0066f97f79bb9cb1d232d818dd81d.roa (raw, json)
Hash identifier:          LRjUIVzU5L/lzRjhOdDn0q0hX0PKMaUQjofkeUeK/X0=
Subject key identifier:   3F:8A:03:26:28:90:7D:76:F4:20:2F:6D:DA:83:5F:28:0D:A1:A5:D6
Certificate issuer:       /CN=011a9b477733e7669c43604e0c34e662ac21a23d
Certificate serial:       032E
Authority key identifier: F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/cfb14fc051a0066f97f79bb9cb1d232d818dd81d.roa
Signing time:             Fri 11 Nov 2022 20:44:11 +0000
ROA not before:           Thu 10 Nov 2022 20:43:06 +0000
ROA not after:            Mon 11 Nov 2024 20:43:06 +0000
asID:                     272830
IP address blocks:        2803:7490::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011a9b477733e7669c43604e0c34e662ac21a23d
        Validity
            Not Before: Nov 10 20:43:06 2022 GMT
            Not After : Nov 11 20:43:06 2024 GMT
        Subject: CN=cfb14fc051a0066f97f79bb9cb1d232d818dd81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:4b:be:49:98:89:15:8c:a6:23:0c:79:21:
                    41:4b:f4:c4:6c:d8:07:60:5d:a2:b7:f3:ee:f9:73:
                    dd:32:27:93:4c:e9:26:db:33:cf:61:9c:fd:7b:f3:
                    1e:f0:e6:83:2c:79:5e:81:56:a4:d3:04:23:4b:4a:
                    6b:d4:97:5c:fd:5f:a9:3e:05:98:f1:fb:88:e4:73:
                    42:cb:7e:dd:da:f1:7b:35:ca:cf:17:1c:1a:99:e4:
                    ae:1c:01:a7:05:e5:70:66:4d:ef:b8:55:32:2d:6d:
                    d3:08:25:f8:d2:2c:af:ae:18:d9:ad:27:b5:d0:ae:
                    12:dd:30:a4:41:21:ae:c2:c2:1c:86:9f:6f:57:a9:
                    e3:e3:44:c1:e6:bb:e9:a3:7e:76:e1:ea:1a:c5:f3:
                    ca:7f:f3:75:10:5a:87:04:4a:da:c7:44:c0:ba:fb:
                    e1:06:c9:bc:8e:69:1e:3f:90:67:80:b8:7b:71:88:
                    54:e1:e2:54:3c:44:46:be:3a:9c:70:f6:09:48:d7:
                    c2:82:ab:6b:dc:bd:47:7e:a9:dc:ad:04:70:14:e5:
                    32:d1:51:6b:f7:c6:7f:58:d8:1c:d1:b0:79:17:d8:
                    0a:b7:d7:9f:4e:76:73:f0:ee:1e:51:58:3e:fc:d3:
                    e8:1a:f5:bd:cf:18:de:2b:6b:5d:d5:1e:30:8b:8f:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8A:03:26:28:90:7D:76:F4:20:2F:6D:DA:83:5F:28:0D:A1:A5:D6
            X509v3 Authority Key Identifier:
                keyid:F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/cfb14fc051a0066f97f79bb9cb1d232d818dd81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7490::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:26:aa:89:14:09:43:a6:82:7a:3d:72:bd:28:f1:2a:89:65:
         1a:91:d6:fa:0a:32:c3:45:44:e0:6f:c0:de:6c:45:51:23:9b:
         7e:ff:e5:06:f6:6f:36:d6:19:7d:42:69:50:0a:9e:50:16:59:
         87:b7:1c:c2:f3:ad:3b:e9:6c:fd:4f:dd:65:2f:51:2f:fd:e8:
         d6:c0:f6:67:8e:3d:79:ca:ff:ad:f6:c1:40:e3:3b:42:2e:f1:
         82:62:2c:a9:7c:10:c2:67:7e:f8:31:36:d6:0c:3a:6e:e2:0d:
         c4:be:2b:32:30:80:81:c8:a8:b1:10:9c:13:b1:cf:bc:66:55:
         00:cb:d0:97:d3:0c:69:a2:cf:ad:42:aa:76:9b:bd:ab:9d:b6:
         53:80:12:81:83:d5:19:0b:d3:0a:e4:50:eb:9b:23:3e:9b:fd:
         7c:98:8e:83:68:98:92:52:e5:68:6f:2b:bf:3d:87:d8:a3:6b:
         db:b9:86:29:a6:62:95:bc:27:a5:0c:9b:53:8e:d1:78:8f:27:
         28:69:16:fc:81:f3:cd:1e:0f:d7:56:80:2f:fb:43:65:e8:eb:
         f5:6a:0e:57:02:73:2d:48:be:7d:af:49:59:09:1f:90:fa:20:
         5a:0a:a3:13:66:eb:28:95:08:3c:0a:18:65:90:8c:27:80:88:
         09:fe:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----