Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/31779f6345545d4f185689736feed3ed9ba594f7.roa
File:                     31779f6345545d4f185689736feed3ed9ba594f7.roa (raw, json)
Hash identifier:          Cwz21QCl/iClxM9/QGpP5X5XStZ+2ihHnZzukCOUq4Q=
Subject key identifier:   51:1C:D6:17:0D:00:62:3B:65:16:FA:39:5D:1A:E2:A7:EB:B6:18:A3
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2251AF
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/31779f6345545d4f185689736feed3ed9ba594f7.roa
Signing time:             Tue 25 Apr 2023 15:05:47 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     26105
IP address blocks:        2803:600::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249135 (0x2251af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=31779f6345545d4f185689736feed3ed9ba594f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:76:a8:f7:ec:bb:bc:7a:90:28:4a:c4:bd:
                    11:51:50:37:1f:e9:ef:5a:56:42:f9:f4:67:d9:e9:
                    1b:64:f5:b1:a4:89:0e:2e:09:7a:fd:6f:1f:2e:ed:
                    1c:a4:b8:5e:8a:21:c2:49:31:aa:09:30:5b:d0:9b:
                    ac:0b:1b:31:ac:af:5e:55:8a:a8:03:fd:44:15:48:
                    6b:a7:e6:92:dc:ec:28:64:7e:8f:5d:c0:40:e7:a1:
                    e2:5b:03:4f:59:31:d3:de:56:4c:98:df:7d:2b:bf:
                    8a:25:e6:a9:75:13:79:6e:0b:5e:fb:d9:56:2d:74:
                    b7:c0:27:c9:9a:75:4c:ae:7a:7b:23:d0:65:47:b8:
                    a7:5e:50:fa:9b:64:81:71:0e:18:e5:de:2e:d9:6f:
                    44:b7:6c:46:10:e7:b1:e4:95:c8:09:b9:92:8d:20:
                    df:2b:e8:43:28:64:77:62:8c:6d:c5:45:2b:ea:13:
                    88:2b:64:c5:a3:81:3a:63:d9:f0:88:bd:23:3a:ac:
                    5a:55:40:33:ae:65:4e:e6:cf:e7:64:37:1d:5b:a4:
                    23:cc:32:92:61:e4:4e:c2:08:88:c5:d9:a1:57:ed:
                    dd:19:1b:f5:b0:f0:90:6d:c6:5a:d8:33:97:90:8a:
                    bf:64:45:cf:e4:9e:91:d6:83:c3:02:25:76:9f:ab:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1C:D6:17:0D:00:62:3B:65:16:FA:39:5D:1A:E2:A7:EB:B6:18:A3
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/31779f6345545d4f185689736feed3ed9ba594f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:89:90:3d:9b:c1:51:eb:7d:a3:63:8c:dd:5f:85:3b:4e:
         ba:24:62:34:20:d3:b6:5d:80:5b:d2:b3:c6:73:35:5b:05:77:
         c5:d5:b9:36:11:b5:8b:da:1a:ab:4b:63:7a:b0:ce:ff:10:17:
         60:78:59:c6:d7:e7:3d:ee:b6:d8:44:28:6c:40:b5:e6:18:a5:
         c2:ca:a1:fb:f4:e0:c7:45:04:83:a3:8a:fe:92:fb:fb:60:7c:
         d7:1e:0b:35:d4:b9:d3:c5:bc:21:3a:eb:fd:6f:e6:ea:fd:46:
         65:5d:3b:9f:0c:9a:99:cf:e6:5e:a6:08:97:d1:9f:32:04:83:
         13:23:9c:92:0e:c1:85:36:b3:94:55:b7:17:2b:20:9e:9f:c6:
         20:1e:72:6a:91:25:fc:f6:2a:38:cd:06:f7:ab:1c:8e:94:fb:
         89:83:c8:a7:32:c1:c8:bc:23:c1:c9:85:77:d2:ea:89:48:2d:
         e8:ca:99:e5:70:dd:17:7e:f8:f9:4f:77:2b:c2:b9:78:4f:45:
         35:30:56:b5:70:0e:d0:ad:41:27:06:1f:b9:07:9e:b1:68:31:
         cf:70:27:8b:2b:73:79:4b:07:d5:4d:47:a9:48:3b:71:61:31:
         2b:12:da:c9:1b:00:6f:7d:28:62:60:24:89:65:80:68:ac:34:
         76:ac:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----