Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/589f7f9c5611b9161bdca865a79f359d211fe5a6.roa
File:                     589f7f9c5611b9161bdca865a79f359d211fe5a6.roa (raw, json)
Hash identifier:          oWPv7qhabHeSP03EtdXty9v4YToYgB41KfpvZhtid3c=
Subject key identifier:   7C:86:52:FC:DE:42:6A:73:CF:E5:39:61:C3:DF:B9:EB:90:75:E1:8C
Certificate issuer:       /CN=6f35480750f171363a97d0fff033a3b0d1b09a18
Certificate serial:       0316
Authority key identifier: 79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/589f7f9c5611b9161bdca865a79f359d211fe5a6.roa
Signing time:             Thu 10 Nov 2022 05:57:06 +0000
ROA not before:           Wed 09 Nov 2022 05:56:03 +0000
ROA not after:            Sun 10 Nov 2024 05:56:03 +0000
asID:                     272883
IP address blocks:        2803:5a90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f35480750f171363a97d0fff033a3b0d1b09a18
        Validity
            Not Before: Nov  9 05:56:03 2022 GMT
            Not After : Nov 10 05:56:03 2024 GMT
        Subject: CN=589f7f9c5611b9161bdca865a79f359d211fe5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:af:26:aa:7f:17:75:ff:22:8a:3b:e0:ab:ee:
                    1c:23:e6:b2:79:a2:f0:4a:12:86:3b:c1:bc:20:56:
                    1f:d9:51:4d:ce:e1:65:85:bf:26:0e:a3:22:37:01:
                    c3:8c:2a:ce:98:df:cd:12:bd:17:8c:f2:ac:2c:37:
                    0b:26:bf:7b:65:78:8c:49:b7:c5:f0:96:f8:74:f7:
                    2a:3f:06:a8:33:df:0b:74:77:4f:0c:f0:e2:2f:e4:
                    40:23:99:e8:f8:b4:b8:ea:44:c2:97:a7:97:7b:28:
                    8a:8f:d2:e6:16:cb:49:d6:52:4a:e0:71:68:b8:a2:
                    48:b2:77:ac:37:59:6a:2c:2b:07:ed:67:e0:01:ca:
                    12:1b:fc:77:a9:9f:92:6c:d6:d0:4c:9c:d0:39:fa:
                    93:a9:4f:4d:03:15:a1:6a:e2:d9:19:83:a6:de:d9:
                    87:e7:c0:dc:14:f6:b3:08:35:36:68:97:68:6b:53:
                    e6:11:e4:58:9e:c7:ec:13:27:14:f6:9c:cd:db:a8:
                    2a:e1:d1:8c:21:ed:1c:97:0c:af:c6:88:17:02:1f:
                    8c:38:fc:1e:86:bb:15:c8:94:7f:f7:82:ff:27:c1:
                    ec:86:0f:8b:64:70:cd:31:b9:94:5f:91:a8:28:d8:
                    ae:99:c8:7e:43:89:de:c0:8b:6b:e9:91:5e:8f:56:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:52:FC:DE:42:6A:73:CF:E5:39:61:C3:DF:B9:EB:90:75:E1:8C
            X509v3 Authority Key Identifier:
                keyid:79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/589f7f9c5611b9161bdca865a79f359d211fe5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/6f35480750f171363a97d0fff033a3b0d1b09a18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:e3:8c:b0:76:64:4d:05:3e:d1:f6:af:4f:36:64:a8:b5:
         c4:d5:50:23:82:22:b3:d2:c3:e7:b0:22:35:75:38:92:24:a5:
         1f:41:db:8f:e7:30:a6:12:89:e6:7e:77:7c:0c:86:6a:3c:ad:
         b5:83:ca:0c:1e:35:5a:81:79:cd:a0:15:bf:ad:11:b5:62:50:
         81:4f:e9:ea:59:f7:2b:7e:83:35:f0:dd:f9:cb:44:f0:42:41:
         59:99:23:2b:ef:d0:0d:8a:d2:e1:9c:36:e8:f7:d5:ce:59:51:
         2a:a5:cd:f5:61:e2:0a:ec:89:36:c6:25:32:83:da:af:ea:21:
         be:ee:4e:ae:cf:79:17:0e:72:1b:9c:19:0a:cb:00:73:e2:22:
         40:8d:01:05:2c:b0:c3:e3:ad:94:da:9d:12:f5:ea:cd:f4:de:
         93:b6:a1:11:87:9d:3b:39:0c:71:69:d5:f4:f8:0d:17:c0:4a:
         58:9d:b9:94:8c:ca:1b:83:a1:c0:61:6d:a3:c3:40:19:19:3b:
         68:2e:44:e2:75:35:ae:a2:44:33:65:00:17:a6:2a:75:4a:a8:
         97:71:44:e3:3d:64:d2:a8:28:48:4f:c4:8c:d5:53:cd:b5:b7:
         ce:d0:00:05:2b:14:db:5b:c0:b7:a7:04:42:ad:ff:90:0d:e0:
         41:35:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----