Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/5d711ed036e37ce6e34443a91ba920a646ba7b45.roa
File:                     5d711ed036e37ce6e34443a91ba920a646ba7b45.roa (raw, json)
Hash identifier:          p0n8s72+1n7uSGntVWxn02Bio4toKOpZm9OpjMgwJNY=
Subject key identifier:   9A:3B:9F:F9:50:3B:C1:45:9D:5C:D6:30:07:FD:17:C5:E2:8A:49:31
Certificate issuer:       /CN=2cfab365614823412fd7d92d366dc75c3b5048ca
Certificate serial:       18F70E
Authority key identifier: 64:48:42:7C:AC:98:7D:89:3D:D8:6B:42:36:0D:7B:A3:CC:DE:3B:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cfab365614823412fd7d92d366dc75c3b5048ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/5d711ed036e37ce6e34443a91ba920a646ba7b45.roa
Signing time:             Mon 12 Sep 2022 14:46:16 +0000
ROA not before:           Mon 12 Sep 2022 14:46:11 +0000
ROA not after:            Thu 12 Sep 2024 14:46:11 +0000
asID:                     27855
IP address blocks:        2803:ddc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636110 (0x18f70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfab365614823412fd7d92d366dc75c3b5048ca
        Validity
            Not Before: Sep 12 14:46:11 2022 GMT
            Not After : Sep 12 14:46:11 2024 GMT
        Subject: CN=5d711ed036e37ce6e34443a91ba920a646ba7b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:6b:bc:d3:bb:47:32:ef:35:32:66:44:17:
                    f9:5d:4f:40:8f:ab:2f:ce:b0:96:d3:8e:78:1f:8d:
                    6a:a0:3f:8b:74:57:8d:5b:da:50:d4:a1:2d:44:97:
                    cd:b6:2a:dd:17:17:8a:4a:cc:52:4c:e6:58:94:1b:
                    f2:d8:f8:92:46:5c:fe:29:d8:bb:90:ce:c1:6a:df:
                    49:7b:a2:33:41:d3:0b:e2:e5:f9:4e:19:47:c0:56:
                    4a:35:31:b0:0f:af:0c:5c:05:55:4b:ce:b1:b8:89:
                    e3:54:68:f8:bf:64:d8:93:b3:0e:2d:41:a3:41:0b:
                    ed:c2:ab:a5:b7:cb:2c:52:f4:e6:8a:6a:dd:f0:92:
                    b4:52:f4:7e:9d:82:e5:a0:d6:22:5a:14:53:ec:ea:
                    d4:54:ef:60:2d:a5:c4:b7:70:b6:ab:eb:ee:f3:76:
                    db:f0:11:b0:18:e7:21:4f:a3:83:3f:0c:8d:0e:0d:
                    ad:2c:b2:e7:03:ab:d7:e7:eb:03:de:67:7b:3c:cf:
                    60:db:86:13:e2:49:1f:9b:52:5c:22:c4:15:a2:fc:
                    d1:ee:79:a3:29:69:a4:b3:ff:15:c2:09:d5:ce:cc:
                    49:a4:c1:f2:18:c6:b1:53:46:4d:e2:a7:a7:ff:77:
                    27:63:6d:24:8e:8f:21:e9:13:de:3f:4c:bc:3c:f5:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3B:9F:F9:50:3B:C1:45:9D:5C:D6:30:07:FD:17:C5:E2:8A:49:31
            X509v3 Authority Key Identifier:
                keyid:64:48:42:7C:AC:98:7D:89:3D:D8:6B:42:36:0D:7B:A3:CC:DE:3B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cfab365614823412fd7d92d366dc75c3b5048ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/5d711ed036e37ce6e34443a91ba920a646ba7b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36386894-03dc-46b7-9b0c-776956212c98/2cfab365614823412fd7d92d366dc75c3b5048ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ddc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:18:af:03:6e:b5:d3:ad:38:d7:6a:92:71:70:cd:73:1c:
         79:70:32:53:2a:93:39:1c:7e:73:06:2d:1d:32:99:b0:d3:e6:
         cd:11:3c:81:4c:b8:0f:74:11:f8:56:f3:73:23:07:be:79:be:
         87:47:b0:8a:94:ad:09:c3:37:23:75:5e:22:70:3c:b2:f7:0a:
         d9:9a:79:4e:a6:ef:ae:cb:6b:9e:21:6b:da:06:48:a2:89:c7:
         87:42:2d:5f:db:93:ca:8a:da:52:9e:fe:32:36:d4:88:a0:01:
         18:5e:4f:79:72:dc:5e:11:75:be:0d:5f:62:b6:f3:b8:1f:53:
         37:c9:46:64:10:e6:2a:13:19:0f:fb:d4:6d:73:52:0b:27:6c:
         d9:ff:b2:d5:43:59:c7:91:31:f3:5c:8f:fd:74:64:fc:0d:3e:
         80:d0:2c:50:4d:9a:65:cb:36:48:10:85:22:74:3a:22:f8:19:
         d3:cd:d7:d1:7b:4d:3c:1c:e8:f3:6d:1e:34:ab:06:e2:17:08:
         90:0b:ef:79:2b:77:bd:5f:21:71:23:0b:cf:b8:03:9b:15:03:
         3f:2c:46:a4:57:45:ae:09:04:45:06:ca:65:e5:6d:c2:be:f3:
         c9:7f:d9:80:d9:74:3d:cb:86:3b:6c:3f:a5:28:7a:61:65:1d:
         da:4d:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----