Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8ba9c0f961a743d06b8ac7386e2f350ff6aec7ac.roa
File:                     8ba9c0f961a743d06b8ac7386e2f350ff6aec7ac.roa (raw, json)
Hash identifier:          igcIZIThOJrhmD8EQ73g+WUhX+hylpXC1Nu4ioIQCQo=
Subject key identifier:   91:25:EC:6E:8C:42:60:51:A0:78:8B:BA:BF:D5:63:39:C2:93:BA:81
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       20EB13
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8ba9c0f961a743d06b8ac7386e2f350ff6aec7ac.roa
Signing time:             Fri 24 Mar 2023 08:32:25 +0000
ROA not before:           Thu 23 Mar 2023 08:32:24 +0000
ROA not after:            Sat 22 Mar 2025 08:32:24 +0000
asID:                     10697
IP address blocks:        2800:820:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157331 (0x20eb13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Mar 23 08:32:24 2023 GMT
            Not After : Mar 22 08:32:24 2025 GMT
        Subject: CN=8ba9c0f961a743d06b8ac7386e2f350ff6aec7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:07:1f:cc:62:37:08:c9:a6:b9:e9:da:75:
                    ed:b6:a7:26:33:af:cc:db:18:3c:ec:74:a3:8e:5e:
                    08:14:b7:a1:cb:cd:f5:46:0e:69:b4:44:f7:d0:a5:
                    01:79:80:1a:84:b0:30:86:63:a5:74:f7:10:28:37:
                    74:59:b7:7a:a4:5b:79:de:13:ce:de:bb:6b:52:d8:
                    0d:e3:2f:09:9a:f0:5e:fd:f8:50:8c:5b:2d:5d:15:
                    0a:0d:c5:69:8b:24:e4:1a:dc:66:f1:3f:4a:a1:a6:
                    1a:30:c7:03:a1:25:bc:89:74:26:e7:0a:86:df:a5:
                    18:18:46:b2:0e:07:76:47:3f:02:96:e9:19:3d:b7:
                    f6:cf:bc:74:17:09:ee:14:fc:8b:16:c9:f2:ed:0c:
                    84:02:39:61:c7:2d:a2:75:f2:20:f5:c5:63:f9:b0:
                    95:4c:de:5c:55:91:a8:85:ef:a4:9c:19:0a:de:8c:
                    ee:39:ab:c8:28:6b:d8:4a:86:7a:85:87:6c:e0:d5:
                    98:5d:80:83:c4:b8:c2:d2:fa:e5:77:68:b3:8a:65:
                    09:88:b7:1c:32:b4:ad:22:77:0a:95:1d:04:a4:38:
                    88:53:92:3d:f6:90:43:6e:be:04:0f:0f:f5:a7:22:
                    87:75:29:68:c9:8a:08:ed:7c:40:35:25:4d:a5:4b:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:25:EC:6E:8C:42:60:51:A0:78:8B:BA:BF:D5:63:39:C2:93:BA:81
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8ba9c0f961a743d06b8ac7386e2f350ff6aec7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:820:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:1f:8f:57:3c:bb:c1:80:81:06:eb:47:6a:55:e7:f6:17:98:
         a1:c6:95:c4:0a:f5:e4:b9:eb:21:d8:09:cc:fa:1c:12:d9:18:
         ab:f5:97:ed:dc:73:e1:da:d1:ab:d0:c7:32:28:7d:bd:f9:e4:
         e3:e6:c5:0d:6c:d4:3d:56:06:e7:b6:bc:02:a7:de:b0:72:12:
         11:f2:14:36:41:99:1e:1a:c5:b7:79:63:1c:c9:6a:d4:e0:57:
         d5:af:c5:d1:c8:bf:59:55:3b:59:96:20:53:69:11:f8:e0:15:
         9f:b5:5e:13:e7:bf:3a:e6:b0:5c:95:65:16:9d:85:c1:f3:24:
         01:aa:82:20:96:73:0d:76:3a:ec:56:53:a7:7f:0d:9e:26:c3:
         6c:65:8d:c5:4d:bf:1c:17:79:fe:71:d7:eb:54:90:83:e8:1b:
         44:43:e0:a9:83:3b:9e:8a:f3:7e:23:29:4c:19:4a:73:b3:28:
         d4:6d:45:75:d4:5b:72:4c:67:47:85:cd:9b:9e:a9:a3:96:2b:
         6f:ad:4d:cb:bc:3e:2d:5f:53:0b:4c:cb:78:5c:b8:56:95:80:
         28:2d:1a:95:85:bd:32:0e:d2:97:f3:03:11:74:b4:f7:c4:2e:
         cd:83:73:82:d7:78:64:81:96:4f:a8:fe:f1:d2:7a:29:49:46:
         95:49:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----