Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/c7e32f8598567357d066bf56175e07e9757d1c20.roa
File:                     c7e32f8598567357d066bf56175e07e9757d1c20.roa (raw, json)
Hash identifier:          5nwtTQZo0zCifaRZbwgQTvLhnqJGTg4daHCNfonlJik=
Subject key identifier:   57:72:86:4D:30:4D:A3:FB:87:F8:4B:99:48:0F:DF:FF:64:89:29:CE
Certificate issuer:       /CN=6b5d884a539dc194148028738ffe2577e3a345c2
Certificate serial:       11BB97
Authority key identifier: FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/c7e32f8598567357d066bf56175e07e9757d1c20.roa
Signing time:             Tue 18 Apr 2023 08:30:02 +0000
ROA not before:           Mon 17 Apr 2023 08:30:02 +0000
ROA not after:            Wed 16 Apr 2025 08:30:02 +0000
asID:                     271901
IP address blocks:        2801:1de::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162135 (0x11bb97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5d884a539dc194148028738ffe2577e3a345c2
        Validity
            Not Before: Apr 17 08:30:02 2023 GMT
            Not After : Apr 16 08:30:02 2025 GMT
        Subject: CN=c7e32f8598567357d066bf56175e07e9757d1c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:12:1d:9a:f6:04:83:4a:52:19:34:57:6c:
                    08:ef:72:a3:9d:74:60:ab:88:77:40:c1:51:b6:53:
                    0c:c1:70:c2:7f:9d:c1:8f:82:a9:6f:66:f4:26:6b:
                    68:56:02:8b:95:f5:03:6b:84:88:a9:4e:26:49:14:
                    5a:f8:10:3e:ec:19:43:a9:85:a5:e8:e1:50:50:fc:
                    99:93:98:31:3d:5b:f6:fd:69:29:4c:96:22:a5:e3:
                    03:31:dc:9c:7f:1f:c7:a9:3f:96:d3:f1:15:f4:c6:
                    b2:34:60:6d:06:91:47:bf:42:e0:ab:08:fc:70:86:
                    f0:96:e9:ff:f4:d6:18:6f:d8:2b:71:8b:72:19:bc:
                    02:e7:ed:0a:5b:0a:1d:11:3b:c8:2e:f2:79:66:ba:
                    50:6c:ec:62:17:61:3f:54:29:65:fe:f5:6e:77:22:
                    21:ed:8c:1a:58:1b:1d:8d:01:67:11:9e:83:0e:76:
                    eb:ed:d4:b1:bf:91:59:f6:0b:cf:cd:12:da:61:49:
                    a7:6d:2e:6e:ec:39:8b:ff:4f:af:dd:ce:34:3d:8b:
                    42:39:3b:16:3c:40:e8:1d:26:bb:1d:80:52:47:97:
                    e3:d7:7e:07:2d:0c:39:cf:d9:bd:f1:df:5f:76:bb:
                    52:e5:2e:af:f8:77:db:04:14:d6:28:52:12:f3:92:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:86:4D:30:4D:A3:FB:87:F8:4B:99:48:0F:DF:FF:64:89:29:CE
            X509v3 Authority Key Identifier:
                keyid:FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/c7e32f8598567357d066bf56175e07e9757d1c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/6b5d884a539dc194148028738ffe2577e3a345c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1de::/46

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:0c:60:d0:ec:02:9b:39:ce:bd:ae:e8:ff:14:c9:56:ee:
         2e:53:7f:f4:cd:6c:b3:19:0d:e0:00:fb:4c:76:e9:e1:99:9a:
         37:8d:d5:1c:f8:d6:0c:6c:72:3a:6d:69:15:3a:58:0b:1e:26:
         28:69:4b:59:a8:7e:17:8b:5f:ed:b4:dc:0b:1a:1b:eb:4d:16:
         19:72:6f:f9:15:29:1a:f0:a7:3b:2e:05:6e:e7:61:0d:25:3c:
         81:af:51:20:af:0b:7e:a5:b7:24:36:e7:c2:03:f8:c7:74:c3:
         fa:79:9c:db:70:c4:f0:86:4c:8e:7e:db:5e:41:61:77:44:1f:
         db:d1:d0:ff:4b:72:63:33:f0:6c:9d:a9:29:d1:e7:40:2f:ec:
         37:bc:1a:a2:d6:71:4c:b1:47:b3:1c:66:a1:e1:f6:99:9e:2e:
         b4:42:27:e5:56:17:b7:d9:df:d4:14:a1:7a:9d:33:45:6d:10:
         67:dd:fd:ce:3f:eb:7c:f4:2f:ce:d5:6f:3f:20:45:2c:84:19:
         eb:10:e0:38:6e:c7:60:46:22:71:70:c8:99:78:90:55:67:d0:
         6a:aa:32:58:e9:f7:43:67:e9:d0:fe:f4:50:f5:66:3a:ea:6c:
         aa:b9:7f:72:73:8e:c4:88:33:ac:25:13:9a:92:6e:a6:ef:fc:
         0d:a1:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----