Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/c79d82941c5b8142acefb7c8238f34cbe569d697.roa
File:                     c79d82941c5b8142acefb7c8238f34cbe569d697.roa (raw, json)
Hash identifier:          qHswQUh8kfSinDBaJEl47SC8jgRgPZz4VAmZocWdqHk=
Subject key identifier:   DF:24:69:E7:49:70:E6:56:91:F5:52:9A:A8:07:8E:B9:23:29:C8:69
Certificate issuer:       /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial:       1D55B9
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/c79d82941c5b8142acefb7c8238f34cbe569d697.roa
Signing time:             Wed 12 Apr 2023 16:31:38 +0000
ROA not before:           Tue 11 Apr 2023 16:28:53 +0000
ROA not after:            Sat 12 Apr 2025 16:28:53 +0000
asID:                     269893
IP address blocks:        2803:94e0::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922489 (0x1d55b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
        Validity
            Not Before: Apr 11 16:28:53 2023 GMT
            Not After : Apr 12 16:28:53 2025 GMT
        Subject: CN=c79d82941c5b8142acefb7c8238f34cbe569d697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:cc:ca:e2:db:1a:5e:d8:5d:74:41:b1:62:
                    90:eb:0d:d7:59:ce:c0:1c:42:c8:47:53:13:d9:3f:
                    4c:75:7f:8e:c0:b1:15:dc:c9:ad:1e:41:52:c8:28:
                    71:00:4e:35:ec:f1:76:90:02:43:99:ea:03:4a:f7:
                    86:c5:2f:27:19:f6:df:71:26:6c:de:da:97:80:69:
                    81:e7:27:eb:71:c2:08:aa:11:1f:8b:ac:cf:b6:38:
                    d5:3c:23:00:47:df:69:a9:2e:c7:88:f5:fe:ee:d5:
                    81:92:0c:c2:e9:1f:67:8d:ce:71:0f:21:02:66:62:
                    d2:b1:c1:a1:2a:3b:93:31:4a:56:6c:80:40:85:ae:
                    d0:e0:1d:69:6b:3c:e0:aa:16:23:47:39:cd:39:30:
                    a1:8b:65:e9:ec:38:f0:d9:dc:1d:87:dd:2b:d4:c8:
                    b6:22:56:c9:00:06:ac:82:d8:e3:93:7c:a7:36:c6:
                    67:50:36:f6:b9:c4:81:e8:9a:27:43:db:a1:6c:dc:
                    0b:63:60:d2:64:3c:f8:43:ef:bb:d1:bc:c2:39:44:
                    35:e4:34:b2:e7:42:9d:bc:d9:d2:7a:96:8e:24:af:
                    e5:bc:b8:8c:9b:9a:60:09:2a:e8:b5:98:51:83:7e:
                    4d:8f:00:d0:0c:bb:fa:ef:15:c1:40:33:fe:2c:86:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:24:69:E7:49:70:E6:56:91:F5:52:9A:A8:07:8E:B9:23:29:C8:69
            X509v3 Authority Key Identifier:
                keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/c79d82941c5b8142acefb7c8238f34cbe569d697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:76:a7:97:d9:9c:94:77:bd:af:de:c5:08:62:a9:de:70:bd:
         c5:79:08:62:e9:a7:92:b6:ca:95:1b:1e:b7:c4:51:05:56:9a:
         81:0b:1d:ca:74:8f:38:fe:18:9f:e5:73:09:c2:02:26:18:ba:
         d9:aa:e5:e4:fc:7e:e0:73:bc:d8:7d:be:95:21:58:54:10:13:
         4c:89:97:21:de:98:11:8f:48:1c:f8:90:55:f9:0a:1e:6f:6b:
         59:31:ea:f7:34:8b:e4:19:d9:07:09:96:92:d4:f2:a7:69:fa:
         9c:2e:51:aa:47:33:92:b9:cb:d4:31:92:f3:7a:10:23:0f:d4:
         e3:98:6b:66:1d:71:65:fa:ab:54:6f:a9:f6:ad:44:6e:0b:a4:
         03:ba:71:02:55:b2:bf:a5:9b:df:7a:3d:1a:8f:32:14:cd:ae:
         59:04:5b:9e:37:33:c6:48:45:de:7d:7b:6b:eb:92:44:13:2b:
         7a:c8:b8:cc:fd:58:85:54:61:09:33:1f:c1:53:26:47:41:a1:
         76:e2:9e:21:d9:e1:12:4d:0b:e6:89:52:15:8d:a3:0e:53:55:
         67:3f:2d:2a:31:7f:bc:88:89:89:8a:ae:f5:47:ef:8f:54:f8:
         28:5c:74:28:0c:01:0c:4d:8d:34:86:8a:8b:2e:d8:45:26:cd:
         2a:72:97:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----