Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/6f084bfff807623f2b993e667e7ff83b66e236f6.roa
File:                     6f084bfff807623f2b993e667e7ff83b66e236f6.roa (raw, json)
Hash identifier:          ciHO4yt+qQX7G8giI66d3nUsasQ6fv3R9ea4ebxcDeI=
Subject key identifier:   03:DF:21:CD:3B:30:21:B7:47:A4:38:02:15:3F:AA:2A:F7:51:2F:AD
Certificate issuer:       /CN=9fab8d5b820b6e41a09489268bb8098894f124db
Certificate serial:       0DFFBA
Authority key identifier: AB:74:EB:B2:43:51:65:2D:AC:F3:0D:68:F0:F7:F3:6F:40:20:38:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fab8d5b820b6e41a09489268bb8098894f124db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/6f084bfff807623f2b993e667e7ff83b66e236f6.roa
Signing time:             Thu 17 Mar 2022 17:01:26 +0000
ROA not before:           Thu 17 Mar 2022 03:00:00 +0000
ROA not after:            Sun 17 Mar 2024 03:00:00 +0000
asID:                     270092
IP address blocks:        2803:fbe0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917434 (0xdffba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fab8d5b820b6e41a09489268bb8098894f124db
        Validity
            Not Before: Mar 17 03:00:00 2022 GMT
            Not After : Mar 17 03:00:00 2024 GMT
        Subject: CN=6f084bfff807623f2b993e667e7ff83b66e236f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:17:ae:c8:a5:1a:4a:53:ea:ba:c5:c9:e8:
                    ae:8a:47:f9:e5:40:18:0f:41:8b:79:67:d1:34:55:
                    fa:dc:d8:02:55:63:6e:16:9c:b6:69:3e:a0:13:54:
                    27:d9:09:c0:2b:cc:3e:92:ef:b4:e3:a2:8a:f6:6f:
                    4d:88:05:54:a9:1c:53:3a:cd:b6:00:5e:df:b9:2f:
                    e7:1c:22:ed:97:55:d1:a2:a8:54:c3:30:8a:22:8c:
                    87:a5:e9:90:99:83:6a:df:74:07:2a:a3:a0:39:20:
                    60:b5:b9:e8:ec:a0:46:cd:3f:69:25:82:a9:66:48:
                    8d:f5:ce:d7:f7:10:43:65:e1:b0:1e:20:49:8f:c5:
                    8b:4b:29:d1:45:47:a4:f1:4d:d0:75:4a:de:93:8b:
                    78:96:0f:ce:49:3c:10:ef:ff:a1:52:f3:16:61:a4:
                    eb:18:96:5f:50:82:7c:83:84:52:8a:37:c8:4f:72:
                    a4:6b:fd:25:9b:05:03:68:a2:49:23:98:d7:cd:9c:
                    a5:fe:80:0a:98:60:15:65:86:2f:c0:f4:ab:61:69:
                    19:43:4e:38:0b:9a:9b:4d:01:42:18:38:f7:5e:26:
                    d3:5c:c8:be:c7:f6:d7:f7:81:56:32:99:b9:c9:fe:
                    7c:23:fb:1d:2e:a5:d2:60:6c:19:a8:b3:c9:46:98:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DF:21:CD:3B:30:21:B7:47:A4:38:02:15:3F:AA:2A:F7:51:2F:AD
            X509v3 Authority Key Identifier:
                keyid:AB:74:EB:B2:43:51:65:2D:AC:F3:0D:68:F0:F7:F3:6F:40:20:38:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fab8d5b820b6e41a09489268bb8098894f124db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/6f084bfff807623f2b993e667e7ff83b66e236f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/9fab8d5b820b6e41a09489268bb8098894f124db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fbe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:23:69:59:c5:69:d7:da:11:ba:29:33:1a:c9:b1:4f:84:6e:
         3e:fc:68:ed:22:16:a6:e9:48:3f:98:48:9e:c6:7b:bc:e8:20:
         cc:2b:59:86:bc:2b:80:81:4e:a1:1b:35:b7:34:ff:13:0c:77:
         26:5c:44:1b:f9:e0:73:e6:1e:5f:a0:0e:89:4b:37:d3:94:b4:
         ea:28:6f:19:cf:de:ee:b8:8e:9c:b3:17:0e:27:81:57:f4:35:
         55:4c:14:e6:80:df:e4:e1:03:fc:66:f5:d8:0c:0d:00:f5:ae:
         40:19:51:cf:6c:a6:26:9f:b5:e0:4d:ee:15:41:70:95:45:98:
         68:95:c3:0f:55:cd:fd:f7:7b:f0:5d:1b:2f:e1:23:ff:83:0b:
         16:5f:cf:db:12:6e:30:e1:ba:22:33:87:ef:cb:c5:a2:9a:ad:
         4d:cd:11:a2:2f:b3:e1:cc:a9:17:b0:d9:43:ed:9b:e1:cb:b4:
         9a:3b:7a:78:91:eb:b3:f0:81:17:52:65:5e:65:9b:1b:c9:7a:
         a6:b8:a6:43:d8:c5:6e:05:0a:cf:45:41:39:35:82:94:70:08:
         ba:a2:9b:2b:55:8c:6f:b0:db:ce:ec:d7:b8:9b:7b:61:fd:8f:
         e5:dc:74:37:9a:49:e0:aa:7f:4a:7d:d2:0f:0f:fc:cc:8c:4b:
         7b:c5:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----