Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/cfe0bad4f2a1e6cf556f0313d94b0c7dd105e3b4.roa
File:                     cfe0bad4f2a1e6cf556f0313d94b0c7dd105e3b4.roa (raw, json)
Hash identifier:          VjhJIhTX+ZhaCK6nzDC0WlGve5H2ZjHlSl/pTCTiunw=
Subject key identifier:   59:41:7B:03:6C:45:F0:FC:4E:A0:1F:78:28:DA:19:94:4E:3E:07:B3
Certificate issuer:       /CN=44185224cf7ca78dbccca01419f06c7cc212b495
Certificate serial:       18CBC1
Authority key identifier: DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/cfe0bad4f2a1e6cf556f0313d94b0c7dd105e3b4.roa
Signing time:             Fri 17 Jun 2022 19:39:45 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     12180
IP address blocks:        2803:8080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625025 (0x18cbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=cfe0bad4f2a1e6cf556f0313d94b0c7dd105e3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0f:8e:69:2f:b0:66:e5:a0:9b:92:5e:d2:9c:
                    90:ba:82:b4:74:23:c0:4d:91:cf:98:29:29:02:df:
                    a2:85:e5:2d:74:c4:a9:5a:cd:11:fa:ab:c8:b1:26:
                    35:dd:3c:71:ae:32:49:f3:5a:3d:18:28:08:13:4c:
                    da:66:af:49:1c:04:f0:dd:7f:38:7e:89:3d:85:a1:
                    a7:4f:71:4c:07:49:fd:76:6c:d5:8f:ed:e3:25:18:
                    29:5c:0f:b7:af:1b:1a:3f:da:ca:33:6e:2b:1f:71:
                    a5:c6:a1:44:54:32:64:f2:27:be:63:21:37:44:05:
                    69:4a:85:8d:36:a7:2f:57:04:24:65:33:a2:50:e2:
                    8b:bc:82:9d:3d:3d:e7:ea:b3:39:2a:6d:69:6c:31:
                    10:16:34:e2:7a:30:93:65:3e:82:ef:52:73:d7:ad:
                    a8:4a:95:8a:46:79:bc:2c:0b:2f:8a:bc:97:fe:cc:
                    9c:29:4b:55:59:c1:09:10:09:4a:04:ac:b5:b9:f2:
                    eb:fe:de:76:b9:5d:79:25:38:ca:64:fe:07:1c:31:
                    ce:7b:0a:34:07:cf:64:8a:00:74:ab:3f:54:0d:50:
                    3d:29:2e:2a:ac:22:29:ab:9f:a0:3a:fe:49:59:f0:
                    8e:a9:ee:34:cd:9f:6e:84:80:52:55:43:c1:2f:80:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:41:7B:03:6C:45:F0:FC:4E:A0:1F:78:28:DA:19:94:4E:3E:07:B3
            X509v3 Authority Key Identifier:
                keyid:DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/cfe0bad4f2a1e6cf556f0313d94b0c7dd105e3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:07:7a:1e:33:99:2b:8c:9b:9a:b4:97:a0:8d:8a:11:cc:9c:
         3b:bf:6a:e0:b6:e0:10:1b:7e:3b:f2:9d:4f:63:61:76:87:99:
         1b:89:56:75:29:32:73:f1:44:66:10:94:7f:bf:56:8c:99:85:
         52:a5:93:ed:e0:bd:35:fe:d0:e8:9b:28:31:02:76:8d:74:9b:
         63:8c:9c:bd:85:51:af:3f:d3:1a:7a:6f:02:43:3a:fe:f6:1e:
         b6:89:0c:c7:57:89:04:16:1e:e5:51:49:e8:81:51:44:42:51:
         93:dd:27:99:ba:db:40:0f:18:59:b4:ed:c3:15:e4:1b:47:3a:
         92:88:92:54:22:7d:70:e7:2f:40:d0:20:aa:27:76:89:3f:40:
         83:83:0c:05:b0:f2:f4:a7:68:00:a3:9a:f8:3c:16:bd:a9:fd:
         5d:48:9d:dc:9d:7b:19:0e:a1:e8:04:24:86:2e:7e:a4:83:99:
         79:04:29:04:ea:1c:27:3b:57:93:0c:b8:2e:8b:c4:58:91:e8:
         dd:8b:ca:3a:69:b7:93:00:ec:2b:f9:d8:a9:fe:87:71:70:e0:
         ad:0e:07:70:f8:cd:e8:e3:95:64:fe:d8:40:2a:ff:52:a3:22:
         da:62:63:19:bc:72:b0:9c:ca:4d:56:b4:58:1e:53:0c:36:d7:
         5f:6e:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----