Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/8ff6bac87baebe750627b8f942d4b6786b0f0ed6.roa
File:                     8ff6bac87baebe750627b8f942d4b6786b0f0ed6.roa (raw, json)
Hash identifier:          fQs4ajwba5FA1VdO/McdYstv5st1Rf/CHRJJnoLCb2U=
Subject key identifier:   8E:96:4E:22:78:65:AD:BF:B3:0A:8A:6F:4F:1C:95:88:5C:9E:E6:95
Certificate issuer:       /CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
Certificate serial:       0CEC
Authority key identifier: CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/8ff6bac87baebe750627b8f942d4b6786b0f0ed6.roa
Signing time:             Mon 11 Apr 2022 14:01:20 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     272115
IP address blocks:        2801:171:8::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=8ff6bac87baebe750627b8f942d4b6786b0f0ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:a1:65:38:c6:01:12:01:e4:22:25:93:f8:
                    9c:8e:4c:37:f8:5c:bf:58:51:e6:35:63:4d:6a:b9:
                    f2:c0:8b:74:28:b5:fb:cd:c6:9d:66:c0:07:ef:e3:
                    61:dc:24:76:e9:8b:23:12:bb:0c:b5:54:82:2e:9e:
                    05:31:22:83:16:b5:19:1a:8a:eb:e7:5d:90:14:13:
                    f5:44:32:e7:aa:a5:c1:2b:de:10:2b:79:24:66:91:
                    b6:3e:f6:81:61:16:c5:e2:4c:3a:49:87:d7:34:99:
                    2b:4e:78:3b:ca:fe:18:dc:18:5c:fc:36:1a:8a:e2:
                    4d:b8:b1:8b:18:84:3c:e7:03:80:e8:19:d7:bd:b0:
                    84:2f:0e:a1:46:e4:91:62:a8:47:f3:a7:29:96:77:
                    9e:d0:15:f7:0a:16:ab:31:8b:b4:0c:18:99:92:c7:
                    60:2f:8f:01:74:16:6a:66:e5:8c:40:ff:f2:46:c7:
                    78:9a:da:26:d7:33:9e:8d:27:e5:e7:0a:ff:c4:0e:
                    09:7d:f4:dc:25:3d:b7:35:d3:9c:7f:8f:3e:43:7d:
                    b9:a5:ad:8d:3d:ba:38:e2:81:42:ce:bb:0f:33:b2:
                    c7:fb:59:d1:e1:76:12:1b:c9:24:1c:e2:9c:a5:67:
                    4d:e0:fc:90:e9:64:e4:1a:48:f8:ad:55:28:79:ae:
                    e0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:4E:22:78:65:AD:BF:B3:0A:8A:6F:4F:1C:95:88:5C:9E:E6:95
            X509v3 Authority Key Identifier:
                keyid:CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/8ff6bac87baebe750627b8f942d4b6786b0f0ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/9de7850c99ebea3e5574cd6cb0998b06089c80ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:171:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:cc:79:77:ee:f8:98:3d:7f:f9:b9:a6:52:35:36:c1:13:
         5c:71:6b:e2:28:41:ea:d4:f7:e6:fc:cc:1f:6b:45:98:56:d3:
         fd:c4:a5:92:85:83:f2:a4:56:10:3e:f4:b2:4c:b2:c3:ba:fe:
         cd:3d:c8:86:76:69:a4:58:b6:fa:d3:7c:b1:9f:7d:92:56:71:
         47:fa:99:92:12:a3:3a:d8:22:60:e2:99:2e:82:44:64:59:12:
         99:2b:c7:17:27:25:c8:18:cf:2f:fa:5b:61:84:05:2d:64:96:
         39:c7:d1:f5:27:4c:2c:14:1e:83:7a:01:99:7a:b9:99:6f:b7:
         22:7b:67:fa:76:8d:6c:55:62:8c:c3:4f:80:81:86:b6:ec:f4:
         5b:ac:e2:26:d6:7b:5b:d9:c5:51:80:5d:cc:18:3e:51:42:1c:
         ff:92:e7:e0:98:93:7a:e9:59:07:db:8c:1f:55:26:5b:1e:2d:
         7e:ad:c1:85:38:17:38:8a:fd:94:43:14:84:5b:57:70:9d:df:
         1c:5f:d7:9e:b6:f0:c7:96:b7:22:8a:da:97:e0:97:bc:2b:30:
         9a:7a:ad:f5:e1:e0:e9:c1:a6:5a:50:36:7f:2a:f2:0f:31:e1:
         14:14:69:14:27:36:c4:20:82:7e:6e:22:e5:19:2f:22:7c:b2:
         78:4e:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----