Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c34677a84ab1fad8b0ec997d4a6342aa6a3fba41.roa
File:                     c34677a84ab1fad8b0ec997d4a6342aa6a3fba41.roa (raw, json)
Hash identifier:          efpaQrnV7m/UNBRbM9DY7BPt5zBkbesTWuu8V/zG6Og=
Subject key identifier:   DF:46:4E:54:87:03:24:5E:73:14:62:D7:2A:A7:C4:61:51:76:D4:B9
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1BEAA2
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c34677a84ab1fad8b0ec997d4a6342aa6a3fba41.roa
Signing time:             Wed 28 Sep 2022 02:34:39 +0000
ROA not before:           Wed 28 Sep 2022 02:32:25 +0000
ROA not after:            Sat 28 Sep 2024 02:32:25 +0000
asID:                     19114
IP address blocks:        2800:830::/36 maxlen: 36
                          2800:830:1000::/36 maxlen: 36
                          2800:830:2000::/36 maxlen: 36
                          2800:830:3000::/36 maxlen: 36
                          2800:830:4000::/36 maxlen: 36
                          2800:830:5000::/36 maxlen: 36
                          2800:830:6000::/36 maxlen: 36
                          2800:830:7000::/36 maxlen: 36
                          2800:830:8000::/36 maxlen: 36
                          2800:830:9000::/36 maxlen: 36
                          2800:830:a000::/36 maxlen: 36
                          2800:830:b000::/36 maxlen: 36
                          2800:830:c000::/36 maxlen: 36
                          2800:830:d000::/36 maxlen: 36
                          2800:830:e000::/36 maxlen: 36
                          2800:830:f000::/36 maxlen: 36
                          2800:831::/36 maxlen: 36
                          2800:831:1000::/36 maxlen: 36
                          2800:831:2000::/36 maxlen: 36
                          2800:831:3000::/36 maxlen: 36
                          2800:831:4000::/36 maxlen: 36
                          2800:831:5000::/36 maxlen: 36
                          2800:831:6000::/36 maxlen: 36
                          2800:831:7000::/36 maxlen: 36
                          2800:831:8000::/36 maxlen: 36
                          2800:831:9000::/36 maxlen: 36
                          2800:831:a000::/36 maxlen: 36
                          2800:831:b000::/36 maxlen: 36
                          2800:831:c000::/36 maxlen: 36
                          2800:831:d000::/36 maxlen: 36
                          2800:831:e000::/36 maxlen: 36
                          2800:831:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829538 (0x1beaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Sep 28 02:32:25 2022 GMT
            Not After : Sep 28 02:32:25 2024 GMT
        Subject: CN=c34677a84ab1fad8b0ec997d4a6342aa6a3fba41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:ae:02:e2:d0:e9:98:48:26:f5:64:1e:35:
                    c6:db:05:64:c9:3f:ae:2c:ff:05:da:ec:90:f2:04:
                    b3:88:21:ed:92:fd:54:bf:a1:b2:08:fa:d8:c3:29:
                    c6:4c:90:10:19:4e:ff:f4:ee:37:41:23:d4:d5:aa:
                    70:e4:1a:12:ef:68:a8:f9:57:e1:21:d8:0d:2a:55:
                    d5:c4:e3:e9:24:cc:b1:ef:dd:d1:c7:86:f6:f1:61:
                    13:fd:8f:66:3e:07:e1:f9:65:57:b8:51:02:c7:04:
                    f4:69:2e:d7:de:63:c6:57:ee:89:b8:d5:a1:7d:f8:
                    f8:d9:d1:7f:4e:58:88:ec:3a:70:88:3c:a2:a0:4d:
                    5d:7f:a9:99:f7:bf:b2:cc:53:88:2b:36:36:33:ab:
                    da:b8:50:0b:c9:2c:e2:e1:ca:b3:46:96:b3:4f:14:
                    0b:0d:bb:cd:bc:4d:ea:84:1f:b2:0b:30:67:e9:15:
                    69:e0:dc:67:bd:a7:a2:bb:cc:96:fa:d2:cc:9d:bf:
                    6c:6c:eb:96:fb:03:de:cb:ce:fb:11:34:a4:bb:6f:
                    db:c8:c6:30:29:1f:10:79:a9:6c:0a:2c:ac:e8:5a:
                    69:7f:a6:f6:c4:86:95:70:94:90:78:99:af:e5:7b:
                    82:c2:fe:15:03:18:44:6f:99:e2:9b:15:a8:0f:8c:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:4E:54:87:03:24:5E:73:14:62:D7:2A:A7:C4:61:51:76:D4:B9
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c34677a84ab1fad8b0ec997d4a6342aa6a3fba41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:830::/31

    Signature Algorithm: sha256WithRSAEncryption
         76:78:e0:54:a7:33:47:57:65:c0:14:3b:10:bb:bb:b5:6d:b1:
         ab:b1:c8:dd:73:da:09:b3:3b:d1:0b:80:76:f1:a9:f9:7a:53:
         30:e7:5a:b6:82:f9:ef:3b:91:d4:b5:6e:d5:ce:7d:c7:bc:ba:
         6d:4d:8f:59:10:74:3d:1d:5a:b6:63:c0:1a:9b:62:c5:43:fc:
         e9:51:eb:24:df:9c:3f:10:4f:5f:12:81:de:e6:20:14:27:b3:
         14:3e:f2:07:bd:cf:6d:eb:32:62:7f:d5:7d:5f:fb:45:50:09:
         cd:57:4b:e0:e2:5b:92:fe:d9:4d:4e:56:07:14:a4:79:c5:b6:
         61:17:2e:d6:04:0b:78:6a:b6:56:9e:ee:62:25:5e:e9:6c:33:
         39:e6:e0:b5:0a:dd:3a:9a:72:00:81:2b:98:f2:3d:67:f5:f0:
         8c:22:cb:62:f0:53:b7:36:f0:3b:23:3d:3b:ca:30:43:6b:ee:
         41:1c:72:57:a3:ed:9b:80:50:76:dc:6b:f0:ba:d0:2c:a8:b9:
         74:43:48:a1:26:38:ea:24:5e:c3:8e:0b:ff:61:44:07:07:b9:
         3b:bd:fc:27:aa:5e:e5:3f:13:4f:b4:bf:64:f2:3c:7e:e2:38:
         7e:3b:b2:75:a6:01:46:fd:d6:48:dd:2a:71:c0:10:33:1b:6d:
         c6:1c:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----