Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/ce04c047a4f78d3941fd108a85433c26edb304ad.roa
File:                     ce04c047a4f78d3941fd108a85433c26edb304ad.roa (raw, json)
Hash identifier:          6YzoyiNRamxYUObVwkMVcDQ6C8GF72LUQIrI1iXPylo=
Subject key identifier:   EF:62:2F:03:45:FC:81:EC:B5:A5:A0:DD:89:60:E5:83:56:54:73:7E
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       088654
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/ce04c047a4f78d3941fd108a85433c26edb304ad.roa
Signing time:             Thu 29 Dec 2022 20:36:05 +0000
ROA not before:           Wed 28 Dec 2022 20:34:51 +0000
ROA not after:            Sun 29 Dec 2024 20:34:51 +0000
asID:                     23246
IP address blocks:        2803:c310:fe00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558676 (0x88654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: Dec 28 20:34:51 2022 GMT
            Not After : Dec 29 20:34:51 2024 GMT
        Subject: CN=ce04c047a4f78d3941fd108a85433c26edb304ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:dc:ff:43:9e:3f:6a:c2:b1:1a:c6:b2:9c:
                    ae:ea:a6:0e:96:0c:d4:ef:e4:fe:75:04:5a:b6:df:
                    e6:91:2f:13:bd:bb:9c:18:88:59:98:be:ce:04:22:
                    81:63:4d:e0:3d:7d:23:f7:23:4d:88:f4:1f:a5:3e:
                    d2:14:6f:7a:1d:b5:15:9c:e8:67:84:e3:93:72:0a:
                    68:76:cc:b1:b2:f3:06:e2:56:29:66:6a:7b:e7:94:
                    f7:ef:11:47:8e:4c:ab:7d:ea:30:96:a3:d0:18:72:
                    2e:8e:7c:c6:20:95:31:c2:26:06:e2:5c:f9:ff:b3:
                    dc:de:4e:c6:17:b9:d9:fb:73:71:30:72:0a:f5:15:
                    6b:fb:40:f0:9c:ff:af:41:06:6c:b1:fa:0c:c3:db:
                    4f:13:31:46:f6:ea:59:36:ef:67:65:ec:d6:25:d5:
                    64:67:50:5c:c3:fb:60:dd:7d:fd:9b:f0:6e:07:cf:
                    7d:f4:00:90:b2:f9:a0:f5:dd:08:72:7b:99:61:50:
                    6a:7a:e9:b2:6e:39:57:06:46:a9:bf:a1:9c:c2:a5:
                    f6:c1:03:6b:8e:fb:d3:56:a3:4b:ff:ba:52:fc:16:
                    4a:77:bd:1b:49:60:69:96:c7:83:54:d7:67:28:29:
                    15:55:87:dc:cd:6e:93:6a:5b:3a:a7:20:35:9d:c6:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:62:2F:03:45:FC:81:EC:B5:A5:A0:DD:89:60:E5:83:56:54:73:7E
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/ce04c047a4f78d3941fd108a85433c26edb304ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c310:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:80:a2:97:7d:06:6f:f1:67:8b:74:9e:cb:68:f1:3c:0a:
         df:c3:e0:32:0c:20:8f:34:3a:cb:27:b0:0c:00:79:76:07:24:
         0a:02:4c:45:2e:58:64:a5:b7:d7:b6:1d:3d:dc:ff:98:bf:c0:
         01:49:6e:ff:3d:6f:d6:92:01:18:3f:a0:e0:1f:cc:77:37:a2:
         f9:15:9d:ee:ac:b0:6e:23:92:1c:bb:09:c2:e5:47:7e:66:06:
         38:e7:f6:ca:7c:a5:9d:f5:ea:e1:80:e6:67:0f:40:f0:a8:34:
         5c:d5:92:3b:2c:11:cf:25:26:3d:2c:40:5c:e1:87:5c:17:ba:
         32:7a:64:d3:e5:75:24:0b:45:7d:56:2e:90:3f:dd:79:c3:1b:
         f6:28:8b:1e:ae:48:1a:99:43:de:4e:d3:8f:a3:db:ed:0a:f7:
         2a:bd:77:32:04:dc:9a:5f:9e:4e:48:3e:67:84:79:af:6d:95:
         94:a5:4c:61:8a:a9:59:e4:3f:d1:3e:4e:07:2a:f8:9f:93:4e:
         d7:63:e3:6e:57:67:91:c1:6c:0a:77:c4:ce:03:98:18:b8:07:
         0d:cc:8d:fa:69:a2:4d:28:38:14:21:9a:f0:01:f6:47:05:bc:
         8f:ab:ea:0a:51:70:3e:4d:c8:2d:00:ff:ee:2c:f6:07:6e:c4:
         3a:d9:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----