Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f42ac4bc3bec294b84a539ac3ceccb5db8e7bbfe.roa
File:                     f42ac4bc3bec294b84a539ac3ceccb5db8e7bbfe.roa (raw, json)
Hash identifier:          Qn1P7T6wf5dpUbAMzRwXyW+S12l+7nwl4fdE2oB90Pg=
Subject key identifier:   EC:59:22:DB:47:83:92:95:03:32:4D:9E:02:B7:06:79:ED:D7:CC:53
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       10F55B
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f42ac4bc3bec294b84a539ac3ceccb5db8e7bbfe.roa
Signing time:             Fri 27 May 2022 19:51:31 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Mon 27 May 2024 03:00:00 +0000
asID:                     52439
IP address blocks:        2803:b0e0:9979::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111387 (0x10f55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2024 GMT
        Subject: CN=f42ac4bc3bec294b84a539ac3ceccb5db8e7bbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:ac:21:1d:5d:03:8a:2f:7f:cb:c9:8e:aa:
                    2b:3d:20:57:4c:6f:9a:6c:d8:59:68:c7:79:e9:bf:
                    15:47:25:91:38:99:51:a5:43:8b:26:4d:15:88:ab:
                    4d:47:8b:c9:df:2f:92:17:67:8d:8b:7b:20:fb:e0:
                    de:98:aa:38:59:0b:da:ae:60:8f:c0:3c:31:c9:5b:
                    78:3f:b4:36:98:0d:dd:26:84:9d:ba:7d:c2:69:bb:
                    26:6f:2a:44:e9:66:85:b1:f7:14:83:f6:c0:66:a2:
                    0c:e5:5c:22:1e:0a:fa:3f:56:57:1f:80:93:38:a2:
                    c0:e2:29:94:cd:ce:25:a3:4e:b0:5d:42:0f:16:a6:
                    18:30:53:ca:2c:54:7c:e0:af:de:07:9a:ee:2d:fa:
                    b0:f2:1d:fa:bd:95:28:33:d3:6b:15:73:65:49:39:
                    67:e6:05:df:58:39:21:c7:2b:ea:62:10:c4:6d:43:
                    93:d1:c4:e3:2a:c1:4c:8b:7c:9a:92:8d:0a:1d:5f:
                    85:9c:83:9d:ef:af:75:3d:7c:a5:a2:4b:4a:2d:fe:
                    df:ef:de:a7:6e:79:7f:71:54:14:5e:1a:33:f7:c3:
                    6b:b4:bd:31:cf:ed:35:21:31:42:ef:10:ed:58:e7:
                    ad:e8:ef:c4:dc:ec:a8:b2:3a:f3:2b:38:cc:74:37:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:59:22:DB:47:83:92:95:03:32:4D:9E:02:B7:06:79:ED:D7:CC:53
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f42ac4bc3bec294b84a539ac3ceccb5db8e7bbfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9979::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:99:f1:ac:aa:f0:fe:55:fd:8a:e5:c5:91:79:9f:0b:3b:
         8b:4e:4b:c0:06:ae:f0:45:b9:33:93:1a:89:c8:5f:e3:f0:5b:
         af:80:2c:d0:3c:80:85:3e:ac:03:9f:28:2c:a9:f6:05:25:a0:
         2a:d2:90:f2:2b:75:00:91:60:b0:47:19:d9:65:38:d1:a2:02:
         1f:2f:f1:c0:0b:98:d6:d0:63:99:b4:ad:c1:b5:9d:42:57:a4:
         26:b8:4d:60:a8:52:e7:b4:97:6a:7b:37:08:0f:6c:42:c1:c7:
         8f:12:2c:be:f6:55:8e:08:cc:e2:26:79:e0:13:8e:b2:df:06:
         0c:aa:ee:3b:7b:1f:a1:87:01:bc:57:d3:08:cd:c9:9f:c4:be:
         9c:5c:f0:73:58:08:37:0d:8c:84:a7:d0:34:9f:12:ca:f2:3b:
         d3:3b:b6:96:03:e4:9e:7a:f0:c3:47:f0:fa:40:1f:c5:24:5a:
         c9:41:21:b1:e6:7a:e7:b2:92:0b:dc:7a:17:9d:dc:fa:bb:e3:
         7d:e7:e8:b8:16:c6:b1:c6:51:24:9e:f9:53:2e:0e:40:05:64:
         29:b3:82:6f:cd:af:0b:52:1f:e2:36:08:61:4d:81:a8:fe:a9:
         5a:bb:10:1f:a2:39:3e:fe:8e:90:28:d7:f1:b5:bf:7f:be:d7:
         9b:63:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----