Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d434d86-ca26-488b-90ad-59188f0a811a/5a7cd2f055ba61c8dd85cf8220d48df85187823c.roa
File:                     5a7cd2f055ba61c8dd85cf8220d48df85187823c.roa (raw, json)
Hash identifier:          mIy0G5G3QA7NreWv0R20fvappoVQmh4pi5Mp1ks0cPI=
Subject key identifier:   FE:75:72:2D:67:77:2B:2C:12:A8:49:CC:B9:12:9C:F5:1B:B4:B2:25
Certificate issuer:       /CN=70479caeb1b056b20fa016fe1b60ded6b951d427
Certificate serial:       02E5
Authority key identifier: D4:C4:7C:F7:C6:60:66:F2:20:66:05:17:4F:AB:9D:56:42:29:BC:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70479caeb1b056b20fa016fe1b60ded6b951d427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d434d86-ca26-488b-90ad-59188f0a811a/5a7cd2f055ba61c8dd85cf8220d48df85187823c.roa
Signing time:             Fri 15 Jul 2022 17:50:59 +0000
ROA not before:           Fri 15 Jul 2022 03:00:00 +0000
ROA not after:            Mon 15 Jul 2024 03:00:00 +0000
asID:                     272109
IP address blocks:        2803:b710::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70479caeb1b056b20fa016fe1b60ded6b951d427
        Validity
            Not Before: Jul 15 03:00:00 2022 GMT
            Not After : Jul 15 03:00:00 2024 GMT
        Subject: CN=5a7cd2f055ba61c8dd85cf8220d48df85187823c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:ef:ab:91:b1:c7:e5:4f:c3:e7:72:ad:c5:
                    1d:77:ed:87:88:48:bf:f5:97:15:6d:f9:7b:99:a6:
                    1e:8e:ca:7d:40:d8:55:69:ea:7b:fe:e3:6c:2d:e0:
                    33:07:22:77:22:da:4f:83:4b:64:d1:b4:4f:f2:17:
                    95:12:7c:fb:c2:b2:ea:b6:81:a2:81:f5:4b:ff:29:
                    3f:0d:98:5b:ab:47:ad:2e:d2:6c:17:6d:96:26:fa:
                    0e:75:97:a3:f5:f4:58:1a:3a:d5:55:27:d5:e1:b6:
                    c4:31:e1:3d:f5:41:f0:b9:88:6b:6a:77:3c:af:64:
                    42:28:99:66:7e:9a:0f:a5:9d:a5:03:2f:5b:2e:29:
                    a5:c5:11:81:83:2e:cf:c0:06:b7:02:82:67:10:47:
                    de:9e:63:83:71:8b:1d:07:24:7c:8e:ce:80:d8:41:
                    16:e9:cb:7c:8e:b3:19:43:8c:cd:b2:fe:7a:0f:fb:
                    8f:85:85:d7:4d:2f:cc:51:a9:c4:c7:47:cb:c4:ff:
                    58:d7:a1:21:f6:6b:36:25:22:52:6e:66:2f:23:73:
                    62:68:12:41:3d:2d:ec:9d:d8:f0:ee:a2:f1:6e:a7:
                    a3:36:cd:ca:e6:20:e3:1b:5f:63:75:dc:f5:16:1f:
                    c2:84:2f:3d:72:e8:6c:cb:ee:66:1c:5c:05:1f:e9:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:75:72:2D:67:77:2B:2C:12:A8:49:CC:B9:12:9C:F5:1B:B4:B2:25
            X509v3 Authority Key Identifier:
                keyid:D4:C4:7C:F7:C6:60:66:F2:20:66:05:17:4F:AB:9D:56:42:29:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70479caeb1b056b20fa016fe1b60ded6b951d427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d434d86-ca26-488b-90ad-59188f0a811a/5a7cd2f055ba61c8dd85cf8220d48df85187823c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d434d86-ca26-488b-90ad-59188f0a811a/70479caeb1b056b20fa016fe1b60ded6b951d427.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b710::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:bc:87:e9:1d:cb:94:40:9a:dd:61:a0:33:7c:bf:d5:39:
         c2:7a:ab:cf:42:1a:90:8b:9f:9d:50:d8:e3:7d:b4:2a:c3:19:
         0e:69:92:58:66:a7:44:8e:7d:43:05:e4:42:a1:e7:2d:0d:66:
         18:40:36:86:2c:ae:c6:54:ff:29:7c:2d:55:e7:53:80:82:8b:
         1f:48:78:44:62:64:56:b4:7d:34:8e:eb:b0:84:b9:ca:ee:3a:
         ca:27:da:07:89:a4:8e:9e:60:2e:9d:e3:25:a3:fe:46:2e:1a:
         55:c6:80:a1:85:bf:12:db:bf:6d:0c:99:8e:86:a7:dd:e0:69:
         20:50:f1:32:5c:20:f4:65:f6:70:e2:6b:3f:df:10:8b:55:1f:
         14:c7:b0:4f:9e:e5:26:fd:cf:ee:a0:a4:7f:ac:df:af:c7:ba:
         6a:c0:45:91:e0:0f:6b:06:4e:1c:8c:82:3d:ee:5e:11:db:b3:
         25:1f:62:ff:f7:74:d1:0c:01:fe:71:91:06:d4:4c:b3:24:92:
         40:e9:6b:25:17:fe:8b:a4:61:c9:ab:37:16:87:05:1d:1e:08:
         35:7a:d7:3a:e2:53:2a:29:48:36:87:88:1b:6a:ec:1b:59:6b:
         2d:79:2e:42:92:e8:48:1b:90:6f:07:1d:bf:c4:79:69:fe:11:
         9c:28:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----