Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/313c4227df7748b1f6714a4b5aa1706a21362ee6.roa
File:                     313c4227df7748b1f6714a4b5aa1706a21362ee6.roa (raw, json)
Hash identifier:          bT4liTsp5lTsQcskoNP48152Zyeo78Nykgqgnyy+HfQ=
Subject key identifier:   1A:14:B1:A9:D2:8D:12:C6:57:4F:DF:3F:7A:E7:41:0C:A4:60:F6:DB
Certificate issuer:       /CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
Certificate serial:       0773A0
Authority key identifier: 5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/313c4227df7748b1f6714a4b5aa1706a21362ee6.roa
Signing time:             Wed 21 Apr 2021 12:02:14 +0000
ROA not before:           Wed 21 Apr 2021 03:00:00 +0000
ROA not after:            Fri 21 Apr 2023 03:00:00 +0000
asID:                     22860
IP address blocks:        2800:8f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488352 (0x773a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
        Validity
            Not Before: Apr 21 03:00:00 2021 GMT
            Not After : Apr 21 03:00:00 2023 GMT
        Subject: CN=313c4227df7748b1f6714a4b5aa1706a21362ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:5e:5e:af:dd:bd:14:70:bb:06:87:fe:0d:
                    c4:e0:2a:73:16:d7:a4:40:15:d6:d0:a9:9e:74:bd:
                    ad:43:57:fd:4f:f4:d9:bf:1b:6b:33:68:4b:98:91:
                    3e:d4:b2:3e:e8:f1:01:10:47:27:a4:b7:0f:a7:92:
                    f9:5c:ab:84:e8:09:71:06:fe:8e:5a:fb:2c:ca:a8:
                    20:9d:75:b4:a1:8d:f8:05:df:46:2e:33:fd:68:3e:
                    45:68:04:5d:d9:b8:47:cc:00:ca:3a:d5:f2:10:cc:
                    0a:54:e5:8b:38:14:51:bf:fc:75:a3:b6:9e:68:68:
                    56:74:1f:81:52:af:16:c5:8a:65:9f:69:1d:b7:f1:
                    a6:9e:58:21:d6:18:29:16:24:79:0a:ef:1b:df:6d:
                    54:51:49:d2:e0:93:fc:be:14:b0:74:ac:f9:43:1d:
                    33:ef:d3:45:da:45:45:37:d3:cc:21:ee:22:6a:4f:
                    39:fc:0a:07:95:ba:8a:94:eb:1e:e1:70:5d:1f:30:
                    19:0a:7d:24:e4:7e:9e:9a:ee:cb:67:b3:8e:60:1e:
                    6b:05:68:75:ef:97:06:6a:92:f9:ba:eb:0c:f6:79:
                    50:a2:36:4d:30:9e:3a:05:af:05:76:fe:02:5a:bf:
                    a6:70:c5:da:d9:bb:45:02:16:51:43:fc:ab:c5:87:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:14:B1:A9:D2:8D:12:C6:57:4F:DF:3F:7A:E7:41:0C:A4:60:F6:DB
            X509v3 Authority Key Identifier:
                keyid:5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/313c4227df7748b1f6714a4b5aa1706a21362ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:b9:ed:1c:c6:7b:6e:5d:a3:e2:bc:d3:18:54:86:ab:fc:
         3c:e3:4a:2e:43:f2:12:10:14:7a:27:bf:df:d7:7f:ce:ba:e4:
         d8:31:18:b7:ed:bc:0f:43:26:fb:c2:42:11:c1:05:32:92:53:
         ce:16:17:9a:21:1a:d4:8f:63:17:ee:cd:fb:cc:d0:ee:4e:74:
         9d:cd:a1:78:20:2e:1a:c9:fe:b3:3c:c1:f7:47:9d:5e:37:0c:
         a2:af:73:12:bb:77:fd:ed:82:56:00:55:8c:6a:be:b0:14:bd:
         69:e5:9d:2b:14:db:c5:52:b8:aa:74:b3:81:56:4a:17:2c:c7:
         b9:f2:18:40:71:92:4a:a1:67:a1:4d:3d:e4:af:07:28:ff:16:
         21:14:d6:a0:5f:de:05:a9:eb:61:39:97:48:3b:f7:55:87:62:
         22:3f:26:45:5d:05:93:1b:5f:ca:f3:e2:8e:f7:74:6f:23:b7:
         23:d8:e8:f8:08:6d:87:8e:3d:5d:a8:42:8d:b0:1b:5e:cb:64:
         da:93:3c:e0:e5:3c:51:1c:39:e9:5f:a4:02:a0:8d:14:57:77:
         21:27:55:df:b2:a2:19:53:9f:6e:d2:3b:a6:d0:17:99:85:9d:
         db:ef:af:3c:83:41:55:bc:3c:c5:03:b7:09:bc:40:dd:7b:d3:
         7e:f8:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----