Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/635c9df1b879d6ad58c98debff86bc49e42719ce.roa
File:                     635c9df1b879d6ad58c98debff86bc49e42719ce.roa (raw, json)
Hash identifier:          L3uWPQ7W66y55fnQpQ8uf1Z9C4E1ADxP9kCkwfOMcJA=
Subject key identifier:   99:D5:55:E2:3E:34:41:6E:9E:76:37:38:CD:29:4C:FB:B3:B0:C9:B0
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       19889C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/635c9df1b879d6ad58c98debff86bc49e42719ce.roa
Signing time:             Wed 22 Jun 2022 23:57:05 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28001
IP address blocks:        2801:1b8::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673372 (0x19889c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=635c9df1b879d6ad58c98debff86bc49e42719ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:5f:f6:24:69:94:cf:48:eb:77:c5:9c:d4:
                    a8:43:60:b7:9b:76:33:17:ca:81:94:e6:58:af:a5:
                    10:f6:19:91:ab:d9:00:78:e0:15:16:71:a6:14:0e:
                    4b:a2:59:47:83:9c:cf:29:b3:e5:f8:8b:76:71:00:
                    9b:50:d9:58:13:2a:e5:7c:35:1d:90:d5:15:dd:95:
                    31:5f:b1:76:bb:fd:9c:df:f4:28:86:54:50:44:78:
                    bd:7c:10:fc:00:a8:e4:41:66:e5:e1:c1:3f:98:cb:
                    e5:82:69:21:c9:7c:d9:21:11:14:73:e6:65:67:fa:
                    f4:d8:7b:ac:59:6d:17:5e:8b:64:e0:b0:03:00:0f:
                    ca:d2:0a:fa:52:6a:a4:c8:a7:fc:0a:c1:3c:6f:c8:
                    2e:44:fb:19:1d:4d:9b:33:61:6a:23:dc:96:4c:2b:
                    f3:d9:47:3d:80:62:50:f4:31:df:36:c9:c3:32:37:
                    16:4f:17:a8:15:ae:db:50:1a:95:f8:5d:66:27:15:
                    a1:54:12:07:08:3e:e2:06:8c:4f:59:c8:b3:13:0e:
                    78:57:6c:37:c3:78:2b:6c:0d:ab:2c:f6:8e:14:51:
                    2a:5a:ee:a1:2a:ed:17:71:11:4e:66:af:f2:8d:ee:
                    d5:43:6d:ef:9a:fe:76:98:fa:ea:7e:61:8e:40:69:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:55:E2:3E:34:41:6E:9E:76:37:38:CD:29:4C:FB:B3:B0:C9:B0
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/635c9df1b879d6ad58c98debff86bc49e42719ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:3a:7f:1e:42:bd:1b:3c:1d:cd:9c:f0:e2:42:d6:61:3f:73:
         39:f1:4a:28:a2:69:a3:60:d9:0c:cf:8a:fa:30:75:c4:54:d8:
         19:fe:17:f0:da:78:e9:6d:43:65:49:1d:6f:0d:15:ec:ac:a8:
         e9:11:4b:71:65:c3:d2:7d:55:dd:28:b4:ec:14:b2:4d:e9:91:
         b1:76:3f:62:f8:3c:2a:cb:8b:52:c4:e5:5c:89:a6:9a:20:c2:
         41:25:04:e8:46:fe:15:a9:24:99:4e:84:e6:20:01:1e:12:14:
         0c:83:e0:a9:75:64:62:4e:31:be:04:72:48:fa:2e:6c:f3:5b:
         fd:86:eb:11:1c:74:0b:7e:da:30:1a:d0:a2:05:a1:ff:30:6e:
         c4:cd:5f:41:de:d3:6e:ec:fd:05:6c:25:fa:fc:81:48:22:bb:
         73:fe:db:f1:20:02:12:50:5b:aa:ff:06:3d:d4:35:21:8b:b7:
         e7:96:c9:54:7e:20:d9:e4:75:89:20:8b:9e:21:54:d5:14:c6:
         6d:03:25:97:8e:93:77:4b:93:0c:da:12:52:05:77:02:8e:2e:
         e4:6e:4a:a1:01:02:ad:a7:91:aa:b5:9c:95:6b:1b:66:2d:0e:
         bd:6b:e5:19:b2:25:a7:f3:c9:0d:8d:69:c4:14:d6:00:f0:2e:
         0f:d1:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----