Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/75073a34e9686ae1a380a24ff2a359284cc5f22a.roa
File:                     75073a34e9686ae1a380a24ff2a359284cc5f22a.roa (raw, json)
Hash identifier:          z72nhrQ8BTIGnWvYyB+iLg9WDXi6/7zSlFo7KBibiJ0=
Subject key identifier:   99:AD:8A:08:A7:BD:05:D4:21:E3:5F:89:47:11:1F:DC:60:0E:28:4A
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1AB790
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/75073a34e9686ae1a380a24ff2a359284cc5f22a.roa
Signing time:             Thu 22 Sep 2022 20:59:37 +0000
ROA not before:           Fri 12 Aug 2022 17:44:41 +0000
ROA not after:            Mon 12 Aug 2024 17:44:41 +0000
asID:                     3790
IP address blocks:        2001:13d8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750928 (0x1ab790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Aug 12 17:44:41 2022 GMT
            Not After : Aug 12 17:44:41 2024 GMT
        Subject: CN=75073a34e9686ae1a380a24ff2a359284cc5f22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:08:26:98:d0:af:9d:fe:c0:0a:79:fe:39:
                    ff:c2:b1:53:bc:34:f4:e5:1d:bc:49:e5:64:70:25:
                    42:99:6d:46:fd:33:34:aa:ae:bd:12:66:27:ff:d5:
                    c1:b5:b4:11:de:d7:d3:95:cf:fc:33:e8:2a:66:ad:
                    63:b5:9b:26:c3:d3:6b:b2:3a:84:0d:d7:d8:c0:7b:
                    28:f4:70:85:3a:a9:1a:f5:61:24:ce:89:71:82:61:
                    05:9b:0d:01:2f:07:9a:6f:5e:03:7f:44:97:3d:00:
                    9a:cc:7e:3b:40:e2:23:36:57:8d:6f:8a:ac:70:e2:
                    4c:18:cc:80:bd:fd:c7:e1:e1:da:ea:f2:ca:d4:9e:
                    3c:7c:e8:0b:cd:0e:3a:54:b4:f0:3c:b9:7c:7a:14:
                    ab:f4:b3:bc:f3:bc:f3:d2:70:32:55:f5:ae:e3:33:
                    20:5e:ec:30:b6:61:3f:6b:62:ee:18:3f:6a:1c:7e:
                    d6:18:da:e7:9a:d3:08:55:0c:f0:30:15:6a:b9:0e:
                    6a:28:be:8a:74:32:d3:75:71:93:55:ae:08:82:91:
                    44:e1:78:fd:b1:2d:e4:8d:7f:2d:75:b9:f8:07:7b:
                    e6:d1:5f:cb:7a:d9:03:50:d7:d2:49:8c:6a:8f:89:
                    d7:35:1e:bf:8f:da:31:08:74:bc:04:6c:37:20:9d:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:8A:08:A7:BD:05:D4:21:E3:5F:89:47:11:1F:DC:60:0E:28:4A
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/75073a34e9686ae1a380a24ff2a359284cc5f22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:71:46:da:ec:4d:2c:2e:e4:0d:d2:17:7e:0a:0a:bd:94:
         51:7e:27:f1:bc:4b:c7:cd:7f:1f:8a:8a:79:03:a3:96:51:fd:
         d8:4d:1c:b3:c9:5f:a2:8d:13:f1:1a:c5:3a:43:c4:7e:c5:b9:
         fa:2d:c4:f3:a3:1e:2a:77:e4:96:a0:6a:31:ab:f1:c7:ad:89:
         c5:0d:38:20:4d:18:39:a3:bc:73:31:df:a2:99:ec:96:e2:a2:
         6d:5f:a7:86:bb:97:c9:40:03:25:f8:ed:1b:f3:ca:fe:25:9e:
         ee:a1:30:40:e0:9c:67:b9:3e:f6:aa:ff:38:98:32:d3:6a:0b:
         52:c8:55:e1:f7:1f:be:0d:a1:2e:b2:cc:61:07:8b:5f:92:a7:
         5c:f4:0e:8c:d1:15:ce:8f:30:da:6b:c8:2a:c1:fb:1c:36:1a:
         67:7e:aa:56:22:96:1f:dd:92:eb:ae:76:f7:d2:48:c8:3c:9c:
         67:a4:7e:39:70:d8:01:8e:36:41:2c:de:6c:8c:0c:07:91:50:
         80:ea:16:1d:7f:3e:00:9d:53:5d:25:48:4f:39:0c:fe:bb:0a:
         d3:66:24:cb:db:f9:44:ba:7f:6b:2b:f0:ab:12:1a:fe:67:75:
         1b:20:97:0d:b3:ed:ca:17:4a:d8:75:11:c8:8b:89:34:af:70:
         fa:e1:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----