Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/2c36dfd4c0a83716545b11ade1b61490753dc9dd.roa
File:                     2c36dfd4c0a83716545b11ade1b61490753dc9dd.roa (raw, json)
Hash identifier:          2vfYHm5ZQ4At/OVsS/9kvabAzRvJbuwJYkbA0mnx9zw=
Subject key identifier:   0F:83:D0:84:BC:9D:6A:C8:D2:49:7F:10:3C:72:E5:E0:52:38:87:E3
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       1AC556
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/2c36dfd4c0a83716545b11ade1b61490753dc9dd.roa
Signing time:             Wed 28 Sep 2022 16:58:31 +0000
ROA not before:           Wed 28 Sep 2022 16:58:10 +0000
ROA not after:            Sat 28 Sep 2024 16:58:10 +0000
asID:                     64120
IP address blocks:        2803:f080:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754454 (0x1ac556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Sep 28 16:58:10 2022 GMT
            Not After : Sep 28 16:58:10 2024 GMT
        Subject: CN=2c36dfd4c0a83716545b11ade1b61490753dc9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:f8:41:1c:1b:1b:47:34:42:ae:84:1b:8d:
                    47:10:0f:79:fd:c1:09:c6:25:33:70:1f:8c:06:11:
                    b8:93:43:bd:38:5b:40:e1:23:db:a0:7a:f8:e0:a9:
                    2c:ac:fc:e7:cd:39:30:1a:d9:fb:02:0e:a0:9b:f2:
                    9e:84:f8:91:dc:cc:1b:75:bc:62:59:9f:f7:2c:c7:
                    50:5d:7d:b8:6e:0b:b6:cd:0b:1c:d1:5b:67:c2:04:
                    dc:45:5a:66:da:e9:58:48:fe:44:d0:bb:c5:09:ac:
                    70:cc:17:b9:ac:87:48:e8:54:92:22:85:2c:69:9d:
                    29:29:d4:81:ef:f8:e5:ca:9c:11:c0:77:b0:84:0c:
                    8b:11:11:8b:b8:34:06:6e:8e:a3:88:4d:15:11:f9:
                    a0:f5:73:98:71:4d:f4:d8:ff:02:8d:1b:fb:cb:eb:
                    9d:ce:d0:ed:f1:3f:29:03:e5:60:c4:fb:7e:98:26:
                    83:6f:04:9c:1f:4b:a1:a3:0e:c6:28:eb:19:c3:24:
                    a1:c6:20:c0:c4:73:d2:a0:15:71:24:be:dd:50:d9:
                    87:4a:32:df:0c:5a:0a:36:5c:a5:76:57:f8:b7:0d:
                    ff:d6:26:61:2a:ba:10:b5:c1:9c:7c:5e:df:03:f6:
                    fd:2c:b8:17:c5:fd:f5:a6:1d:2c:78:2f:6e:b3:75:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:D0:84:BC:9D:6A:C8:D2:49:7F:10:3C:72:E5:E0:52:38:87:E3
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/2c36dfd4c0a83716545b11ade1b61490753dc9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:50:7e:24:32:23:da:88:11:f8:93:3c:59:a4:45:57:27:
         1d:8d:84:54:40:42:13:b3:06:a4:e7:df:0e:50:1e:68:3d:80:
         a7:5a:2a:fd:62:be:c4:84:c8:c1:dd:fa:ae:9d:b4:18:ab:f4:
         e1:b2:eb:42:63:09:28:d2:75:d4:40:b4:6f:71:27:1a:c1:1f:
         c4:ed:96:b9:2e:e1:a1:85:ba:cc:10:af:6a:6f:b8:6c:b2:fe:
         64:d0:5a:dd:fa:7b:d3:f7:84:f4:ea:34:43:54:42:b1:7b:59:
         44:75:38:76:5c:5b:01:37:96:6a:65:33:9c:d0:a1:3c:3b:bc:
         26:96:d7:5d:d0:86:2d:4f:70:1c:6d:95:28:11:ab:e4:3b:01:
         d2:61:ef:e7:02:15:26:9e:4e:dd:62:76:dc:47:99:cc:97:43:
         d7:06:bf:fd:5d:31:cd:6e:ba:40:9b:10:83:66:c7:41:91:28:
         40:d0:94:c6:a0:dc:ab:c0:54:9d:68:5a:cd:da:cd:d1:95:64:
         bf:b3:04:97:fe:a1:3a:c5:91:e9:ed:50:fc:02:56:ed:51:bd:
         4d:4d:eb:72:9a:98:6a:50:7c:9c:ea:a2:bc:4c:e1:05:63:03:
         a8:02:b6:60:17:8c:85:7b:6b:73:f1:fa:e4:a2:0a:d6:7b:9d:
         7b:e4:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----