Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5dffcb5505231f120fefa025ca0d6c0cfbb97e3d.roa
File:                     5dffcb5505231f120fefa025ca0d6c0cfbb97e3d.roa (raw, json)
Hash identifier:          XFX4gcVWC/rtxxdXcH5vtza57vvNnLenAn7GR8FDGG4=
Subject key identifier:   6D:6E:2C:55:4A:E9:4A:FF:F2:88:F6:DC:5F:BE:45:12:1E:6E:67:B8
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       1B1FD1
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5dffcb5505231f120fefa025ca0d6c0cfbb97e3d.roa
Signing time:             Thu 06 Oct 2022 18:38:34 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Fri 05 Apr 2024 03:00:00 +0000
asID:                     64120
IP address blocks:        2803:f080::/33 maxlen: 43
                          2803:f080:8000::/33 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777617 (0x1b1fd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2024 GMT
        Subject: CN=5dffcb5505231f120fefa025ca0d6c0cfbb97e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:76:6e:c3:c6:fe:45:78:b6:89:ab:61:57:
                    a1:5d:ab:ee:17:c5:6a:16:50:0a:3b:48:2c:ba:b4:
                    a3:73:9e:61:53:8d:70:4f:e7:9b:66:c0:b6:3c:d5:
                    6d:23:20:2b:df:e1:d4:18:68:97:e8:13:83:0b:20:
                    b9:92:f0:9a:24:4e:aa:82:de:40:ab:e6:35:32:0c:
                    5c:85:88:cf:eb:d4:d6:7f:ec:f7:7e:9d:38:f8:bf:
                    73:02:83:8c:9e:ec:97:2d:44:c4:13:73:54:7a:9f:
                    da:5c:be:18:60:99:32:0e:07:e5:db:46:9f:1f:d8:
                    2b:f6:84:14:1e:c8:ba:80:82:c4:b9:47:38:85:a9:
                    3a:e1:44:69:0d:44:e9:c9:3d:e2:ee:c0:88:79:0a:
                    58:0d:e4:c7:21:19:9a:0d:45:d1:39:23:5b:37:f8:
                    04:b1:f7:0d:26:a7:18:5f:7b:84:5a:02:ef:c3:96:
                    d3:97:ed:d6:9e:fa:ff:91:80:78:f7:c7:ef:16:f2:
                    d7:82:1d:97:37:81:d2:4c:b6:2e:f0:68:e6:88:d8:
                    0f:e8:b1:6c:f2:25:92:56:da:e5:69:57:93:06:a9:
                    c2:ee:89:5d:f4:27:43:0e:97:b2:43:b5:38:8c:1d:
                    d8:58:cb:b8:05:b5:b0:10:6f:15:b8:76:66:97:20:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:2C:55:4A:E9:4A:FF:F2:88:F6:DC:5F:BE:45:12:1E:6E:67:B8
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5dffcb5505231f120fefa025ca0d6c0cfbb97e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:4a:07:0f:89:1d:ba:46:bd:aa:20:7a:55:3d:d0:7f:6c:
         6a:3a:b3:41:b1:60:34:1e:94:00:97:e5:b1:ed:15:96:85:41:
         88:85:83:00:51:7e:48:10:56:de:e2:14:ce:86:4d:a9:75:9e:
         99:ac:84:6b:d3:85:86:63:e6:6b:93:fb:68:2a:41:25:23:4d:
         78:ec:82:aa:00:df:54:e8:51:eb:65:fa:d3:e1:e7:90:a7:d5:
         95:04:23:29:62:4a:be:32:ea:e0:33:09:e1:aa:0f:0a:39:14:
         a8:51:98:48:0a:bc:2e:ef:f3:5f:ac:10:71:74:4c:3c:ae:6c:
         9d:2c:37:3e:ed:4e:4a:c0:c0:ce:44:4c:cf:c6:d4:6e:d1:2e:
         3e:91:d9:97:11:85:9d:2b:6d:89:e3:81:c2:a9:43:74:4d:60:
         ba:8e:c4:f3:63:03:0c:c9:85:b2:12:c9:c9:ec:a9:7d:1a:35:
         a0:1a:b4:3a:42:55:cc:2e:30:b0:bd:4c:7d:87:6e:4a:5b:8d:
         81:02:bc:87:06:a7:09:12:14:5e:98:21:a1:56:3e:14:5d:dd:
         43:d1:f1:3d:ca:22:99:68:f2:7d:a7:dd:f6:4e:68:e3:16:8c:
         dc:81:18:98:6d:4b:f0:3c:fb:22:58:95:e1:f4:97:b9:74:40:
         76:fe:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----