Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/ef7becf4ec8ee54a5172b4cd50212faec838634c.roa
File:                     ef7becf4ec8ee54a5172b4cd50212faec838634c.roa (raw, json)
Hash identifier:          QAdJD2/vosijjuf7VERGv6YH9Ku1N0JnTvaBHHHHAXU=
Subject key identifier:   76:74:4C:90:C9:0D:5D:AE:13:87:10:6C:8C:C2:FA:E4:D1:42:84:E7
Certificate issuer:       /CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785
Certificate serial:       035E4E
Authority key identifier: 5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/ef7becf4ec8ee54a5172b4cd50212faec838634c.roa
Signing time:             Sat 29 Oct 2022 22:38:27 +0000
ROA not before:           Fri 28 Oct 2022 22:37:26 +0000
ROA not after:            Tue 29 Oct 2024 22:37:26 +0000
asID:                     272146
IP address blocks:        2803:d090:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220750 (0x35e4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785
        Validity
            Not Before: Oct 28 22:37:26 2022 GMT
            Not After : Oct 29 22:37:26 2024 GMT
        Subject: CN=ef7becf4ec8ee54a5172b4cd50212faec838634c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:ec:4b:c2:0b:5d:54:c1:14:ec:e5:65:b5:
                    aa:eb:6b:e4:0e:e2:e9:7e:00:07:19:c2:4e:3e:a4:
                    db:14:56:fe:ce:25:f6:d6:3d:cf:5f:e5:1e:a7:80:
                    bd:3e:2f:f8:ac:5e:fb:47:47:c1:ae:9e:13:14:f1:
                    38:c4:39:1c:1e:47:a0:63:49:d1:60:d4:e5:a7:0a:
                    2e:27:4f:4f:c7:fd:bd:67:31:35:e6:11:e3:e5:6b:
                    04:47:2e:4f:8d:18:f2:6f:73:08:f8:dc:9a:96:0b:
                    5b:6b:d5:3b:0e:4f:aa:3b:d3:34:ff:d5:24:ec:32:
                    b7:f4:a6:dc:2e:74:c0:67:89:0e:73:6b:14:85:ee:
                    bf:ee:ea:e4:57:73:86:8c:91:c3:b3:91:f4:ed:ce:
                    7c:c6:b1:ae:44:f4:34:7b:35:f6:5a:db:9b:e6:20:
                    de:f6:4b:6c:3b:68:63:56:af:d9:5f:05:89:0b:34:
                    ac:2a:56:4d:0c:71:fe:56:2a:65:46:39:82:e7:8d:
                    05:11:e1:11:54:49:5c:ce:40:5f:f6:a9:31:dd:eb:
                    37:f8:55:79:24:1e:ab:f2:8f:49:17:ea:55:88:34:
                    8f:06:24:e8:ab:ce:15:7f:89:e0:11:84:6c:9c:54:
                    ad:61:68:1b:ca:c5:04:fb:82:0f:da:47:58:59:7f:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:74:4C:90:C9:0D:5D:AE:13:87:10:6C:8C:C2:FA:E4:D1:42:84:E7
            X509v3 Authority Key Identifier:
                keyid:5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/ef7becf4ec8ee54a5172b4cd50212faec838634c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d090:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:bf:40:e2:be:6c:6b:ea:4e:ae:4a:c4:eb:78:b9:87:7e:
         ea:2e:d7:61:01:13:41:e4:15:85:0e:45:2a:27:e4:d6:0b:13:
         b7:81:83:d0:6c:c3:23:35:65:73:d6:fb:dd:68:8d:6b:77:10:
         73:8f:dc:3f:7a:7f:7e:fe:8b:76:6c:40:84:99:5c:b3:e9:34:
         0c:5c:a5:5a:c3:10:d0:41:8b:32:44:2a:03:81:bd:a5:f4:5b:
         d2:43:59:85:90:63:f7:26:98:69:41:1b:94:51:05:c5:6c:99:
         41:88:cf:0d:62:3f:3b:72:b8:14:78:e0:13:aa:04:37:ab:fc:
         1f:53:b7:e7:70:d9:10:d7:eb:0a:fc:ab:47:38:49:34:06:20:
         0d:c9:0a:f0:9e:23:d1:1d:7e:1e:ba:c9:85:c8:37:fb:00:ba:
         02:21:d3:79:f9:51:2d:a7:dc:e8:c1:9a:f9:bb:51:6f:8a:fc:
         91:4a:da:4a:e8:ab:1c:46:57:6e:d1:42:06:df:19:37:64:63:
         2b:c0:74:6b:fe:24:cf:85:89:07:8f:77:7c:01:55:de:18:fa:
         dc:01:08:a9:a7:be:24:b8:f9:4d:67:69:cb:50:3b:23:fb:3d:
         6f:fb:97:78:00:46:5c:70:8e:8a:d3:71:77:80:9c:5b:aa:50:
         43:b1:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----