Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/e7ad0a770583ccafd12a554bae2d293503f5f7ce.roa
File:                     e7ad0a770583ccafd12a554bae2d293503f5f7ce.roa (raw, json)
Hash identifier:          sDnYAXMJqCWXpfZhiXPngrU2qs1hx+Va5izPCF0btac=
Subject key identifier:   C7:E2:69:84:50:16:5F:EA:F7:64:02:DF:E7:8D:D5:E1:77:29:42:F1
Certificate issuer:       /CN=59310929980be7f876d3482fedcd45ce2c4f795e
Certificate serial:       062FFB
Authority key identifier: 74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/e7ad0a770583ccafd12a554bae2d293503f5f7ce.roa
Signing time:             Tue 03 May 2022 02:24:19 +0000
ROA not before:           Mon 02 May 2022 03:00:00 +0000
ROA not after:            Thu 02 May 2024 03:00:00 +0000
asID:                     263744
IP address blocks:        2803:5380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405499 (0x62ffb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59310929980be7f876d3482fedcd45ce2c4f795e
        Validity
            Not Before: May  2 03:00:00 2022 GMT
            Not After : May  2 03:00:00 2024 GMT
        Subject: CN=e7ad0a770583ccafd12a554bae2d293503f5f7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:08:c7:a7:bc:5d:dd:ba:e3:14:f9:8a:81:
                    6a:22:6c:2d:1d:97:a2:6d:99:64:ce:d7:f2:8c:fe:
                    5c:3c:16:48:61:89:92:7d:f2:b9:0b:a7:d1:fb:1e:
                    4f:76:d3:aa:4f:43:ba:b3:07:02:a6:fc:bd:f5:8a:
                    7f:2a:5f:a4:cb:a9:1a:8d:0e:0b:55:fc:2d:91:9f:
                    b4:13:c2:82:d9:46:a8:d9:ee:8d:4d:db:89:d5:d7:
                    62:8d:2a:77:0a:74:64:82:ff:10:d7:cd:9b:47:85:
                    48:6d:8c:d3:4b:af:bd:23:ea:40:52:0b:3d:91:b9:
                    d9:72:6d:9f:c9:31:88:8e:87:58:17:4a:ff:06:85:
                    5c:fa:6c:c9:a9:5b:f3:9e:39:7d:69:44:62:1c:70:
                    37:e4:d9:76:07:26:f8:c1:e0:0a:eb:8f:4e:98:0e:
                    60:e0:65:26:59:a4:17:0f:2b:bd:ed:69:aa:83:1e:
                    92:e0:69:b5:3e:56:6b:1a:67:ad:22:09:77:21:df:
                    eb:31:ee:6f:ca:b8:9f:66:08:4f:d8:e5:8d:4b:6c:
                    4f:1a:41:cd:24:f9:9e:eb:2c:81:b0:e4:7d:2a:6b:
                    bb:41:4f:95:89:26:22:c2:85:bb:03:1f:e4:9c:a7:
                    3c:c9:a4:07:1e:bf:c2:fa:84:03:a7:5a:fb:dc:d3:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E2:69:84:50:16:5F:EA:F7:64:02:DF:E7:8D:D5:E1:77:29:42:F1
            X509v3 Authority Key Identifier:
                keyid:74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/e7ad0a770583ccafd12a554bae2d293503f5f7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/59310929980be7f876d3482fedcd45ce2c4f795e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5380::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:f1:61:a7:ce:55:ab:66:98:f4:71:e2:d5:22:70:d7:d3:
         c7:bc:16:26:42:c8:6d:80:05:d7:49:be:6e:ba:34:36:92:f9:
         f0:7e:01:b2:d5:16:2e:a4:4b:a5:7f:dd:aa:a2:ee:00:d1:20:
         fa:88:bf:92:50:eb:dd:fd:58:1d:f3:c8:af:25:26:b3:09:07:
         9e:3e:f2:e4:a9:f7:02:b2:65:67:72:ab:bd:3e:d2:ac:f2:b5:
         ce:1a:a6:67:a8:5a:54:ef:02:d0:94:ee:0b:a6:b1:cb:55:44:
         23:cf:a9:2b:a7:6f:7a:5e:c3:23:a0:d6:ee:37:35:6e:52:eb:
         df:80:cb:41:ee:4c:53:73:24:fa:a4:3a:fa:51:84:d9:ad:b2:
         23:7d:11:cb:46:b2:30:ca:85:95:e0:4b:4b:49:c8:ae:62:81:
         a9:f7:f7:c3:02:6d:9b:1e:e2:a5:72:dd:ce:4d:a2:f8:dc:78:
         66:e3:28:19:c2:cb:35:31:ca:2f:f6:81:82:ed:e0:67:0c:ed:
         4d:08:d9:fe:79:5d:03:66:a0:bc:6e:6e:98:bf:06:ce:62:69:
         06:91:fa:b9:ac:14:67:0d:59:e5:89:04:2d:61:f1:84:b0:ea:
         87:ac:8f:c3:6b:fb:48:f8:e6:fc:3a:45:58:ac:88:0e:b4:9b:
         04:f2:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----