Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7a0d0bc3-5db4-45df-8674-87bb6197f3d7/523aa6c84cacc61423724d795bae3fd55d43be48.roa
File:                     523aa6c84cacc61423724d795bae3fd55d43be48.roa (raw, json)
Hash identifier:          umHapedGrpb2IRXYiM1Om4PpNFk4Zyfx3uVmJBST73k=
Subject key identifier:   4B:1F:14:8D:B3:E9:98:D9:95:A1:60:F2:81:B8:7A:55:31:33:7F:81
Certificate issuer:       /CN=58b442461888d9ab7a5592b12fea81108be0d4d6
Certificate serial:       07BE8C
Authority key identifier: 87:9A:EE:3F:30:CE:76:C5:59:9C:74:1A:8C:9C:87:A1:89:83:B2:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58b442461888d9ab7a5592b12fea81108be0d4d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7a0d0bc3-5db4-45df-8674-87bb6197f3d7/523aa6c84cacc61423724d795bae3fd55d43be48.roa
Signing time:             Thu 02 Jun 2022 19:14:35 +0000
ROA not before:           Thu 02 Jun 2022 03:00:00 +0000
ROA not after:            Sun 02 Jun 2024 03:00:00 +0000
asID:                     271939
IP address blocks:        2803:4610::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507532 (0x7be8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b442461888d9ab7a5592b12fea81108be0d4d6
        Validity
            Not Before: Jun  2 03:00:00 2022 GMT
            Not After : Jun  2 03:00:00 2024 GMT
        Subject: CN=523aa6c84cacc61423724d795bae3fd55d43be48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ff:a4:11:27:d5:87:12:6f:c4:4b:3d:b6:6b:
                    3d:dd:7c:f7:15:ab:7c:fc:84:eb:b5:1b:24:b3:53:
                    84:54:f0:69:f3:af:85:d5:fb:3e:52:6e:aa:6e:bd:
                    04:98:04:8b:f3:3a:08:c7:10:6c:08:5a:d4:e4:84:
                    e0:df:99:76:b4:40:e4:6e:e0:e3:1e:97:b9:4b:a5:
                    6f:fc:5d:ec:1c:04:00:1b:4c:c1:1a:84:8a:8d:fc:
                    85:9f:c4:4d:d8:cd:2a:75:11:a3:60:a1:2c:50:07:
                    75:9e:95:30:0b:3b:f8:dd:53:f2:4a:92:05:82:71:
                    c7:bc:74:f1:70:1a:a3:cb:a1:07:c6:e3:cf:55:ba:
                    47:c5:0d:94:a6:15:1f:64:dc:d4:b3:7d:d9:a5:a9:
                    6e:0d:bf:68:9e:5b:70:e4:79:31:db:74:7b:b3:19:
                    7c:4b:f0:af:a9:e2:04:23:86:4e:40:84:99:0f:d0:
                    83:99:60:c7:7b:8f:3f:dd:87:46:83:fa:98:c1:ed:
                    fe:80:30:c5:94:5d:95:54:fd:a7:db:2a:f6:83:7b:
                    6d:19:6f:5c:41:1c:a6:01:57:53:47:ed:d7:e2:3f:
                    53:3e:ac:34:21:30:55:59:7b:29:12:fd:0d:6b:cf:
                    17:dc:71:ce:54:2f:bf:4b:73:be:23:ff:72:a0:06:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1F:14:8D:B3:E9:98:D9:95:A1:60:F2:81:B8:7A:55:31:33:7F:81
            X509v3 Authority Key Identifier:
                keyid:87:9A:EE:3F:30:CE:76:C5:59:9C:74:1A:8C:9C:87:A1:89:83:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58b442461888d9ab7a5592b12fea81108be0d4d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7a0d0bc3-5db4-45df-8674-87bb6197f3d7/523aa6c84cacc61423724d795bae3fd55d43be48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7a0d0bc3-5db4-45df-8674-87bb6197f3d7/58b442461888d9ab7a5592b12fea81108be0d4d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4610::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:a6:e8:18:fe:bd:2e:f5:04:1c:14:4d:45:24:c9:7b:3b:27:
         9c:42:8e:8e:24:32:cf:4c:cc:46:71:8d:b4:99:25:eb:ca:62:
         68:a5:e8:fb:0d:a2:d9:fb:a9:7b:17:3b:fd:7f:74:dd:ae:92:
         cd:63:48:07:fe:95:3f:1d:cb:a1:6c:09:eb:93:b7:ae:f9:c9:
         4c:a5:cf:ef:50:57:a1:0a:24:15:b7:23:ef:d0:2a:61:5f:fa:
         bf:55:93:db:1f:a4:e5:af:28:40:01:96:fe:b6:4c:f7:f2:40:
         6c:2d:5d:e2:80:f2:f1:63:8a:85:06:fe:86:83:4e:9f:96:5d:
         75:f1:b7:bc:bb:d7:ac:3d:f2:0b:f1:de:7a:0f:1b:c3:20:fa:
         07:da:74:3b:22:73:70:5d:a7:d7:a4:09:ea:1b:2b:f8:0b:71:
         63:9e:e1:61:7a:55:26:f3:57:ed:97:97:06:2f:18:c0:b1:e0:
         49:6d:5d:31:f9:b7:5a:0f:1b:70:e4:3b:20:9d:ca:9d:b2:91:
         99:d8:32:e4:60:22:1a:83:ac:1c:6b:66:e3:53:01:17:c7:9b:
         56:06:75:5d:8e:9d:d5:33:90:08:88:21:9a:62:14:de:74:ff:
         8f:1b:a3:86:00:ab:68:69:40:3c:18:50:0d:8c:9b:75:30:dd:
         4e:75:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----