Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82f452cc-212e-47b5-89e8-333f209e0fda/3dcefaee0ec2c879b2c13602f7c3ae66f782b2fe.roa
File:                     3dcefaee0ec2c879b2c13602f7c3ae66f782b2fe.roa (raw, json)
Hash identifier:          EnkegH6cfA3W+nkxr89menKqU9u7m8J3RifL7ohHRZw=
Subject key identifier:   66:8D:49:21:58:14:65:D5:DA:DC:63:88:77:CB:94:F1:6A:CC:31:39
Certificate issuer:       /CN=1e6eec75e7c919054f3b05fe19dfad04ced30a3e
Certificate serial:       0419
Authority key identifier: 9F:60:89:FD:E1:E6:61:78:D9:78:6F:74:91:A8:D2:AA:69:26:C0:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e6eec75e7c919054f3b05fe19dfad04ced30a3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82f452cc-212e-47b5-89e8-333f209e0fda/3dcefaee0ec2c879b2c13602f7c3ae66f782b2fe.roa
Signing time:             Mon 21 Nov 2022 00:23:14 +0000
ROA not before:           Sun 20 Nov 2022 00:18:38 +0000
ROA not after:            Thu 21 Nov 2024 00:18:38 +0000
asID:                     272914
IP address blocks:        2803:2e90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6eec75e7c919054f3b05fe19dfad04ced30a3e
        Validity
            Not Before: Nov 20 00:18:38 2022 GMT
            Not After : Nov 21 00:18:38 2024 GMT
        Subject: CN=3dcefaee0ec2c879b2c13602f7c3ae66f782b2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:3a:33:03:37:26:b8:73:7b:c7:d2:bb:c7:
                    92:a6:69:48:62:de:8a:b0:d9:72:97:fe:02:31:d8:
                    49:01:2f:06:44:a1:e7:f3:a3:94:f8:c7:93:3c:76:
                    04:36:de:87:d0:a4:a0:b1:2d:4d:d6:f0:ad:28:0b:
                    36:9b:20:d0:00:3a:ea:70:46:55:81:04:13:92:02:
                    18:de:9f:61:61:9b:aa:9f:b8:89:be:9d:c9:a4:69:
                    ae:c9:ae:14:69:b2:f7:22:62:3d:77:19:1c:e5:e2:
                    97:29:f3:33:8c:2c:99:b3:af:a5:9e:6a:fa:87:b8:
                    d2:72:c9:96:22:73:e1:03:43:4e:c3:49:3b:eb:ec:
                    09:7c:e9:9a:05:19:47:ec:4f:8f:b7:a5:51:6f:e7:
                    df:64:9f:ad:3f:47:09:20:2f:6a:fa:21:e9:74:17:
                    fc:cf:5d:4c:6b:5a:55:f5:b1:11:d3:a2:e3:52:3e:
                    d0:9a:31:53:81:e8:4e:d3:82:11:f1:5a:d9:72:a5:
                    80:31:6b:34:16:d1:c9:bc:5c:0c:38:9d:d3:a5:a8:
                    5e:62:5b:c4:73:c3:a9:11:33:af:4a:4e:87:04:68:
                    3e:90:25:c9:77:ad:ea:c0:9e:58:bb:aa:bf:98:69:
                    d8:68:a1:ab:8b:c2:16:db:cc:1b:0b:51:28:97:28:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8D:49:21:58:14:65:D5:DA:DC:63:88:77:CB:94:F1:6A:CC:31:39
            X509v3 Authority Key Identifier:
                keyid:9F:60:89:FD:E1:E6:61:78:D9:78:6F:74:91:A8:D2:AA:69:26:C0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e6eec75e7c919054f3b05fe19dfad04ced30a3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82f452cc-212e-47b5-89e8-333f209e0fda/3dcefaee0ec2c879b2c13602f7c3ae66f782b2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82f452cc-212e-47b5-89e8-333f209e0fda/1e6eec75e7c919054f3b05fe19dfad04ced30a3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:3f:94:c4:94:fa:d4:53:1b:da:cc:b9:95:76:89:90:54:61:
         b6:f6:f9:94:33:91:3b:d5:8a:03:52:f1:7e:10:fd:6d:98:fa:
         2f:d7:c0:86:b6:2e:ad:31:66:cc:cc:ce:ec:d2:94:67:fb:fa:
         80:af:27:38:ce:ba:59:52:46:7b:d2:bf:e6:84:0b:53:f6:4e:
         ff:65:43:4b:17:8e:b2:22:21:b1:89:cc:37:4a:cd:52:80:20:
         b7:6d:20:75:28:c4:2b:07:83:f4:87:aa:f9:ad:cf:d8:b3:85:
         d2:ef:9e:71:27:f8:44:7f:76:3c:8f:2b:aa:be:6e:da:e6:7f:
         ae:80:b3:b9:63:5e:3a:63:36:0e:77:e1:69:86:34:a3:0a:ee:
         64:42:1d:cf:06:5c:58:6d:f9:a8:8c:35:20:e6:90:64:01:59:
         c3:6e:94:07:af:5c:6f:ff:ed:59:2c:96:b3:83:a0:a1:c5:f3:
         95:06:88:ab:15:d8:de:87:7c:ae:ea:62:03:02:3e:0b:c2:05:
         13:15:37:73:86:76:da:70:e6:19:6b:0f:ac:ec:31:d8:16:3e:
         4f:b5:a6:72:d2:ff:a3:fd:ad:4b:93:52:e9:46:71:a2:e7:0a:
         84:99:03:29:63:2c:ab:a9:ee:e8:d5:78:a3:8f:84:c9:18:e2:
         91:40:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----