Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/6882f57f06d265d97d52a192d9ccf1509ff596ea.roa
File:                     6882f57f06d265d97d52a192d9ccf1509ff596ea.roa (raw, json)
Hash identifier:          ehKle225RwkAzd18o5PX8HRou23lXEOnbXHvxxwM3Ok=
Subject key identifier:   A8:CC:BB:BC:9C:71:2F:75:03:16:55:C3:09:63:5E:4A:68:6C:63:A4
Certificate issuer:       /CN=8d016ee04965a12d97cf5622bc43dc9be3876145
Certificate serial:       5C09
Authority key identifier: 2F:DA:D9:D1:60:CF:44:90:66:60:30:AF:C1:48:D5:86:74:E6:7D:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d016ee04965a12d97cf5622bc43dc9be3876145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/6882f57f06d265d97d52a192d9ccf1509ff596ea.roa
Signing time:             Tue 21 Jun 2022 14:27:57 +0000
ROA not before:           Tue 21 Jun 2022 03:00:00 +0000
ROA not after:            Fri 21 Jun 2024 03:00:00 +0000
asID:                     3816
IP address blocks:        2801:12:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23561 (0x5c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d016ee04965a12d97cf5622bc43dc9be3876145
        Validity
            Not Before: Jun 21 03:00:00 2022 GMT
            Not After : Jun 21 03:00:00 2024 GMT
        Subject: CN=6882f57f06d265d97d52a192d9ccf1509ff596ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:63:10:0f:b6:1d:ff:2b:f5:53:95:c5:c2:47:
                    a8:3d:2f:fe:e3:52:e3:38:56:b1:e4:ac:8e:2b:80:
                    00:8b:e8:35:c0:c9:c3:c5:76:c8:55:55:1c:5d:b6:
                    e5:7f:ed:15:3c:60:33:0b:fe:5f:bb:1b:58:e9:af:
                    30:8b:9d:81:87:22:05:53:f5:35:09:4b:84:01:eb:
                    93:d9:b6:aa:4e:a9:b0:60:27:ba:c9:3b:06:38:fb:
                    7c:74:e6:22:a9:26:d8:78:1d:66:3f:a3:6e:87:3a:
                    87:52:15:73:ab:96:bb:19:05:7a:b4:02:ef:90:19:
                    2c:7e:3d:0b:02:f3:3b:bd:8d:27:fc:07:3e:29:d2:
                    b5:7f:7e:af:c7:fd:ba:fc:dc:50:81:37:d3:f7:9f:
                    a2:95:e0:8d:49:4c:fb:d0:36:1f:bf:e7:9a:39:7d:
                    9f:21:77:ed:8b:a2:b2:1b:1c:de:6c:da:ec:de:3c:
                    02:38:6e:d3:da:46:0a:08:da:0b:b8:cc:c7:2b:68:
                    e3:b1:e0:3d:83:04:54:ec:03:44:e9:0e:98:7b:2f:
                    c0:a6:03:14:a5:66:2a:b9:a2:58:24:cd:8c:17:91:
                    66:11:f7:3a:46:33:0f:36:bd:b3:e7:1b:73:af:dd:
                    65:73:b3:26:4b:c8:59:d1:26:e9:32:89:06:4a:21:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CC:BB:BC:9C:71:2F:75:03:16:55:C3:09:63:5E:4A:68:6C:63:A4
            X509v3 Authority Key Identifier:
                keyid:2F:DA:D9:D1:60:CF:44:90:66:60:30:AF:C1:48:D5:86:74:E6:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d016ee04965a12d97cf5622bc43dc9be3876145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/6882f57f06d265d97d52a192d9ccf1509ff596ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/8d016ee04965a12d97cf5622bc43dc9be3876145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:6a:c4:f4:e9:84:92:97:4b:5f:41:02:20:20:ff:61:1c:ad:
         a5:7a:ce:bb:e3:91:98:e4:ab:3f:15:e6:6d:7d:01:93:48:4e:
         cf:d6:08:ac:c1:a8:4d:d9:9a:cf:de:13:dd:04:0a:f0:cb:37:
         cb:b4:f4:c2:95:1e:07:6e:9e:2c:fd:ca:1c:ac:41:aa:0c:08:
         2f:bd:7e:0b:c9:84:60:13:d3:f0:6f:bf:f1:1e:e4:96:92:c7:
         71:27:51:78:15:f0:d8:8d:9d:d6:bb:86:1d:a4:bb:79:0d:63:
         52:fa:8e:7c:d6:97:dc:a6:31:6b:32:b9:b8:1a:74:ac:d8:c2:
         eb:32:53:84:72:35:e2:67:d5:d6:ee:1f:77:9f:de:87:3c:72:
         27:aa:bc:c5:c1:64:80:08:12:9e:5f:7d:db:4b:72:d2:37:45:
         85:49:ee:fb:8d:5d:8d:a6:c5:8c:79:51:da:e5:a8:a8:02:0a:
         ad:b5:0b:b2:a5:ec:a8:7b:e7:2f:ca:3f:d8:73:79:d4:49:a6:
         0d:cb:09:25:a5:6f:5e:46:cb:bd:39:e5:f6:74:75:22:a0:8f:
         1a:a4:21:9f:ca:d5:23:ee:38:f3:54:26:3f:9c:16:a0:8a:00:
         4b:b5:6c:77:61:66:43:74:f1:ea:e3:62:cb:b2:57:a5:38:5e:
         bf:fd:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----