Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f3cafe3-949d-4102-ae5a-313067e9d9b1/f0471006d865f49d99f18b4277da82acd06e06a3.roa
File:                     f0471006d865f49d99f18b4277da82acd06e06a3.roa (raw, json)
Hash identifier:          syLm2vIsa52dzxrjs+u+2YqfnmT+kxe8JJZqZu0S7Xc=
Subject key identifier:   36:2C:E2:73:44:AC:90:63:C0:7D:D3:28:C0:90:00:39:68:FC:DE:EF
Certificate issuer:       /CN=efe19923f694355d37aa6c7b09a45d7d9deeb5a9
Certificate serial:       4D
Authority key identifier: 5B:07:62:DF:59:6E:31:25:A1:9D:64:5F:3F:62:EE:13:84:98:2C:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efe19923f694355d37aa6c7b09a45d7d9deeb5a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f3cafe3-949d-4102-ae5a-313067e9d9b1/f0471006d865f49d99f18b4277da82acd06e06a3.roa
Signing time:             Tue 19 Apr 2022 15:08:46 +0000
ROA not before:           Tue 19 Apr 2022 03:00:00 +0000
ROA not after:            Fri 19 Apr 2030 03:00:00 +0000
asID:                     272023
IP address blocks:        2801:13:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe19923f694355d37aa6c7b09a45d7d9deeb5a9
        Validity
            Not Before: Apr 19 03:00:00 2022 GMT
            Not After : Apr 19 03:00:00 2030 GMT
        Subject: CN=f0471006d865f49d99f18b4277da82acd06e06a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:fb:1e:df:80:0b:19:59:b8:e1:51:5d:14:
                    3e:2e:29:35:b2:75:35:1e:1d:47:fa:ea:f6:ba:af:
                    68:80:d0:cc:92:6f:87:a8:29:77:a5:97:1b:ef:d9:
                    96:12:62:cc:fd:f3:95:ed:c1:ce:e4:06:34:8d:ce:
                    c6:54:80:11:e2:aa:75:12:f9:c6:fb:d6:37:fb:1d:
                    51:a6:2a:07:08:4f:96:86:0d:8e:21:18:77:ba:d6:
                    5f:f8:48:ce:a8:20:be:65:58:cf:32:e2:b2:0d:40:
                    37:fe:fa:83:a1:2d:06:81:be:64:e6:80:1b:b1:62:
                    96:7f:5a:be:9f:de:74:74:71:4d:a0:83:4b:70:aa:
                    e8:e4:1e:99:4f:ce:cb:a8:cf:f8:f9:83:06:5b:67:
                    c5:e4:29:ac:62:e4:21:5f:62:6b:ca:5e:5c:f7:09:
                    e8:7b:85:8a:82:c0:ad:a7:8e:0a:b7:ef:b8:bd:cb:
                    8d:81:93:8a:aa:8e:c3:ba:76:ef:be:38:b1:4c:3d:
                    86:f6:fd:6a:4f:c7:6e:c2:54:4d:b0:7a:e5:f7:45:
                    6a:a2:d4:7d:64:54:23:2f:55:ad:60:cd:3b:ef:b1:
                    4f:82:0c:fd:85:86:12:89:ef:dc:06:9d:d6:09:a6:
                    ad:eb:bd:88:9d:a6:92:3e:c9:df:1d:55:6f:b8:93:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2C:E2:73:44:AC:90:63:C0:7D:D3:28:C0:90:00:39:68:FC:DE:EF
            X509v3 Authority Key Identifier:
                keyid:5B:07:62:DF:59:6E:31:25:A1:9D:64:5F:3F:62:EE:13:84:98:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efe19923f694355d37aa6c7b09a45d7d9deeb5a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f3cafe3-949d-4102-ae5a-313067e9d9b1/f0471006d865f49d99f18b4277da82acd06e06a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f3cafe3-949d-4102-ae5a-313067e9d9b1/efe19923f694355d37aa6c7b09a45d7d9deeb5a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:d3:b7:4f:4a:63:c9:4f:4c:39:8e:db:47:46:d3:90:85:e0:
         da:ae:14:22:70:1b:e0:f4:df:d8:97:6d:25:82:3d:19:29:0d:
         bf:a5:97:b8:29:30:c4:a0:81:9a:09:4f:aa:3f:01:fe:8c:d9:
         d5:28:20:f6:93:24:71:9e:d6:54:67:b0:f3:e4:ce:19:df:08:
         7b:4e:d8:12:5d:8a:af:17:17:f6:74:8b:69:cc:ce:67:43:4f:
         fc:13:0f:53:a5:f7:28:da:c0:14:0c:66:79:f0:3a:8a:c7:9e:
         54:eb:8a:eb:fe:21:1c:2b:20:ae:2e:37:08:75:cc:26:7d:fa:
         92:0e:8b:dc:d1:49:43:8d:85:0a:29:5a:d4:3c:c8:56:02:f6:
         6b:d9:f4:9a:da:e1:10:ed:9b:4d:87:c5:b9:09:bc:32:65:de:
         91:54:6e:00:03:c2:6c:39:14:12:c1:3b:d6:1f:e8:84:e0:68:
         c2:e3:54:d9:12:dc:c2:ea:9b:50:44:38:53:84:6e:46:1e:7b:
         f2:70:25:d3:16:d6:f8:ed:12:a5:b5:86:bc:97:0c:13:00:68:
         b3:5f:8c:2c:6e:f9:d8:c3:08:9f:a2:42:7e:8e:b0:1d:db:14:
         25:fc:dc:28:b3:41:b1:60:df:de:fc:df:84:2c:e5:36:14:9c:
         35:4b:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----