Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/e91061a0cf64f68fdee60f1c8bbcbe9c051ba3b4.roa
File:                     e91061a0cf64f68fdee60f1c8bbcbe9c051ba3b4.roa (raw, json)
Hash identifier:          zyH1oG4OghHcadKqqiwfUPkox44ywCWEuwIB9/2RZsY=
Subject key identifier:   13:62:13:41:B2:05:B6:C2:D2:92:79:D9:B1:8F:C5:57:51:C6:69:3A
Certificate issuer:       /CN=eda3c77c2f96f7747e73bce49dce5db05857390e
Certificate serial:       0C33E7
Authority key identifier: 22:16:C8:A3:53:A3:CE:66:E3:A1:27:34:2D:9F:0D:BC:40:2B:9E:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eda3c77c2f96f7747e73bce49dce5db05857390e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/e91061a0cf64f68fdee60f1c8bbcbe9c051ba3b4.roa
Signing time:             Tue 15 Feb 2022 14:14:30 +0000
ROA not before:           Tue 15 Feb 2022 03:00:00 +0000
ROA not after:            Thu 15 Feb 2024 03:00:00 +0000
asID:                     19429
IP address blocks:        2801:1c:a800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799719 (0xc33e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda3c77c2f96f7747e73bce49dce5db05857390e
        Validity
            Not Before: Feb 15 03:00:00 2022 GMT
            Not After : Feb 15 03:00:00 2024 GMT
        Subject: CN=e91061a0cf64f68fdee60f1c8bbcbe9c051ba3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:63:eb:22:5b:f1:08:4a:b1:03:0f:e6:f7:
                    e9:f5:2a:9c:ab:65:64:9d:11:ca:a9:57:7b:f6:b0:
                    0e:09:d2:43:d0:ca:0c:c6:df:54:6c:1a:b9:70:ee:
                    e0:d7:78:a2:64:4e:30:e0:4a:b6:3f:dc:8b:f9:ec:
                    ff:a6:c8:f6:24:f5:2d:73:2c:e3:61:da:1f:ea:2f:
                    42:56:22:6a:d0:5a:d2:2d:7c:f6:9e:a9:73:2e:e3:
                    2f:72:70:1c:1b:c7:aa:6b:5d:0a:a5:a7:5f:05:bc:
                    45:45:5c:eb:5c:a4:2f:d4:4a:e3:24:37:f6:a4:8f:
                    9c:6a:a4:f0:44:67:e7:da:d6:ec:e1:0c:fd:04:11:
                    07:71:2e:f1:5f:78:77:3c:67:96:f0:07:77:2c:50:
                    e4:70:ce:73:0d:35:0d:45:78:83:c6:6c:12:ea:27:
                    ee:90:eb:b2:c8:b0:00:6f:e3:21:0b:d5:34:20:1b:
                    10:05:af:14:bd:ae:4c:55:26:e4:f0:a8:77:1f:ab:
                    1e:8e:e2:81:ed:5e:4b:b0:a1:c2:68:7c:1a:8c:dc:
                    af:36:33:7a:d9:6b:4b:11:74:32:60:82:b9:ac:e8:
                    1c:bb:29:e6:49:8f:db:ca:ef:a1:e0:36:a4:55:b5:
                    00:84:47:38:6c:6c:73:d2:74:7a:61:35:be:f7:75:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:62:13:41:B2:05:B6:C2:D2:92:79:D9:B1:8F:C5:57:51:C6:69:3A
            X509v3 Authority Key Identifier:
                keyid:22:16:C8:A3:53:A3:CE:66:E3:A1:27:34:2D:9F:0D:BC:40:2B:9E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eda3c77c2f96f7747e73bce49dce5db05857390e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/e91061a0cf64f68fdee60f1c8bbcbe9c051ba3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/eda3c77c2f96f7747e73bce49dce5db05857390e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:cc:91:b9:f7:a1:22:f8:02:c1:c7:3a:33:e8:1b:2f:15:
         f8:8c:68:13:94:eb:d2:12:00:86:c2:25:60:b0:04:b0:67:39:
         a5:39:04:6d:de:da:24:e1:ee:3b:63:16:96:14:1e:b4:31:a2:
         e7:36:ee:41:6d:90:46:69:6e:17:c0:c5:c0:b0:b6:ab:b8:d0:
         98:a8:41:85:4b:02:36:a7:89:1d:d2:c8:ae:d4:ac:eb:c2:25:
         9c:5b:69:1e:2d:77:8a:06:15:aa:ae:77:6f:7c:15:20:78:87:
         3d:8d:0a:3d:d5:47:8a:b6:84:4a:98:19:1c:e2:53:c6:d5:48:
         14:d4:dc:85:b9:24:7d:ee:85:f7:26:2d:b3:c8:6c:44:b1:e6:
         ac:72:47:71:fa:28:e4:f9:e2:b0:1d:6e:36:07:57:e4:9f:26:
         3d:c9:8a:b4:6a:b3:bc:f0:f5:b3:bb:14:c0:99:e6:ed:6a:36:
         ee:88:fd:2f:bb:29:44:9b:a3:01:21:8f:09:f3:5f:3f:ac:f4:
         68:d5:71:28:01:d1:d4:72:04:b6:a1:01:fd:56:ab:b2:e5:64:
         6c:a0:93:f1:b2:7b:a5:13:c3:d1:e9:ac:b4:45:12:ca:bb:67:
         65:2d:55:78:05:f5:a1:da:f4:72:99:64:4a:22:9f:e6:05:6c:
         a8:64:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----