Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/8e453cf5be8e97745aea734b28cc8dd3a8c31c29.roa
File:                     8e453cf5be8e97745aea734b28cc8dd3a8c31c29.roa (raw, json)
Hash identifier:          Pit6XPNgWB9F65Gm9otBIAj92X0yLVpfS0vUhQgOB0c=
Subject key identifier:   92:C9:BF:01:D2:A7:3F:23:A6:86:06:AB:49:4A:E6:9D:55:6F:DB:5E
Certificate issuer:       /CN=1d425e0701077d9b4ed04e706fd74259f8427776
Certificate serial:       049B
Authority key identifier: EE:3A:B8:1F:3C:A7:02:64:5E:C4:73:74:7E:A0:F4:B3:9E:7C:FB:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d425e0701077d9b4ed04e706fd74259f8427776.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/8e453cf5be8e97745aea734b28cc8dd3a8c31c29.roa
Signing time:             Tue 03 May 2022 15:02:51 +0000
ROA not before:           Tue 03 May 2022 03:00:00 +0000
ROA not after:            Fri 03 May 2024 03:00:00 +0000
asID:                     263735
IP address blocks:        2803:9f80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d425e0701077d9b4ed04e706fd74259f8427776
        Validity
            Not Before: May  3 03:00:00 2022 GMT
            Not After : May  3 03:00:00 2024 GMT
        Subject: CN=8e453cf5be8e97745aea734b28cc8dd3a8c31c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:3d:45:a9:7d:56:39:b9:07:18:f1:00:37:
                    70:2f:62:04:66:4f:3f:d0:34:3a:1d:0a:32:e6:83:
                    12:40:45:5e:bf:9d:ca:82:06:ba:3c:67:b8:01:c8:
                    3b:97:08:94:fd:b8:a8:56:c3:5a:58:3a:65:2b:f3:
                    69:00:2c:8d:39:50:c8:1c:da:ce:11:a2:08:34:6d:
                    9c:09:61:a1:3f:41:b9:0e:77:38:13:7c:f3:88:25:
                    90:96:b1:f7:1c:4c:3e:a5:84:bd:06:9d:89:e7:89:
                    25:da:39:40:be:1a:b8:06:6f:15:b2:7f:ee:93:d4:
                    fb:62:c0:45:92:c7:f3:7e:a7:7c:19:c3:58:3d:bb:
                    d0:f8:16:b4:67:7c:75:7d:4e:17:14:b4:e6:8b:72:
                    0e:b7:40:0e:55:34:9d:c3:23:b9:0b:05:d3:9a:18:
                    cd:9e:bb:0e:c1:6a:74:35:25:79:3d:f5:b7:28:83:
                    d4:3a:c4:cb:52:75:db:0c:77:8f:af:26:08:99:5a:
                    d6:ba:c0:dd:a1:52:93:dc:8d:60:f7:76:53:39:33:
                    a1:00:66:c2:4e:8a:1e:cc:55:20:b9:c2:fa:4a:0c:
                    93:ad:6e:53:4d:c3:d8:35:3b:ef:d2:ba:11:7f:51:
                    e3:88:8b:3b:96:ed:15:40:3d:22:75:9a:75:7f:f3:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:BF:01:D2:A7:3F:23:A6:86:06:AB:49:4A:E6:9D:55:6F:DB:5E
            X509v3 Authority Key Identifier:
                keyid:EE:3A:B8:1F:3C:A7:02:64:5E:C4:73:74:7E:A0:F4:B3:9E:7C:FB:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d425e0701077d9b4ed04e706fd74259f8427776.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/8e453cf5be8e97745aea734b28cc8dd3a8c31c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/1d425e0701077d9b4ed04e706fd74259f8427776.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:82:43:b6:5c:94:99:9b:12:07:0e:3c:69:b9:b2:f2:19:
         7f:d0:b6:c1:4f:f8:af:50:2c:16:e6:1a:44:1d:b5:cf:1b:4e:
         25:77:c0:0c:9c:6a:4c:8c:d8:ea:60:f5:f3:02:8d:91:0f:4a:
         d4:fb:26:1f:56:70:58:15:af:eb:8c:8b:48:f6:cf:e1:87:62:
         a0:76:bf:6d:e7:58:b5:c1:fc:63:ca:14:db:b9:fb:e7:72:20:
         8f:76:42:c9:98:67:be:35:f5:c5:40:f3:76:7e:e6:b7:b9:4e:
         bb:18:f6:e3:07:0d:5c:ed:81:f4:80:35:1a:9e:f8:5e:cb:45:
         d3:dd:1f:2d:27:aa:1b:f1:60:3c:d8:b6:03:9a:04:7f:9a:63:
         e5:46:ef:43:8f:b4:45:9c:09:94:e9:67:de:fd:89:2f:50:23:
         57:09:84:b4:b8:32:65:27:76:0c:3f:c1:e1:b4:e6:af:82:e5:
         37:a1:05:ae:55:28:b6:75:1b:67:e9:54:09:d0:d9:32:ea:6e:
         d9:1d:a0:af:9e:87:60:79:41:96:2f:3b:c4:a8:9c:a4:b4:33:
         c7:a5:98:05:08:2b:46:44:09:ad:b0:45:f7:1b:7b:7a:3b:d9:
         93:2e:18:63:d4:43:19:8f:b8:70:df:2b:87:4f:aa:92:60:1a:
         4c:e2:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----