Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2c61974a9dd5b6ebcd74ea43039620f96eded1b6.roa
File:                     2c61974a9dd5b6ebcd74ea43039620f96eded1b6.roa (raw, json)
Hash identifier:          6ZOmoMMQb6NAF6fBOtY56QQGBCSeIG9ERwbmDm0dOAI=
Subject key identifier:   62:DD:19:CF:2E:64:31:77:4B:05:D5:06:F9:9E:18:43:42:7E:DD:38
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       032238
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2c61974a9dd5b6ebcd74ea43039620f96eded1b6.roa
Signing time:             Wed 21 Sep 2022 16:38:27 +0000
ROA not before:           Mon 15 Aug 2022 04:38:18 +0000
ROA not after:            Thu 15 Aug 2024 04:38:18 +0000
asID:                     3549
IP address blocks:        2803:6090::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205368 (0x32238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: Aug 15 04:38:18 2022 GMT
            Not After : Aug 15 04:38:18 2024 GMT
        Subject: CN=2c61974a9dd5b6ebcd74ea43039620f96eded1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:55:41:1c:ea:42:06:1a:d1:ae:7f:6f:e2:
                    44:de:46:12:dd:72:43:4d:0a:6f:e1:5c:86:0e:a5:
                    d1:1b:13:25:e4:3a:a7:af:7f:2f:e7:36:e1:c4:03:
                    26:21:d2:9e:6c:42:2f:ff:c4:b4:9b:be:0e:12:40:
                    f6:fd:1f:5b:d6:ef:b4:5c:0c:72:62:4a:2e:2b:26:
                    48:ae:d1:52:50:a8:13:a1:b7:17:b2:53:3f:56:81:
                    0a:7e:d1:82:7b:1a:c0:1b:7c:f7:72:86:7a:10:1e:
                    da:87:d8:ce:3b:f6:2e:1a:8d:13:69:81:ba:6a:03:
                    d4:ed:55:30:3c:5e:b6:20:cb:5d:14:d3:68:14:cd:
                    7d:2b:fa:26:46:02:6d:be:3c:f3:19:74:47:00:0e:
                    22:e3:23:af:96:56:49:19:23:df:b6:3c:88:d7:0e:
                    3c:3c:14:04:76:81:07:6c:f2:6c:d2:f0:7e:91:17:
                    87:ee:c0:22:ae:d4:b8:68:a0:02:d3:dd:28:6c:3d:
                    7e:08:60:7f:b6:bd:b2:d0:53:07:ac:e4:d8:c6:26:
                    77:ac:46:5e:ab:83:a6:93:27:9b:ca:a2:98:83:5d:
                    0b:ec:ae:95:32:56:52:90:11:05:20:46:6b:14:3f:
                    6c:0f:71:ba:1d:69:f9:ce:77:db:eb:3f:11:c7:d1:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:19:CF:2E:64:31:77:4B:05:D5:06:F9:9E:18:43:42:7E:DD:38
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2c61974a9dd5b6ebcd74ea43039620f96eded1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:02:ba:92:82:a2:fe:dc:92:92:2e:6a:96:5c:66:1e:00:dd:
         c0:29:07:92:5a:13:c4:09:85:c5:c0:10:52:a7:86:b4:67:9b:
         9f:d0:d9:72:12:da:30:99:f1:02:22:7c:cd:d1:46:26:4f:2f:
         6a:eb:9d:91:00:78:d0:fd:29:c1:e2:34:d9:30:d6:3d:fe:bb:
         f8:0f:02:8a:b7:03:8a:21:60:5e:17:87:21:8f:96:d0:b9:9c:
         ce:23:ef:56:ef:7d:07:d1:52:99:70:a9:a4:ed:21:14:93:2f:
         a8:5f:f9:14:00:49:38:46:8f:ac:ea:dc:82:52:f6:54:12:a7:
         3a:9c:0d:97:1c:2d:2e:4e:ce:11:2d:82:87:b4:31:b3:96:e9:
         b7:c5:d4:ce:2f:93:aa:94:ed:64:8d:f1:27:20:e4:7b:ee:82:
         ce:78:ab:5e:c7:67:fe:a8:2f:71:58:ca:cb:ee:de:9a:60:d8:
         6f:27:15:b1:be:de:40:2e:0f:8d:26:1d:53:b7:35:44:60:de:
         3a:4c:37:cc:ee:be:6d:71:02:f6:bb:55:6a:25:ba:c7:5b:94:
         00:f2:de:d2:26:d5:fb:4f:c5:c3:94:4a:a7:5f:ae:bb:14:e0:
         19:74:61:d2:dc:52:15:7a:a2:5a:e7:f4:af:79:3c:90:38:17:
         21:30:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----