Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/be40edd73074b40b55bc5be5086f66dd7dd6c343.roa
File:                     be40edd73074b40b55bc5be5086f66dd7dd6c343.roa (raw, json)
Hash identifier:          sa11rJgmVp5uLBUAeYdVHNh54pGEsNKDwtlIF/lrhUs=
Subject key identifier:   C3:8B:F5:7C:F5:96:99:46:AF:CA:72:2B:4E:EA:DA:A7:FA:AC:02:43
Certificate issuer:       /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial:       0B490B
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/be40edd73074b40b55bc5be5086f66dd7dd6c343.roa
Signing time:             Fri 25 Feb 2022 18:53:55 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     271813
IP address blocks:        2803:f010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739595 (0xb490b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=be40edd73074b40b55bc5be5086f66dd7dd6c343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:b7:37:d7:03:b0:2b:03:c9:80:3a:13:8c:
                    60:7e:5e:4e:44:83:35:26:3e:94:a1:76:b1:92:b3:
                    f9:35:a7:86:1d:1a:99:91:93:c2:66:2a:9a:ae:0c:
                    2d:fe:18:c9:d7:d2:1c:65:d7:3d:ff:a1:d7:ed:4c:
                    b9:ed:4f:aa:f2:d8:21:68:c5:78:74:ef:e1:b8:14:
                    8f:eb:2f:ce:7c:94:1d:4b:94:8f:15:c9:c9:42:74:
                    b2:4f:f1:a2:4d:5a:df:25:0c:1a:11:4f:3c:b3:08:
                    5c:85:f7:9a:3c:f9:92:0f:30:c5:01:7f:eb:5c:24:
                    f6:71:eb:79:72:7c:4c:4d:e8:0e:a7:32:6c:e7:59:
                    ae:8d:f8:db:df:8a:db:af:a7:e9:cc:00:26:64:89:
                    13:9f:4e:50:9e:40:7a:ad:9a:19:ce:cb:b1:7f:43:
                    50:20:f8:fd:67:db:98:80:8d:91:57:f2:72:26:15:
                    27:26:75:e1:52:81:ad:09:32:13:5c:77:33:19:e2:
                    e4:06:b9:f7:d7:09:86:8e:33:6c:6e:42:85:a3:e7:
                    3d:7f:08:47:2f:0c:a4:1c:86:74:85:a2:62:a8:ab:
                    e5:21:e3:5d:7d:be:18:53:ed:e5:8f:cd:fa:c1:01:
                    b4:d0:0d:1e:34:fc:81:e7:4d:c6:20:a8:6a:d3:e7:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:F5:7C:F5:96:99:46:AF:CA:72:2B:4E:EA:DA:A7:FA:AC:02:43
            X509v3 Authority Key Identifier:
                keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/be40edd73074b40b55bc5be5086f66dd7dd6c343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f010::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:ba:f2:19:b5:95:2e:df:a8:a0:43:d3:08:dc:0d:e9:f5:
         81:95:37:dc:d8:b1:d7:fe:db:9e:3d:79:c2:80:47:61:36:4f:
         e4:67:71:81:14:61:e3:8a:be:06:35:f3:6a:06:b4:55:84:74:
         d4:c8:a5:dc:5c:e2:01:b5:97:fe:b6:d8:56:96:0c:ea:c6:8f:
         f6:2b:e7:7e:da:53:94:e7:ef:3c:f4:04:4c:fa:2c:0a:c7:1e:
         b0:08:52:d9:4f:51:8e:61:af:1c:9b:f4:c5:3b:0d:5e:16:f1:
         33:63:0d:f5:07:a1:a0:a9:ca:65:3f:87:7a:7f:2d:be:c4:ba:
         24:6d:4d:66:ae:40:95:61:67:9a:c9:1d:06:f2:61:8e:34:b5:
         6b:7c:73:4a:ff:12:a9:2e:06:13:d5:2d:a6:05:cb:73:ab:1f:
         95:94:44:f4:4b:c0:28:8d:f8:73:a9:09:97:e7:78:b0:78:2a:
         da:9a:97:d4:63:ef:6b:32:8d:39:9e:c3:5d:74:c6:0c:aa:e6:
         e3:38:15:11:77:5a:38:48:20:68:00:b8:75:76:39:df:f6:ba:
         2a:f8:bb:03:15:f2:29:7a:6e:df:7d:0d:5d:ce:1c:9a:09:74:
         5d:f7:ad:5d:e4:71:2a:d1:c2:72:a7:71:1a:b3:3f:f0:7e:bc:
         32:76:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----