Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/32671909a9c2350c824eab94bbac957cef65518e.roa
File:                     32671909a9c2350c824eab94bbac957cef65518e.roa (raw, json)
Hash identifier:          rDDz5l6EMjnUZPBn339+ZozaFlfXX+fbm4ixcjt41EU=
Subject key identifier:   86:61:A0:44:76:11:21:38:61:7F:12:80:17:3B:FE:B9:C6:2E:47:9F
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       16E119
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/32671909a9c2350c824eab94bbac957cef65518e.roa
Signing time:             Tue 26 Apr 2022 21:10:32 +0000
ROA not before:           Tue 26 Apr 2022 03:00:00 +0000
ROA not after:            Fri 26 Apr 2024 03:00:00 +0000
asID:                     264646
IP address blocks:        2803:1780::/47 maxlen: 48
                          2803:1780:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499417 (0x16e119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Apr 26 03:00:00 2022 GMT
            Not After : Apr 26 03:00:00 2024 GMT
        Subject: CN=32671909a9c2350c824eab94bbac957cef65518e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:de:df:fc:8a:96:18:10:49:34:ce:9c:36:
                    5d:0e:83:ec:37:b4:56:4a:aa:dc:cd:4f:10:f2:1c:
                    c3:c6:5b:ce:95:e9:b5:5a:fa:43:49:14:5f:74:e1:
                    d2:e4:ef:90:3a:e3:2d:46:5e:b3:6e:d9:09:d1:a0:
                    f1:f3:ba:12:6c:9d:06:e9:db:19:01:e1:9d:f2:b3:
                    f0:ff:5a:a6:48:98:b9:30:14:c4:b8:26:71:f7:db:
                    5e:7c:1f:ea:11:c2:ef:98:d3:60:75:4b:ba:79:2b:
                    b5:c2:5e:71:79:ca:f3:f8:55:a9:33:d6:28:37:67:
                    fe:2f:dd:85:b3:f4:2f:7d:4c:c7:95:5c:6c:76:4d:
                    45:15:42:18:62:0e:16:f4:ee:d6:56:ab:a7:bc:59:
                    89:3b:7c:ab:2a:65:f8:64:da:c9:ad:e4:0e:f9:f6:
                    8a:c6:17:05:b6:f6:71:19:37:67:31:df:87:47:9b:
                    5a:10:bd:05:b4:72:92:a1:3e:a7:94:bf:00:a3:51:
                    b5:84:68:47:52:ca:79:76:8d:b6:2c:2a:c6:a9:b1:
                    4a:7f:8e:58:8b:b0:04:9c:a3:6f:b7:3a:4d:da:d5:
                    86:b3:2a:e8:e3:4b:83:29:67:d1:ee:08:67:6d:6a:
                    92:f3:03:db:3c:0e:62:8a:c8:31:e1:db:26:56:3f:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:61:A0:44:76:11:21:38:61:7F:12:80:17:3B:FE:B9:C6:2E:47:9F
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/32671909a9c2350c824eab94bbac957cef65518e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780::/47
                  2803:1780:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:cc:61:97:16:c8:7b:20:93:02:39:10:a2:76:fd:f7:af:
         88:2b:13:86:1e:95:ec:95:8c:b0:bf:e8:b9:66:5c:46:25:5f:
         da:03:bc:7e:ea:f6:3c:8d:0d:69:42:aa:7f:1e:d1:dd:51:64:
         5e:3d:65:1b:1a:36:41:50:df:fd:8f:dc:d4:64:50:94:dc:fd:
         c3:da:ba:be:af:a2:15:09:5f:e6:4e:6e:25:19:21:ce:0f:3f:
         58:d7:e4:8c:81:64:06:e0:ef:d8:46:a8:8a:47:da:9c:8a:01:
         cb:cd:df:1c:28:93:c0:ac:72:42:8b:64:9b:b6:e4:a4:ed:c3:
         f2:26:eb:a5:d9:90:73:d5:ff:ab:3c:01:53:84:ab:c8:63:c0:
         5e:c9:83:42:75:7d:fb:32:ae:a6:50:1d:3f:fb:c9:c4:01:8c:
         18:5d:3d:1f:87:57:8f:ea:e1:5e:88:74:6a:18:94:96:a0:45:
         b0:93:df:bd:60:16:24:90:a1:81:45:cc:8a:ee:ae:4f:f3:b6:
         90:80:b8:b8:27:54:f3:36:ae:13:12:99:ca:80:f9:f2:be:b9:
         43:a2:a1:24:b7:bc:e6:f7:a6:dd:d9:f5:db:2e:71:9e:a0:ae:
         b7:76:56:ec:35:7b:1a:2a:1d:26:4a:87:71:68:f3:29:83:ce:
         95:be:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----