Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/18708bd3992df85e36424cbbc1bf43f359cce7dc.roa
File:                     18708bd3992df85e36424cbbc1bf43f359cce7dc.roa (raw, json)
Hash identifier:          TCKtxRrgbhpII0ymfaQq8kVfKlh4yTydwVjFeByQHmI=
Subject key identifier:   F3:DE:1B:D9:3B:1F:E2:31:14:1E:CA:B8:B1:23:41:BD:A0:D1:97:E8
Certificate issuer:       /CN=cc94d447332088d6f7a8cefa79077c4d15556a3c
Certificate serial:       064799
Authority key identifier: 98:BD:9A:EC:77:20:D3:85:2F:22:A6:D4:1F:A8:8D:EE:AD:25:4A:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc94d447332088d6f7a8cefa79077c4d15556a3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/18708bd3992df85e36424cbbc1bf43f359cce7dc.roa
Signing time:             Tue 28 Jun 2022 17:45:43 +0000
ROA not before:           Tue 28 Jun 2022 03:00:00 +0000
ROA not after:            Fri 28 Jun 2024 03:00:00 +0000
asID:                     202400
IP address blocks:        2803:2910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411545 (0x64799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc94d447332088d6f7a8cefa79077c4d15556a3c
        Validity
            Not Before: Jun 28 03:00:00 2022 GMT
            Not After : Jun 28 03:00:00 2024 GMT
        Subject: CN=18708bd3992df85e36424cbbc1bf43f359cce7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:5f:b4:50:30:43:17:f7:9b:1b:5b:58:cb:
                    d3:de:f5:d7:30:4c:28:0c:7f:54:49:28:23:0e:eb:
                    fb:83:e3:e9:a7:37:a0:02:28:b8:81:c2:2f:79:07:
                    b0:13:f4:95:30:6e:34:c6:e1:6f:91:f6:a7:bd:87:
                    34:df:27:ad:0a:c3:60:05:8a:fc:a0:51:50:19:0a:
                    5a:6c:5b:ea:02:2f:35:9e:62:a9:2b:c6:71:df:89:
                    81:77:27:ad:55:99:41:ac:c1:64:a6:e1:41:ed:dd:
                    99:69:fa:2b:43:eb:d9:4b:0e:7a:94:b6:38:64:ee:
                    5c:7e:00:e4:9a:35:ca:c4:6a:f6:ad:80:4b:e3:2f:
                    cb:1a:e0:ba:10:a1:c2:75:bf:b1:bb:c6:66:0a:96:
                    98:01:f8:46:1f:c3:7b:f5:95:c9:c0:9d:1f:96:a6:
                    48:a8:08:50:0a:2a:1f:b3:f1:ca:49:2e:7d:c7:2d:
                    72:9c:ec:11:7f:dd:82:bb:fc:1c:1b:67:c3:69:97:
                    b7:97:78:f0:a7:3c:96:61:63:a4:6c:55:47:11:1d:
                    73:68:7c:b5:db:c8:34:c1:ef:9c:bd:e3:35:15:26:
                    d3:94:58:e2:e2:77:79:54:27:64:52:eb:65:4b:d3:
                    fe:35:4a:dd:e3:09:c7:09:ca:64:b2:b4:fc:b8:f7:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:1B:D9:3B:1F:E2:31:14:1E:CA:B8:B1:23:41:BD:A0:D1:97:E8
            X509v3 Authority Key Identifier:
                keyid:98:BD:9A:EC:77:20:D3:85:2F:22:A6:D4:1F:A8:8D:EE:AD:25:4A:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc94d447332088d6f7a8cefa79077c4d15556a3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/18708bd3992df85e36424cbbc1bf43f359cce7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/cc94d447332088d6f7a8cefa79077c4d15556a3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2910::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:3a:17:e8:92:26:39:9e:96:b5:42:2e:18:49:c9:fb:58:5a:
         4f:74:00:9f:38:cc:74:81:fe:aa:56:2a:1b:64:24:c0:b8:69:
         93:40:ea:0f:5c:3b:e7:8d:fe:f2:22:41:6c:c3:99:42:1a:e0:
         70:15:c5:5c:e6:b2:05:13:61:94:d0:90:d7:be:a0:eb:a4:40:
         e2:54:82:6c:31:3a:1c:5c:9a:94:aa:e6:19:aa:63:86:be:fc:
         ba:cd:86:6b:ad:cd:d1:1c:31:b2:a7:2d:71:fb:61:2d:c9:7f:
         0e:a9:ba:c8:11:14:34:72:83:f4:0d:2f:2a:66:ed:72:85:25:
         9d:60:82:27:64:03:ef:05:60:9a:e9:a2:e5:0e:a4:91:aa:8f:
         95:b0:70:ee:fa:51:89:25:cf:79:26:a8:c8:a2:8b:64:07:33:
         33:5f:54:f0:d7:a5:87:10:87:0e:21:1e:ab:2b:bf:9c:c3:7a:
         c2:b4:61:6a:17:56:56:bc:ef:99:fc:8b:5e:81:59:37:a0:ed:
         dd:ad:2f:7a:09:e1:c8:d2:75:08:1e:67:d2:14:56:01:c2:fa:
         62:11:27:7a:23:72:7d:0b:a8:54:7c:db:b9:a0:45:c9:22:de:
         82:e7:a3:31:18:4b:41:4f:ae:f4:ff:9f:ca:af:e7:4d:20:ab:
         fa:ba:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----