Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/2f83a3137a957dc333701885d91e3f1984d39d5c.roa
File:                     2f83a3137a957dc333701885d91e3f1984d39d5c.roa (raw, json)
Hash identifier:          JpICwHbnkLss/FUl8d2eTIe+c5v2J7SK2NxPMOfgqpg=
Subject key identifier:   1B:04:89:B7:9E:F9:6E:65:DA:38:9C:EE:F8:6C:51:F6:13:EC:BF:75
Certificate issuer:       /CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
Certificate serial:       05862A
Authority key identifier: EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/2f83a3137a957dc333701885d91e3f1984d39d5c.roa
Signing time:             Tue 17 May 2022 19:52:47 +0000
ROA not before:           Tue 17 May 2022 03:00:00 +0000
ROA not after:            Fri 17 May 2024 03:00:00 +0000
asID:                     271993
IP address blocks:        2803:5110:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362026 (0x5862a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
        Validity
            Not Before: May 17 03:00:00 2022 GMT
            Not After : May 17 03:00:00 2024 GMT
        Subject: CN=2f83a3137a957dc333701885d91e3f1984d39d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:7b:01:80:f4:86:b7:dd:37:28:fb:f6:f3:
                    27:0f:86:b4:8f:b1:b2:31:97:77:42:8c:49:40:8f:
                    d7:27:8b:37:4b:13:29:0f:4f:8a:1b:a6:b1:fd:52:
                    36:65:e2:81:66:14:68:ab:4a:ed:e6:63:6b:34:24:
                    03:47:4d:38:58:5d:08:3c:d7:cc:6a:56:eb:f6:a1:
                    22:fd:29:63:d6:84:f8:4c:3c:3e:99:b3:36:d1:63:
                    24:dd:73:9c:7f:7c:d7:9f:c3:3d:67:63:04:01:49:
                    42:f2:88:47:4a:0b:0e:48:86:08:7f:53:68:40:08:
                    77:12:9b:fc:d8:80:81:f7:1e:83:5d:4e:1d:16:0e:
                    61:69:f6:13:e7:d2:48:46:b7:2f:95:94:82:e3:6c:
                    f2:f2:43:81:27:e7:e3:54:56:1f:a3:2d:96:45:3c:
                    e7:e0:16:58:f8:1a:94:d5:eb:8c:e5:e9:91:01:44:
                    fe:1d:ac:7c:14:f3:61:63:8e:28:f7:88:36:69:16:
                    f9:09:76:4a:ce:29:d4:5e:2f:56:33:d8:ff:1c:7d:
                    65:db:67:28:15:96:e0:a9:1f:67:7a:01:48:6c:cd:
                    f8:41:f3:3b:b7:9c:37:c5:d4:17:84:de:87:fc:58:
                    22:81:d0:f9:60:13:0f:5e:df:08:37:68:12:b8:a6:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:04:89:B7:9E:F9:6E:65:DA:38:9C:EE:F8:6C:51:F6:13:EC:BF:75
            X509v3 Authority Key Identifier:
                keyid:EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/2f83a3137a957dc333701885d91e3f1984d39d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/13e7c7268d24306b60d655788ea7e6ab7c157a37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5110:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:13:66:cc:1b:89:38:c5:0d:24:44:ee:1d:ac:0c:fb:24:
         35:06:5b:ef:d4:61:d3:df:4a:ef:00:de:7c:e9:8c:c0:1d:0e:
         5b:15:b7:db:15:af:61:39:66:03:a4:bf:3f:e5:78:e7:da:72:
         97:f9:f8:33:3a:f6:a6:a2:55:6e:4e:72:1f:7f:5b:04:18:dc:
         dd:d7:32:10:89:b9:07:a7:b7:d7:d0:8d:0d:23:44:cb:7e:15:
         47:22:2b:a3:2c:d3:82:e4:e8:04:e7:0f:18:e0:32:4a:de:29:
         ed:d0:7a:b3:7f:54:cb:9a:18:76:ff:89:b8:c5:7b:74:00:2a:
         e6:c1:c3:04:c1:ef:21:dd:fa:a6:8f:4f:1c:bf:db:f3:b2:7f:
         3f:73:6a:ae:2a:2f:17:aa:64:28:28:1b:42:25:a3:2e:da:89:
         53:35:8b:79:fa:5a:47:20:ca:83:0a:6e:95:16:bf:b0:1a:55:
         79:4b:c3:ab:b5:3d:92:d1:88:d2:ae:d3:c0:10:0a:d2:5e:5c:
         3e:4c:dc:94:96:af:b3:13:65:3f:5a:9d:55:42:c3:96:71:8f:
         3a:ca:c1:15:55:c3:ad:b5:ba:eb:8b:00:b2:3b:c7:04:64:8e:
         cf:12:90:ee:4c:d4:c8:bf:a4:64:e9:df:b3:75:42:75:ec:ad:
         21:92:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----