Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/a5ddbdd4bc501df421a1414a2b1b993bfe668f43.roa
File:                     a5ddbdd4bc501df421a1414a2b1b993bfe668f43.roa (raw, json)
Hash identifier:          yuPe2NuW8FoxnpQEZgjRsAbY19LUacJYPV4q34oaisg=
Subject key identifier:   E8:45:C5:8A:EA:94:51:6A:97:BC:59:3B:D6:91:08:AB:AE:E7:E8:0A
Certificate issuer:       /CN=64041944442f461f5c8e752eaa61df259bbf573e
Certificate serial:       010758
Authority key identifier: 93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/a5ddbdd4bc501df421a1414a2b1b993bfe668f43.roa
Signing time:             Fri 16 Dec 2022 20:32:52 +0000
ROA not before:           Thu 15 Dec 2022 20:32:49 +0000
ROA not after:            Mon 16 Dec 2024 20:32:49 +0000
asID:                     272847
IP address blocks:        2803:6c90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67416 (0x10758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64041944442f461f5c8e752eaa61df259bbf573e
        Validity
            Not Before: Dec 15 20:32:49 2022 GMT
            Not After : Dec 16 20:32:49 2024 GMT
        Subject: CN=a5ddbdd4bc501df421a1414a2b1b993bfe668f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:29:71:d6:a1:94:a8:e9:5b:5b:4c:e1:4f:
                    59:73:1e:31:d9:14:bd:d4:f4:10:97:38:9c:a0:97:
                    3b:f9:11:fb:04:74:46:3d:ad:71:1a:c0:a7:26:20:
                    7a:55:69:e0:3b:a1:10:b1:43:89:c7:02:14:e3:6f:
                    c7:a0:dd:20:c0:0a:cc:0c:fa:74:55:bc:e0:8e:b1:
                    a8:45:16:af:21:a0:e7:32:e3:8e:5c:55:ee:65:3c:
                    96:f2:51:87:87:e8:3c:d0:23:c8:24:f3:7f:4c:7b:
                    41:5d:fe:5c:00:f8:ca:da:34:a1:ad:bd:0a:4e:ad:
                    ce:5b:06:2b:17:48:9f:5e:03:43:07:cc:8d:c7:c4:
                    52:65:00:02:48:78:94:5d:a4:be:c9:ce:b7:1a:c4:
                    59:93:cd:af:c5:8a:8c:f9:c9:7b:53:24:7e:6e:70:
                    55:82:43:7d:ae:99:2c:f9:46:4d:d8:d5:ee:39:39:
                    68:f1:26:bc:b9:48:f7:10:6d:ba:2f:ca:25:85:36:
                    96:d6:2b:2b:23:a8:c2:ed:94:c8:5e:7a:2a:69:64:
                    54:da:8a:cf:95:97:ca:2e:08:4e:7d:bd:91:45:99:
                    b3:45:f7:00:32:ff:30:69:52:8f:06:28:25:21:ab:
                    e2:d0:32:e3:a4:be:a4:74:c8:e5:9b:7a:59:fd:68:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:45:C5:8A:EA:94:51:6A:97:BC:59:3B:D6:91:08:AB:AE:E7:E8:0A
            X509v3 Authority Key Identifier:
                keyid:93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/a5ddbdd4bc501df421a1414a2b1b993bfe668f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/64041944442f461f5c8e752eaa61df259bbf573e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:e1:ba:81:28:d3:88:1a:59:32:df:f9:35:d2:7d:37:37:
         b4:11:a6:ff:57:75:6e:96:48:ed:29:97:ff:8b:49:8d:67:bb:
         a9:af:08:e4:07:24:b5:11:2b:a7:6b:aa:0a:31:df:16:a5:58:
         69:90:6a:ae:5d:e6:53:93:52:b4:35:4e:b9:69:f2:23:8c:74:
         6e:48:f0:6c:be:d0:93:1c:86:98:6a:00:f0:74:7c:26:52:1f:
         c5:64:30:78:ba:d6:43:33:5d:3d:9b:c6:8c:f3:c7:7d:66:db:
         42:55:9f:77:4a:a9:8b:b5:a9:ac:be:99:b5:1e:97:e1:5f:b2:
         5f:f9:e8:80:39:fb:51:cf:4f:04:d4:a3:22:0b:66:a1:be:a5:
         22:f1:66:cc:c6:3a:70:da:00:c7:94:d9:aa:07:dd:1b:05:be:
         83:b0:f8:de:a3:3b:44:8c:cd:4d:49:ce:80:98:da:24:0a:0c:
         7f:fa:6f:3b:c1:da:cf:58:9b:a3:c0:81:f3:a4:ef:96:8a:e8:
         b0:52:e3:d5:6e:15:8e:32:73:ea:83:b2:31:2c:cf:ef:9b:99:
         1c:f8:9a:c4:96:39:3e:f8:13:e2:3b:d0:d3:ea:8b:f9:90:d8:
         0c:6b:df:39:2c:9c:8c:88:40:8a:65:a5:cf:77:e6:3d:3e:81:
         9a:e9:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----