Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/e6b4e60676f6ff4fcd67cf902ad1428186d31882.roa
File:                     e6b4e60676f6ff4fcd67cf902ad1428186d31882.roa (raw, json)
Hash identifier:          c/O4jpeCOuD0fG/iw3C2Hrscv4NANemUan1kJoS/+S4=
Subject key identifier:   21:80:5D:A9:BE:6F:E2:2F:06:68:40:1C:AF:9B:F8:BB:EC:11:AF:7A
Certificate issuer:       /CN=1be9f9f11cc9399507d52793d27263cec20dfef0
Certificate serial:       04D7
Authority key identifier: 18:C6:F5:2D:90:C0:73:5D:CB:66:2A:13:AE:EF:B3:50:F3:42:59:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1be9f9f11cc9399507d52793d27263cec20dfef0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/e6b4e60676f6ff4fcd67cf902ad1428186d31882.roa
Signing time:             Wed 02 Feb 2022 00:30:50 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Thu 01 Feb 2024 03:00:00 +0000
asID:                     272019
IP address blocks:        2803:c510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be9f9f11cc9399507d52793d27263cec20dfef0
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2024 GMT
        Subject: CN=e6b4e60676f6ff4fcd67cf902ad1428186d31882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:76:7e:bc:be:6a:78:9e:a8:06:bb:3e:3e:
                    18:3a:19:9d:29:e4:d2:92:7d:cb:28:cc:c5:16:ca:
                    3e:40:ce:5e:45:69:47:95:78:6d:a7:59:87:5f:3f:
                    63:3c:1c:2b:61:cb:e0:f2:0d:6e:09:21:89:18:af:
                    22:f3:3b:5d:d7:4c:59:c8:39:d8:31:7a:6b:15:8a:
                    0e:87:cc:7e:fa:6d:0c:e2:65:95:b9:5a:d9:b6:c6:
                    f0:96:93:7d:7a:cb:79:d9:bd:16:11:15:f3:08:ed:
                    00:15:1f:a1:9b:9d:29:3b:9d:25:ca:d6:3a:13:2d:
                    00:82:8b:17:6b:c9:5c:fb:53:bd:e4:16:2a:ee:24:
                    b5:40:92:b1:2c:50:d5:0f:87:48:b5:3b:f7:57:ac:
                    2b:37:be:20:53:23:31:06:c8:c6:23:24:f0:55:c0:
                    7e:5d:ef:11:8f:ea:c4:e3:14:37:6a:4a:99:8f:01:
                    2e:08:e7:00:37:4c:71:28:60:30:1c:4b:10:85:9e:
                    a8:2a:da:73:40:47:cc:da:78:6f:af:c4:d5:8f:2f:
                    ad:39:b4:8d:17:9b:fd:de:a8:6f:0e:23:08:4b:5b:
                    34:46:b6:f7:b9:b8:c6:a9:de:7a:9c:1c:2d:53:0c:
                    9f:71:95:d7:de:ba:a9:d9:6b:a8:46:87:6d:cb:35:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:5D:A9:BE:6F:E2:2F:06:68:40:1C:AF:9B:F8:BB:EC:11:AF:7A
            X509v3 Authority Key Identifier:
                keyid:18:C6:F5:2D:90:C0:73:5D:CB:66:2A:13:AE:EF:B3:50:F3:42:59:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1be9f9f11cc9399507d52793d27263cec20dfef0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/e6b4e60676f6ff4fcd67cf902ad1428186d31882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/1be9f9f11cc9399507d52793d27263cec20dfef0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c510::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:03:18:da:82:0c:fe:d6:83:aa:e3:c5:76:0d:28:e7:fa:
         50:5a:09:d4:39:77:e6:f7:b0:20:be:55:3d:b4:32:ca:10:d0:
         4a:56:72:6b:b5:33:e1:86:b2:45:45:81:40:ec:ea:c6:f9:8e:
         2d:40:3a:89:61:71:1c:40:4e:51:43:8e:aa:99:71:ca:07:60:
         c2:34:1c:c5:c1:ce:e5:5f:cd:cd:1d:78:fc:68:7c:30:c6:bf:
         4a:4e:dd:d0:a5:6e:f6:4e:09:d3:9f:dd:8a:b2:4f:13:e3:89:
         a6:33:c3:a5:be:52:ea:a9:d9:0d:3d:e3:39:9f:17:e1:a4:e2:
         04:8f:5e:6e:f4:c8:2d:6a:93:1c:10:7b:cd:8b:84:d5:16:6b:
         84:66:f3:7f:6d:67:d5:18:ab:64:87:3d:8d:6a:11:f1:bf:f5:
         92:51:e3:7c:76:bf:b3:7b:8b:2b:4f:96:28:90:7e:db:85:5a:
         0b:61:af:86:93:38:56:69:91:3e:cf:77:1f:7d:38:48:c9:11:
         90:6b:37:2e:00:15:35:09:31:eb:0d:79:d6:b6:37:e1:9e:92:
         a8:6e:d7:f9:bf:1c:bc:fa:b7:dd:b7:18:e6:dd:d5:4d:21:1b:
         49:7d:2d:28:74:88:cc:01:35:92:18:7c:b2:a6:03:f7:42:a6:
         49:c5:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----