Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/9bd023f9f586cff95be23beced4d459e78985e63.roa
File:                     9bd023f9f586cff95be23beced4d459e78985e63.roa (raw, json)
Hash identifier:          QRg6AoBW4y5qbWhUlik27MRBvE4DRDh2dwA5vZRLjrY=
Subject key identifier:   AE:1D:9A:86:FE:D8:3C:6E:8C:D6:0A:66:36:17:50:25:94:E8:0D:EB
Certificate issuer:       /CN=d669f1619ed478965c98d9a134f5fd106be561a4
Certificate serial:       12A3
Authority key identifier: F1:CF:A8:DD:82:81:99:5F:BF:34:09:EC:89:9C:57:90:5C:16:FA:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d669f1619ed478965c98d9a134f5fd106be561a4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/9bd023f9f586cff95be23beced4d459e78985e63.roa
Signing time:             Fri 28 Apr 2023 03:19:56 +0000
ROA not before:           Thu 27 Apr 2023 03:19:56 +0000
ROA not after:            Mon 28 Apr 2025 03:19:56 +0000
asID:                     28451
IP address blocks:        2806:3f9::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4771 (0x12a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d669f1619ed478965c98d9a134f5fd106be561a4
        Validity
            Not Before: Apr 27 03:19:56 2023 GMT
            Not After : Apr 28 03:19:56 2025 GMT
        Subject: CN=9bd023f9f586cff95be23beced4d459e78985e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:59:7f:61:fa:ad:4d:41:97:5b:93:c1:d5:
                    de:0d:d4:59:89:83:4e:ea:16:1d:7f:a1:76:9b:4a:
                    88:a4:55:d4:87:1e:22:fe:14:f1:80:03:fa:de:af:
                    ec:cc:9a:ec:98:87:32:f1:3c:bc:29:29:6a:63:5e:
                    94:ba:cf:54:f1:53:da:ae:6e:aa:7d:04:97:e8:80:
                    96:64:f9:3c:96:46:b8:53:1a:7e:9e:e2:64:84:63:
                    46:0b:fd:75:bd:cd:2d:29:08:7d:ea:f5:74:ff:d4:
                    96:6c:5b:9e:e7:16:89:0d:a8:5d:a1:77:66:89:7e:
                    20:7f:7e:ce:3b:48:17:61:2b:7d:85:06:94:92:8d:
                    4a:80:76:c6:34:2b:7c:6b:cf:43:ce:15:58:10:35:
                    32:0a:16:18:a5:54:77:af:40:fd:9b:76:15:8e:04:
                    a6:be:ff:ea:6a:2c:52:3e:cb:d4:6b:c0:c4:da:f6:
                    cb:9f:eb:b6:28:be:12:6b:8f:f6:31:00:f4:40:95:
                    17:60:3b:77:9e:15:ea:eb:16:e1:00:a0:dd:c9:9d:
                    07:f0:fc:b7:ab:80:83:66:bb:d0:51:78:50:2e:db:
                    b8:43:57:c2:47:d4:ba:61:9b:b8:3e:5a:6f:29:18:
                    a7:7b:d7:c1:c2:9e:53:9b:0f:4a:26:de:d0:9c:ce:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1D:9A:86:FE:D8:3C:6E:8C:D6:0A:66:36:17:50:25:94:E8:0D:EB
            X509v3 Authority Key Identifier:
                keyid:F1:CF:A8:DD:82:81:99:5F:BF:34:09:EC:89:9C:57:90:5C:16:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d669f1619ed478965c98d9a134f5fd106be561a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/9bd023f9f586cff95be23beced4d459e78985e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/d669f1619ed478965c98d9a134f5fd106be561a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:78:e2:1d:db:54:6c:8a:ac:f5:1e:ee:98:81:3b:81:1b:1f:
         46:d8:28:76:de:8c:5d:ae:80:e8:bf:20:41:71:07:40:ae:95:
         8b:cc:56:8c:6c:97:0c:7e:25:30:54:f4:e5:06:13:d2:9a:c3:
         d8:0b:d3:1f:b7:66:6a:10:2e:f8:87:d9:86:60:78:60:2f:49:
         a9:53:01:8a:4f:6b:07:e3:de:59:0a:7e:ae:63:17:03:0d:0f:
         6b:4b:a2:09:0a:f7:35:b7:2d:49:dc:9d:f6:25:13:c7:67:d4:
         7a:16:24:2b:2d:aa:d3:fc:d1:c9:de:6e:63:35:fe:71:59:84:
         2d:d9:60:bf:7c:16:d3:30:b4:00:31:af:cd:7f:4c:7a:db:c7:
         3b:69:d2:49:57:b2:96:bf:21:df:58:42:b4:3d:f1:72:66:6f:
         20:15:09:3a:1e:7b:e8:26:d4:0e:f8:74:e1:12:92:6b:03:95:
         28:b2:68:bf:5e:6a:54:64:db:83:5b:8a:ce:b9:33:be:8d:77:
         b4:a7:61:e2:1f:58:88:06:76:dc:a0:d2:33:fe:cb:58:e2:f3:
         48:35:7b:39:f5:93:62:e2:00:76:17:87:f0:55:e0:cd:48:90:
         65:7c:b7:c1:b0:ba:dd:1b:7d:18:26:b5:51:3e:d3:a7:3b:40:
         6f:83:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----