Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/708a5fce34671aad2c9627ab69e730ce725c0b80.roa
File:                     708a5fce34671aad2c9627ab69e730ce725c0b80.roa (raw, json)
Hash identifier:          0R4paaGzu0QcGv/UlGuZVaNVQft5KHEiPeGXlcxepOk=
Subject key identifier:   94:17:5A:7C:9F:A9:43:F4:B0:72:00:33:7D:F2:32:FE:6B:7A:65:1F
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       1C2F37
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/708a5fce34671aad2c9627ab69e730ce725c0b80.roa
Signing time:             Wed 12 Oct 2022 15:46:26 +0000
ROA not before:           Wed 12 Oct 2022 15:45:50 +0000
ROA not after:            Sat 12 Oct 2024 15:45:50 +0000
asID:                     3573
IP address blocks:        2801:1f0:4019::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847095 (0x1c2f37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Oct 12 15:45:50 2022 GMT
            Not After : Oct 12 15:45:50 2024 GMT
        Subject: CN=708a5fce34671aad2c9627ab69e730ce725c0b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1b:6f:4d:31:03:bc:72:c2:0d:20:cc:b8:6f:
                    4e:eb:ff:54:e5:2d:b4:98:dd:27:a6:5d:60:2c:32:
                    f4:5a:99:16:e0:b5:5f:a2:36:36:ed:57:1a:b0:ba:
                    ea:c0:fb:f7:a3:6a:24:85:4d:07:62:51:3d:95:96:
                    77:36:06:70:42:65:69:e4:17:4e:c0:e8:7d:49:d3:
                    c3:63:cd:53:a5:24:37:95:d5:cc:c4:b1:5a:5c:4f:
                    ea:69:0d:b2:80:24:01:59:70:02:eb:e8:4e:2b:b7:
                    53:93:65:cf:d1:d6:cb:4a:e6:b5:00:ab:4b:ef:c4:
                    4d:0d:43:69:47:10:72:ee:82:b6:79:d2:e2:c2:77:
                    7e:5a:f2:40:ce:38:29:34:a4:d0:05:37:20:37:d3:
                    0c:7f:a5:9e:51:fe:cb:5d:b6:9d:28:ae:b4:fe:da:
                    d8:45:7f:34:1c:1c:03:49:99:3a:50:6c:74:f3:24:
                    d5:b5:6b:08:8f:ba:e6:f8:a3:e0:a1:e0:79:b6:b8:
                    3c:76:86:d1:41:3a:2e:1d:b4:c2:ff:fe:9d:22:dc:
                    8c:c7:37:a1:87:d6:58:fb:31:5e:a2:7a:9c:cf:c2:
                    d2:90:96:8e:b8:5e:95:ee:bd:cb:d1:b3:3d:35:fa:
                    ef:3a:00:ff:18:44:ec:29:5e:fb:7a:49:6b:04:3e:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:5A:7C:9F:A9:43:F4:B0:72:00:33:7D:F2:32:FE:6B:7A:65:1F
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/708a5fce34671aad2c9627ab69e730ce725c0b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4019::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:e3:43:67:64:1c:2d:ca:36:a9:53:40:30:eb:8d:c0:31:
         9a:6d:98:a6:78:43:9a:16:bf:93:c8:b2:2b:9e:88:f1:59:7b:
         01:03:a1:4a:6a:8c:2a:73:d5:6e:0c:67:38:be:0d:d6:7e:b4:
         3d:48:b7:a5:97:74:b7:f3:f5:db:e2:b2:f3:89:29:d7:f5:69:
         66:71:e7:36:62:e2:0c:d4:a0:16:b3:db:6a:a6:d1:d7:2b:2f:
         f1:ab:f8:2f:62:b4:ca:7c:3c:a4:b0:62:87:d1:78:15:da:ad:
         8c:bf:57:3e:1f:b8:90:c6:1b:17:8a:bc:f8:1f:af:4c:16:8b:
         9f:42:2e:03:83:03:0a:84:23:9b:9b:c5:96:9a:c4:af:8c:02:
         db:98:ce:c2:a5:4a:b2:81:1e:d4:8d:4e:08:c6:a3:c4:57:78:
         cf:26:67:6b:ae:03:e2:b9:16:b9:03:d3:79:5f:90:3c:16:fc:
         07:db:dd:54:ab:06:f8:72:8c:b4:4e:ad:6b:85:32:a7:2a:e9:
         4d:88:34:b8:1c:28:9a:35:54:87:96:b8:5b:97:bc:54:a2:32:
         d9:5c:c1:12:31:b7:eb:e3:78:ff:e4:59:0b:e0:90:dc:0a:5d:
         a0:36:9b:e9:e3:d2:1c:15:52:68:19:89:c9:dd:01:21:3c:ff:
         1a:6c:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----