Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/4f7e406e74b1f4c7a902c5499b05f391cfce354b.roa
File:                     4f7e406e74b1f4c7a902c5499b05f391cfce354b.roa (raw, json)
Hash identifier:          pIUEsdshhYmBg76EDM4J74bWwBu31mfpW3yT5UhtUt0=
Subject key identifier:   23:C9:F5:1B:0A:DA:6F:D9:9E:96:22:EA:31:34:E4:7E:C7:B1:63:B9
Certificate issuer:       /CN=c363ae69fd41f81cec9a0c658bea62a73a88d046
Certificate serial:       0597
Authority key identifier: 16:03:D1:19:AC:15:68:FA:C4:55:92:9F:B6:91:37:09:21:59:D2:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c363ae69fd41f81cec9a0c658bea62a73a88d046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/4f7e406e74b1f4c7a902c5499b05f391cfce354b.roa
Signing time:             Thu 14 Apr 2022 12:05:06 +0000
ROA not before:           Thu 14 Apr 2022 03:00:00 +0000
ROA not after:            Sun 14 Apr 2024 03:00:00 +0000
asID:                     272124
IP address blocks:        2803:ef10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c363ae69fd41f81cec9a0c658bea62a73a88d046
        Validity
            Not Before: Apr 14 03:00:00 2022 GMT
            Not After : Apr 14 03:00:00 2024 GMT
        Subject: CN=4f7e406e74b1f4c7a902c5499b05f391cfce354b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:71:40:5b:be:56:9b:04:6f:52:bc:32:d2:
                    30:e9:70:a7:a2:f3:95:4d:fa:26:f1:8c:b8:b9:fa:
                    e4:10:73:2f:1c:6b:18:9d:10:d8:02:13:3f:eb:6e:
                    8a:24:38:6b:32:ef:d7:d8:8f:af:23:fa:d3:46:13:
                    d2:32:36:9c:ab:f4:ee:7a:0a:3b:eb:6f:7e:86:15:
                    8b:91:f7:e1:e3:5c:91:a1:17:ab:01:21:92:17:23:
                    bc:66:91:2d:e6:46:a4:54:63:40:5a:40:b9:7e:fa:
                    c5:96:95:fb:f2:d8:ae:79:44:c2:9d:11:af:a1:98:
                    14:e4:6e:e0:93:db:e5:ce:b0:9a:db:63:7e:6e:62:
                    79:da:3b:12:08:2d:3d:f6:73:7a:b6:39:e8:0d:02:
                    28:11:13:d7:b7:63:03:1e:56:4a:29:9e:9e:91:61:
                    e4:49:ac:93:5f:16:03:d6:7c:66:5f:d6:ae:82:7b:
                    8a:73:0f:df:a7:89:4a:0a:ae:18:fd:78:75:49:2c:
                    78:32:1d:5c:ed:57:f4:a3:82:42:8e:0f:7c:43:f8:
                    8e:0b:40:df:5f:22:7f:b9:e1:e8:6c:9f:44:8c:15:
                    07:ee:1c:2c:a5:10:87:18:1b:50:7d:1b:5a:c2:a8:
                    49:c0:7b:2b:4b:6d:35:65:cb:a0:69:2c:4d:3f:dd:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C9:F5:1B:0A:DA:6F:D9:9E:96:22:EA:31:34:E4:7E:C7:B1:63:B9
            X509v3 Authority Key Identifier:
                keyid:16:03:D1:19:AC:15:68:FA:C4:55:92:9F:B6:91:37:09:21:59:D2:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c363ae69fd41f81cec9a0c658bea62a73a88d046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/4f7e406e74b1f4c7a902c5499b05f391cfce354b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/c363ae69fd41f81cec9a0c658bea62a73a88d046.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef10::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:8a:5f:00:b4:9b:9c:55:e1:e2:8d:86:6e:22:8f:52:74:
         41:14:a9:2f:42:24:a2:7f:5b:cc:58:9d:49:a8:60:52:f2:32:
         d6:03:69:37:ad:1b:ed:3d:5a:14:3e:05:f2:96:ca:0a:64:89:
         8b:90:4f:71:dd:af:ef:f4:09:5d:d3:16:01:3a:33:c7:50:3c:
         24:e1:7d:48:1e:5e:06:cf:ff:c1:d4:0a:da:dc:84:b4:6f:a2:
         08:e9:83:a7:7b:3a:52:12:c4:4c:b5:bc:43:a8:74:94:87:a4:
         70:ed:11:70:32:24:30:7c:37:b8:96:f1:f1:1b:ef:42:55:be:
         7a:06:9d:86:f2:de:56:36:39:22:93:b2:9b:06:b6:87:1b:2c:
         ef:ce:6d:7e:1f:3d:48:5c:dc:74:e8:a0:1c:cf:95:f7:21:4b:
         cf:60:73:07:92:ee:73:63:52:86:db:36:37:fe:a0:b7:63:3a:
         36:b3:ac:3c:db:b1:12:98:1f:af:dc:a4:38:11:14:4b:86:07:
         3c:6e:45:09:ee:88:41:20:99:55:a6:fc:04:0a:b0:5c:95:01:
         92:d1:44:4e:dc:ed:9d:c7:28:85:98:78:f7:3f:6d:fd:c4:41:
         4a:6a:eb:c6:b8:a4:f7:10:34:d0:a3:42:83:be:93:4e:48:e2:
         64:4d:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----