Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/f6b1be2489748562e004a9b1b3a53713b78ab490.roa
File:                     f6b1be2489748562e004a9b1b3a53713b78ab490.roa (raw, json)
Hash identifier:          snt4f0c8CQJiwhkTZb2aQVhXeXa9OqFlS6JAzpU0cgg=
Subject key identifier:   9C:57:AC:C9:4D:BE:0D:D1:8A:81:10:D3:0F:5A:FB:41:D5:44:C7:51
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       17BC17
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/f6b1be2489748562e004a9b1b3a53713b78ab490.roa
Signing time:             Fri 13 May 2022 16:02:58 +0000
ROA not before:           Tue 10 May 2022 03:00:00 +0000
ROA not after:            Wed 10 May 2028 03:00:00 +0000
asID:                     14618
IP address blocks:        2801:0:62::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555479 (0x17bc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: May 10 03:00:00 2022 GMT
            Not After : May 10 03:00:00 2028 GMT
        Subject: CN=f6b1be2489748562e004a9b1b3a53713b78ab490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:9f:d3:a3:52:d1:4b:00:ba:44:49:db:5f:
                    43:fa:8a:a1:6d:95:e5:12:2a:5f:ef:db:95:fc:cf:
                    c8:e8:41:f1:80:a9:61:d2:41:aa:77:ac:e6:bf:03:
                    33:6b:8d:05:c4:6b:fb:22:f5:a1:26:f2:49:80:d4:
                    8c:a5:12:a1:6f:f6:dc:ba:a6:a8:db:2e:a9:7f:09:
                    ba:23:23:f6:1b:32:4e:62:a7:c5:4f:2b:46:89:1a:
                    9e:bb:cc:00:1a:5e:4c:43:d8:40:3c:c7:2d:8b:94:
                    f5:03:d6:e1:51:df:04:e4:ca:03:dd:f7:ad:96:44:
                    82:fa:26:1b:54:4b:95:73:e2:f3:cb:d8:be:3a:a9:
                    c1:f3:6f:2b:ec:40:3e:26:39:f7:ce:8c:8c:9c:2c:
                    3e:d0:b4:af:06:43:9a:34:dd:27:ac:a1:85:92:39:
                    74:fe:65:15:6c:6e:1e:fb:02:35:d5:24:13:34:1d:
                    e5:6e:7c:b3:2f:0d:43:9c:c8:f4:47:b3:c5:e6:a9:
                    7d:67:03:6d:19:e8:8d:53:f5:ba:e4:1b:a2:bc:dd:
                    93:77:82:2d:4b:bf:4d:81:58:ec:16:8c:14:80:de:
                    2f:41:55:e2:66:b1:0e:fd:39:d2:91:9f:4a:16:19:
                    78:ce:4b:d5:b6:94:52:f2:ee:d2:31:da:30:d8:81:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:57:AC:C9:4D:BE:0D:D1:8A:81:10:D3:0F:5A:FB:41:D5:44:C7:51
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/f6b1be2489748562e004a9b1b3a53713b78ab490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:62::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:e8:bc:05:94:57:21:a4:7b:c6:de:9f:33:1b:b4:88:de:
         ae:c2:e5:30:06:4a:e6:26:a0:d9:44:48:2c:15:91:0e:35:82:
         f3:dc:ed:90:16:88:9f:1a:9b:2b:7c:5f:29:8c:4e:bc:87:b3:
         49:74:8d:8f:e7:9d:83:c1:d9:66:c3:8e:55:5e:90:30:7e:7c:
         1a:c3:c3:07:8f:80:56:76:c1:33:92:98:42:bf:0e:5d:ad:8c:
         23:48:79:7f:63:7c:a0:1f:47:c2:e8:d9:05:52:15:e6:f0:c5:
         c6:4b:c4:8c:e8:07:32:db:5d:56:83:4b:f6:5c:7f:37:63:f1:
         f9:3e:3d:84:a2:a8:46:14:7e:95:54:b9:84:28:5d:73:b2:bf:
         f8:55:61:d6:d9:05:4d:eb:da:5b:dd:a3:62:0c:5f:ca:50:52:
         9c:6d:ed:ab:ef:74:72:ba:35:3d:63:87:fa:cd:66:d5:32:ef:
         66:a4:78:ea:69:7f:b1:dc:06:6d:13:7a:eb:b6:4a:e2:d9:6b:
         eb:99:dd:86:aa:91:09:db:c8:65:f5:2f:b1:98:bb:10:7a:31:
         4a:35:7d:7f:1c:ac:e9:d8:8a:0f:61:8a:0c:b2:a4:dd:dc:32:
         21:65:ab:c9:7c:88:87:21:85:d1:ea:94:cf:12:db:af:96:7b:
         67:2d:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----