Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/2292db5b64cd3ef2fc10d358d03f1d3d9353655e.roa
File:                     2292db5b64cd3ef2fc10d358d03f1d3d9353655e.roa (raw, json)
Hash identifier:          oy/dCGZg7PgOOltp/eo/6iW4JcJCfO7iFHaOssbD8I0=
Subject key identifier:   6A:D4:E3:36:E9:4C:E9:4E:8C:A2:B8:72:47:B9:3C:9C:FA:AC:D4:72
Certificate issuer:       /CN=5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc
Certificate serial:       02DA
Authority key identifier: 59:E8:32:23:A7:50:DD:19:83:C3:4A:0A:FE:10:B3:74:57:9A:C9:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/2292db5b64cd3ef2fc10d358d03f1d3d9353655e.roa
Signing time:             Sat 27 Nov 2021 16:01:36 +0000
ROA not before:           Sat 27 Nov 2021 03:00:00 +0000
ROA not after:            Mon 27 Nov 2023 03:00:00 +0000
asID:                     271942
IP address blocks:        2803:2610::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc
        Validity
            Not Before: Nov 27 03:00:00 2021 GMT
            Not After : Nov 27 03:00:00 2023 GMT
        Subject: CN=2292db5b64cd3ef2fc10d358d03f1d3d9353655e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:e3:87:f7:37:d7:20:5c:2c:f4:ab:0d:25:
                    b2:d0:17:1b:d7:29:bf:80:f6:79:3f:f2:35:e4:dc:
                    c6:62:5e:3d:4d:ec:2f:f8:eb:1b:75:a3:27:08:40:
                    5f:99:db:1b:d9:4d:0d:ed:b2:79:6d:37:59:26:56:
                    00:b9:e2:81:6b:49:a4:3c:43:77:dc:c0:91:8a:c4:
                    fa:f8:50:d7:03:e7:2f:3b:42:0e:59:5c:7b:c9:56:
                    80:f5:47:dd:c3:49:b0:04:31:83:c2:cd:9f:86:43:
                    2e:5e:8f:68:5e:c2:8b:5d:05:58:b1:c6:5f:be:ef:
                    bf:d1:61:0d:1e:47:20:53:65:1c:fa:55:28:7c:18:
                    e7:75:7b:dc:42:ea:f9:0c:c2:41:f6:bd:1f:a6:db:
                    59:a3:99:87:e7:b6:eb:d5:a3:ab:91:29:6b:6e:36:
                    56:ff:4e:0a:29:2c:f2:7f:ce:0c:5e:ba:c4:c9:03:
                    b7:15:bf:41:d2:55:50:4b:3f:6d:20:0a:15:f3:71:
                    d7:f0:8c:00:da:f0:df:26:02:bc:ab:fa:d3:7e:8b:
                    88:7c:0f:66:e1:7b:66:99:57:c6:73:64:b8:98:93:
                    e4:ac:da:48:c3:68:af:2d:d2:38:ac:70:83:1c:7f:
                    2a:0c:c6:93:aa:a1:36:27:c7:44:e0:bb:d9:3e:e3:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D4:E3:36:E9:4C:E9:4E:8C:A2:B8:72:47:B9:3C:9C:FA:AC:D4:72
            X509v3 Authority Key Identifier:
                keyid:59:E8:32:23:A7:50:DD:19:83:C3:4A:0A:FE:10:B3:74:57:9A:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/2292db5b64cd3ef2fc10d358d03f1d3d9353655e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:6a:d8:31:de:ea:b4:3f:3c:4b:84:a7:50:5f:e9:7c:1e:
         b0:8f:f7:c8:18:5a:fd:cb:8b:83:3f:be:bd:3c:88:76:25:b7:
         bf:78:f2:57:a4:d8:57:d2:5a:52:c3:e8:4f:b1:26:7e:c2:2a:
         89:e7:8a:95:9f:f1:01:20:20:ab:40:ac:39:8b:31:66:6c:5c:
         74:64:a4:87:b0:7d:84:ab:35:bc:33:44:42:00:15:5b:61:8f:
         42:59:2c:4c:be:8a:75:b0:44:5b:23:59:13:91:f3:3e:29:a0:
         31:70:4a:fd:2d:55:d8:5e:da:5a:68:e6:86:7d:99:75:7c:2f:
         88:01:03:ca:e7:70:ff:89:ae:f2:96:e8:93:3b:50:de:8b:5c:
         75:bd:e6:68:f8:68:db:b7:46:e5:49:03:de:dd:41:8e:c1:d5:
         33:1d:f8:f2:77:5e:6d:13:da:aa:12:3b:6e:a8:67:0b:55:71:
         11:52:e5:25:ac:89:52:85:84:ea:e1:2d:95:64:82:d6:c4:2f:
         4f:05:a4:b8:26:f1:76:dc:a3:e0:24:e6:97:61:71:11:7d:28:
         82:9d:a2:68:b7:e6:14:be:9b:37:98:85:14:e7:70:9d:16:8c:
         35:b7:54:aa:93:71:da:1f:aa:ae:e4:4a:a4:b9:0c:69:22:75:
         46:ad:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----