Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/774defaa21ad9aed2657cc42c5b31c9678157195.roa
File:                     774defaa21ad9aed2657cc42c5b31c9678157195.roa (raw, json)
Hash identifier:          zJojUiz7//hHV8sFD56cm3ZMFkEoaygnZpnOpwTv5Io=
Subject key identifier:   21:C1:C1:6C:4B:7E:8B:D0:BF:CA:22:36:E1:94:36:DB:5D:57:32:EF
Certificate issuer:       /CN=0a72f3a0cb28ade4042b9041eaf1e90253361ebc
Certificate serial:       174843
Authority key identifier: 4F:AC:E6:33:FE:C2:99:0C:34:EB:7E:A8:71:AC:33:22:94:B8:0E:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/774defaa21ad9aed2657cc42c5b31c9678157195.roa
Signing time:             Tue 28 Jun 2022 22:24:51 +0000
ROA not before:           Tue 28 Jun 2022 03:00:00 +0000
ROA not after:            Fri 28 Jun 2024 03:00:00 +0000
asID:                     265840
IP address blocks:        2801:1c:3002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525827 (0x174843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a72f3a0cb28ade4042b9041eaf1e90253361ebc
        Validity
            Not Before: Jun 28 03:00:00 2022 GMT
            Not After : Jun 28 03:00:00 2024 GMT
        Subject: CN=774defaa21ad9aed2657cc42c5b31c9678157195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:96:07:3a:ef:e9:a1:64:45:6a:2a:48:17:
                    1f:d4:c1:09:70:b9:f4:84:14:f8:5c:d3:20:da:e0:
                    04:e6:8c:23:41:2a:db:35:d7:c3:5e:25:90:fb:37:
                    81:e9:34:30:45:7b:af:a9:74:29:44:d2:62:d5:29:
                    e6:1e:00:55:c3:ae:7f:d1:1f:fc:a7:1f:bf:8f:06:
                    43:c0:56:b6:e8:38:5d:ee:d5:50:4c:46:50:d4:c4:
                    cc:26:3a:28:a3:95:c2:55:98:90:df:f6:03:f0:4f:
                    84:56:56:29:16:2e:79:a3:12:79:1d:58:81:b1:01:
                    73:8f:dd:14:db:e1:4d:d0:cd:cc:83:d7:3d:ae:53:
                    a6:01:bc:27:9f:31:91:7e:6f:4b:54:62:c5:de:fb:
                    7b:7e:4d:71:4d:6f:e8:4c:27:f7:91:c5:40:42:98:
                    c7:40:e6:73:84:dc:ea:0a:47:53:0f:b5:25:2c:2c:
                    46:06:19:43:b1:1d:a6:be:fe:80:20:19:4a:dd:06:
                    fc:9c:50:df:94:40:21:88:47:c9:b7:de:49:1f:ae:
                    33:84:63:8c:a3:e9:5c:c0:75:08:6f:9a:9b:fb:c8:
                    87:8b:a9:a7:ce:84:18:33:b4:35:49:e8:d7:e6:8a:
                    6b:7e:1b:03:f0:11:62:b2:d8:a3:fa:76:af:3a:64:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C1:C1:6C:4B:7E:8B:D0:BF:CA:22:36:E1:94:36:DB:5D:57:32:EF
            X509v3 Authority Key Identifier:
                keyid:4F:AC:E6:33:FE:C2:99:0C:34:EB:7E:A8:71:AC:33:22:94:B8:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/774defaa21ad9aed2657cc42c5b31c9678157195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/0a72f3a0cb28ade4042b9041eaf1e90253361ebc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:98:07:bc:f6:ae:f8:df:cb:92:01:1b:bf:f5:c9:7c:48:32:
         0e:aa:05:0f:a9:31:d2:c2:33:8f:01:f2:7d:c9:58:63:15:4b:
         e1:74:21:c4:c5:95:89:36:07:2e:04:3f:9c:7d:03:b0:7c:84:
         1d:6c:87:82:59:29:54:a9:da:91:ae:27:05:65:58:a2:82:56:
         01:e8:dd:03:91:0f:0d:18:f6:e9:bb:4d:09:ce:56:7d:8d:f2:
         5a:3d:00:2b:36:1a:fd:62:f8:fe:17:f1:5c:a0:74:32:1f:9d:
         d9:30:64:06:2a:e2:32:5c:a8:99:15:47:74:f1:83:ad:21:57:
         95:7d:39:28:a6:a0:fd:53:d6:cb:1b:c6:a2:97:b1:d2:35:c4:
         26:f8:b5:56:f7:bb:04:a6:48:8e:5a:19:c5:4f:08:51:01:28:
         6d:c3:54:84:2e:db:3c:49:0c:6a:80:e6:6c:e2:00:da:7e:d0:
         68:45:6a:b6:0b:dd:63:2a:82:2a:9a:f2:b6:f8:ca:5f:c0:1f:
         93:6d:6c:5c:ee:8a:1f:0f:35:69:de:aa:7c:a6:61:78:c9:73:
         39:0d:00:8a:e2:97:bc:fa:26:d5:90:ae:4a:21:40:5c:d3:26:
         bc:de:3e:5b:1c:53:c9:71:76:12:f0:52:a0:8f:f5:8b:95:aa:
         a7:ce:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----