Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/1329e5bd4e322e1d69fe2fcdb482eb0aa328aa5a.roa
File:                     1329e5bd4e322e1d69fe2fcdb482eb0aa328aa5a.roa (raw, json)
Hash identifier:          v0AlHsA+UwZCDtJC77ijZNgt4Mg27fq6z1zLX09uoko=
Subject key identifier:   84:CD:69:76:D6:C5:32:D6:97:73:06:E6:99:57:5A:EE:B3:D4:6B:45
Certificate issuer:       /CN=d573448457c811688599e168f723018473dc9d89
Certificate serial:       035651
Authority key identifier: B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/1329e5bd4e322e1d69fe2fcdb482eb0aa328aa5a.roa
Signing time:             Thu 21 Apr 2022 20:50:27 +0000
ROA not before:           Thu 21 Apr 2022 03:00:00 +0000
ROA not after:            Sun 21 Apr 2024 03:00:00 +0000
asID:                     64136
IP address blocks:        2803:9910:c000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218705 (0x35651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d573448457c811688599e168f723018473dc9d89
        Validity
            Not Before: Apr 21 03:00:00 2022 GMT
            Not After : Apr 21 03:00:00 2024 GMT
        Subject: CN=1329e5bd4e322e1d69fe2fcdb482eb0aa328aa5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:00:69:c6:eb:45:9a:34:b3:fe:e0:1c:46:
                    8a:00:5e:dc:3f:96:ca:4e:b4:f0:90:31:62:33:c2:
                    9c:e7:7b:af:58:b9:c6:04:e9:63:92:02:9f:3d:42:
                    d5:d6:82:34:7f:7d:ef:15:7f:69:34:1f:3b:0e:90:
                    7b:f8:26:f7:36:60:dc:9e:3b:5f:9b:b1:91:22:d2:
                    a4:ab:3b:63:9e:11:f4:f4:33:a6:c9:fb:91:ea:4a:
                    9e:99:1a:05:aa:4e:63:cc:17:87:f6:49:49:66:47:
                    31:60:a5:8f:48:87:34:86:75:1a:98:27:26:33:e9:
                    63:3e:b9:82:b6:14:fd:51:0d:0b:fb:8b:68:ec:0a:
                    8a:86:a0:c8:78:b6:bb:86:1e:46:1b:f6:83:d7:4d:
                    9a:ef:29:3f:fe:ac:1c:5b:f7:8b:fe:e9:d3:a8:fc:
                    b3:01:9d:16:66:85:18:8b:d6:b6:a2:40:fe:f8:be:
                    4f:45:fc:63:29:dc:22:92:ad:82:16:95:a8:e1:af:
                    09:56:f9:64:47:13:ac:7d:52:e9:29:e4:41:84:8f:
                    56:34:29:5e:52:63:5a:f0:2d:dd:26:d0:fa:43:bd:
                    53:c8:60:60:47:3a:48:db:86:fb:86:e5:d0:9a:53:
                    c8:44:37:52:4c:15:4c:a7:6f:da:1b:43:20:ed:1e:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:69:76:D6:C5:32:D6:97:73:06:E6:99:57:5A:EE:B3:D4:6B:45
            X509v3 Authority Key Identifier:
                keyid:B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/1329e5bd4e322e1d69fe2fcdb482eb0aa328aa5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/d573448457c811688599e168f723018473dc9d89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:84:10:af:14:e7:fa:2d:59:65:45:66:13:52:94:2b:75:
         49:91:11:b6:6d:65:c2:6b:00:eb:dd:1e:8e:34:4e:6c:b9:1e:
         c3:ae:61:00:4a:e2:ad:37:00:81:36:6d:6a:cb:c7:8d:30:dd:
         1c:b2:89:82:a8:7c:09:76:3d:b9:bc:5f:77:63:18:10:82:dd:
         15:41:3a:92:4e:48:e3:3b:7d:be:91:7c:e0:3c:17:53:c6:87:
         88:20:16:ac:c4:b3:57:48:27:18:a3:4e:10:de:32:8e:93:7c:
         28:7e:ae:bd:7b:c2:ae:9b:e7:d5:07:0f:f3:b0:84:f2:1a:fc:
         55:58:de:48:c7:23:60:6e:83:f3:38:9d:e2:f2:23:88:46:87:
         cb:31:72:a7:3f:ce:2e:36:53:2d:c3:98:ce:8e:d7:20:29:db:
         be:50:60:cc:f0:4c:ac:12:cc:09:1c:53:b7:76:a2:16:7c:bd:
         fe:bc:b5:1f:37:1f:e0:3b:e1:3f:8d:3f:7f:35:21:79:35:8f:
         8d:ed:86:2c:d0:bc:19:57:69:bd:be:4d:ba:1e:a2:e5:e6:db:
         38:33:46:8f:0c:44:76:30:f3:1a:11:7d:a2:1f:b6:10:7c:17:
         98:62:5a:9b:25:56:5d:25:b3:c8:26:0f:a7:2f:cf:a2:3c:e0:
         f4:3f:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----