Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/497e3322e6a8c0c5c9599fb9df52cfc1be78a6f1.roa
File:                     497e3322e6a8c0c5c9599fb9df52cfc1be78a6f1.roa (raw, json)
Hash identifier:          D3s42lqvESaPCMoNEmoZb5WAjCpEMCUnZgBBTc7hnUM=
Subject key identifier:   8B:06:41:F3:60:36:CA:9D:DF:4A:3C:54:DF:90:04:21:28:65:AC:D8
Certificate issuer:       /CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
Certificate serial:       17E659
Authority key identifier: 22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/497e3322e6a8c0c5c9599fb9df52cfc1be78a6f1.roa
Signing time:             Tue 14 Feb 2023 13:50:47 +0000
ROA not before:           Sun 12 Feb 2023 13:42:57 +0000
ROA not after:            Mon 14 Feb 2028 13:42:57 +0000
asID:                     270051
IP address blocks:        2803:4de0:1::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566297 (0x17e659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
        Validity
            Not Before: Feb 12 13:42:57 2023 GMT
            Not After : Feb 14 13:42:57 2028 GMT
        Subject: CN=497e3322e6a8c0c5c9599fb9df52cfc1be78a6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:e6:41:db:db:8f:2f:35:08:80:62:bc:3e:
                    cf:31:a1:7a:c9:72:1d:8d:ab:98:5b:96:fb:ca:2b:
                    5f:37:cd:45:a0:de:09:34:ec:b3:29:f5:dd:dd:40:
                    88:36:7d:52:52:00:19:d6:7f:a6:95:51:dd:b7:1c:
                    d3:59:7f:cf:c8:2b:5d:09:d5:e8:47:4c:f9:0b:73:
                    08:1a:39:8b:b9:a6:e4:3e:ca:0a:2a:5c:e1:90:2a:
                    4a:b4:0f:54:7e:fb:1e:40:ac:a5:1d:91:70:c2:e2:
                    1b:1f:12:35:c5:40:99:d3:66:01:ef:52:55:51:71:
                    17:16:91:67:a3:5f:ee:61:77:a5:7e:a3:de:ca:4f:
                    ac:25:32:b1:55:c6:98:c9:b6:c6:00:06:b7:0e:65:
                    0b:75:ae:7c:33:76:b8:a1:d9:a5:aa:a1:c5:88:fb:
                    2d:28:c4:66:1c:73:d8:3f:34:a5:72:ce:3d:bf:af:
                    8c:d2:9d:32:c8:32:42:dc:9d:8e:24:ed:86:ee:cc:
                    78:40:e6:3a:19:5f:b8:96:d4:84:ac:8b:0c:97:0c:
                    70:33:38:22:bc:4d:b1:1b:d9:8a:a6:7b:52:21:19:
                    70:21:eb:62:8e:68:04:46:37:21:a0:6a:09:ae:97:
                    b5:44:95:7c:3b:7b:66:1f:09:6e:8d:c5:97:ab:66:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:06:41:F3:60:36:CA:9D:DF:4A:3C:54:DF:90:04:21:28:65:AC:D8
            X509v3 Authority Key Identifier:
                keyid:22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/497e3322e6a8c0c5c9599fb9df52cfc1be78a6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4de0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:69:eb:79:f4:d8:4a:b1:d2:83:0d:12:86:01:32:55:c4:
         15:a0:f8:75:6d:c9:fd:6e:37:da:be:5e:b3:45:5b:01:21:ed:
         bd:6a:2f:f7:3b:08:59:7d:73:21:41:91:c9:0b:f2:b3:ad:db:
         50:bc:15:25:c2:01:be:dd:15:db:e7:02:92:da:b5:4d:06:44:
         59:9a:21:d9:65:a2:c4:ad:a4:55:c1:da:62:70:e6:f0:d0:03:
         8e:67:18:3a:25:42:32:59:76:cf:11:8e:fd:f8:f0:f3:70:80:
         f7:f5:da:65:45:a1:51:ab:ec:c1:80:5c:df:22:02:31:9b:d6:
         0d:00:7d:78:7e:c9:60:8e:87:53:a5:c6:5e:de:48:46:66:18:
         56:3e:ed:39:8e:58:40:e4:1d:78:01:a7:d7:6d:a8:3a:bb:e7:
         06:37:de:3f:6b:cd:05:43:ff:af:44:6b:5a:17:a3:f9:c2:8c:
         09:c1:38:2f:ad:ae:61:30:ed:3b:9d:99:0b:f1:39:5e:56:f3:
         df:13:03:42:4a:bd:36:a6:05:e6:89:81:9f:8f:1e:4f:49:ab:
         37:86:85:e5:13:0a:b3:cf:ca:8f:0e:b0:a6:a4:b7:97:ab:35:
         3f:06:3b:c0:5a:44:02:49:b0:77:d9:d0:dd:58:26:c9:ed:7e:
         6e:fd:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----