Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/0865c2f09b78133d4f6a0eb2545d2a6626c20ad9.roa
File:                     0865c2f09b78133d4f6a0eb2545d2a6626c20ad9.roa (raw, json)
Hash identifier:          xUtF0Cb2jH+B+q+bcUs1Ch1onxgWmfANFvLSQyvsIvs=
Subject key identifier:   AD:C0:A4:84:5A:B0:C0:17:CA:21:43:10:0D:77:C7:66:7E:02:80:D9
Certificate issuer:       /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial:       0830
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/0865c2f09b78133d4f6a0eb2545d2a6626c20ad9.roa
Signing time:             Mon 08 Nov 2021 18:08:01 +0000
ROA not before:           Mon 08 Nov 2021 02:00:00 +0000
ROA not after:            Wed 08 Nov 2023 02:00:00 +0000
asID:                     265504
IP address blocks:        2806:21f::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
        Validity
            Not Before: Nov  8 02:00:00 2021 GMT
            Not After : Nov  8 02:00:00 2023 GMT
        Subject: CN=0865c2f09b78133d4f6a0eb2545d2a6626c20ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b4:4a:e9:ca:87:27:63:e3:55:29:08:84:8b:
                    39:56:19:75:f2:2c:a5:5e:84:cc:b5:09:b9:b8:d6:
                    c5:36:58:d5:b8:83:cf:76:74:04:e8:7b:13:4b:f3:
                    33:53:a8:2d:35:22:95:9b:9e:22:b2:1f:b7:c7:6f:
                    d1:28:ea:c0:f6:4a:e1:52:dc:a9:ed:49:55:e7:54:
                    31:27:96:9b:74:e2:63:78:d6:a3:05:9b:90:99:b7:
                    74:0f:39:fe:91:51:ae:a9:2b:d0:a2:25:fe:cc:db:
                    ce:ee:b7:37:05:82:0c:80:33:4b:b8:81:28:0b:f3:
                    e3:a6:bc:44:10:fb:b0:fc:e6:cd:d6:39:d8:74:bf:
                    40:5a:08:ec:19:f5:ce:ab:f3:ec:05:db:4d:51:4e:
                    56:47:e6:e7:14:7d:6f:b2:b3:2f:e8:ef:1c:a2:1e:
                    b2:f1:97:bc:48:c7:e9:dd:f1:38:91:06:f5:07:f0:
                    28:88:e9:62:8e:45:9a:c8:96:30:54:d0:16:c2:7e:
                    2e:b5:10:99:9a:a8:a0:30:e2:8c:77:59:56:ad:37:
                    fc:dc:a3:ac:fb:18:49:0e:1b:18:ec:b5:a5:45:c8:
                    9a:72:e9:c2:e0:cd:58:d6:02:32:e1:0d:2e:7f:b9:
                    10:ef:fc:ec:09:5b:ad:16:0c:6c:dc:aa:da:1d:4a:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:A4:84:5A:B0:C0:17:CA:21:43:10:0D:77:C7:66:7E:02:80:D9
            X509v3 Authority Key Identifier:
                keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/0865c2f09b78133d4f6a0eb2545d2a6626c20ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21f::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f7:3a:ae:05:41:e6:0c:7e:28:8c:22:f9:1c:78:32:13:25:
         a3:26:01:fc:47:6f:50:c7:b9:17:ca:04:73:13:bd:e8:70:04:
         59:4d:0f:95:6d:b4:dc:f2:e2:97:88:06:72:07:d0:3d:2c:ce:
         2c:60:b3:73:49:b3:2c:5e:dc:e6:2b:94:c5:76:23:57:d6:16:
         79:b4:a9:7a:70:ab:ab:ac:cd:b3:41:0d:2d:47:91:ac:0b:6b:
         5f:75:a5:f2:83:4b:6f:6b:a0:51:e5:d4:1c:15:8e:4d:15:27:
         e7:6e:e9:64:d2:d6:2c:61:22:4c:45:55:c7:ae:12:64:98:9a:
         35:25:91:23:76:1d:40:1c:77:90:12:84:f6:19:0d:17:f5:39:
         68:98:10:34:7e:57:08:f2:83:33:00:4b:a4:1a:e3:5b:77:67:
         83:ff:ed:8a:d3:aa:09:5d:0a:17:b5:78:4d:87:ce:ca:19:d2:
         90:0a:9f:2c:f8:84:07:88:c7:75:2b:45:fe:c4:6a:e8:e9:8d:
         04:5b:db:bc:50:a7:ce:94:91:6e:13:13:33:ab:24:9b:f8:4d:
         ce:28:f6:94:31:71:f6:fe:a9:d9:fa:e1:f3:2c:39:8f:76:bc:
         b4:90:d1:4b:5a:97:95:3d:ad:5d:5c:a9:5f:00:51:85:20:0d:
         a7:0d:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----