Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/996a4e20694bb22b326733514ed2c01c75cb33aa.roa
File:                     996a4e20694bb22b326733514ed2c01c75cb33aa.roa (raw, json)
Hash identifier:          5UPWqr0AJZlFHv4CBuZ8ONU32bkDP8tsL1zSZxv9lxE=
Subject key identifier:   38:6C:6D:A0:29:A9:6A:AE:EE:25:45:46:E7:B8:F6:24:FB:D1:7D:07
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E5054
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/996a4e20694bb22b326733514ed2c01c75cb33aa.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938068 (0xe5054)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=996a4e20694bb22b326733514ed2c01c75cb33aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:86:ae:8f:0c:f4:d4:3f:0d:22:c2:ff:82:
                    91:fc:b3:48:27:33:81:60:5f:a9:64:ab:9b:f6:88:
                    0e:76:28:c2:f6:24:45:54:1e:eb:42:a9:82:d1:a9:
                    16:b5:19:f7:7f:82:ed:10:72:04:5c:70:9b:64:2f:
                    3b:53:15:22:b6:7d:2a:d5:83:a6:14:37:98:cc:c8:
                    db:7f:54:7b:42:15:31:48:a3:f3:d4:cb:d2:8c:76:
                    e0:28:d2:b7:18:cc:cd:a5:38:3d:7a:75:11:64:d0:
                    a9:04:93:8d:b0:7f:6d:9c:1c:cf:cc:0b:ac:79:03:
                    b1:b3:ea:75:c1:78:02:cf:4e:7d:fa:b8:76:7a:02:
                    26:3a:e0:ec:8f:c3:9f:dc:a4:ae:1d:b8:42:26:f4:
                    3f:1f:e4:9b:72:3d:62:34:a8:9b:05:a4:d1:ac:2f:
                    e3:87:b6:a9:1d:59:79:e0:aa:ee:20:f4:9b:d4:1e:
                    2f:04:16:a3:c0:d7:00:ce:6c:5c:ba:d9:05:ad:c0:
                    fd:08:ff:25:52:af:8f:e7:f7:5c:d7:dd:e2:1f:76:
                    6b:18:b2:e6:90:6a:b4:7e:bc:b9:76:e8:ce:39:31:
                    85:7f:7e:9a:18:cb:ad:2e:9f:aa:a6:00:a9:2e:9d:
                    b7:e2:72:d3:24:99:69:3d:c9:3a:01:fa:6b:6a:53:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:6D:A0:29:A9:6A:AE:EE:25:45:46:E7:B8:F6:24:FB:D1:7D:07
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/996a4e20694bb22b326733514ed2c01c75cb33aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:b4:76:24:f7:5f:a1:f6:08:29:68:9a:c4:3a:b7:a0:57:0a:
         50:c9:d4:4f:a0:b7:41:43:29:58:9a:4c:fb:42:1e:73:1d:66:
         5d:a0:90:c6:59:bb:a5:4c:fd:8c:c9:d9:e1:cf:34:68:8c:6a:
         ef:ed:34:53:be:27:e0:66:6b:b4:5e:bb:2a:af:42:19:2d:5e:
         c4:f1:a5:64:f3:c4:c9:b6:35:f3:2e:de:7f:0a:08:5c:d0:b5:
         21:55:2e:49:ff:5b:8f:8d:d4:16:de:2d:15:d0:88:e6:5f:a5:
         66:b8:b6:2d:ee:2c:30:7f:ed:45:0d:a5:b2:a8:6b:6c:49:b4:
         93:75:3d:cb:c6:94:5e:41:59:66:c0:d4:b7:52:34:3a:f3:d1:
         83:43:c5:60:31:3b:28:cf:84:e5:75:47:d9:cd:3c:0e:c3:64:
         3d:cf:30:1b:fe:29:63:b3:97:7b:b4:ef:12:a3:28:f7:8d:63:
         83:23:be:f8:c8:55:b8:6b:38:f0:d7:a4:61:30:98:0a:e0:41:
         d8:e1:8d:3a:2f:57:04:b3:02:95:7a:76:86:97:ab:8b:7d:e3:
         78:a2:87:ac:fd:14:c5:2c:48:fd:6a:73:f6:68:f5:ed:61:af:
         61:0c:7b:7b:7f:d5:62:c1:78:7c:fd:ef:ee:a9:f2:9e:9d:2c:
         ff:36:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----