Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b5c7e63d253f9a810ad73e0bf61ee0e07001e5b2.roa
File:                     b5c7e63d253f9a810ad73e0bf61ee0e07001e5b2.roa (raw, json)
Hash identifier:          e9xAA9MDQIPqy4/evkiMMMA9upvOP3tX38zAzwZxRtA=
Subject key identifier:   5B:5F:3F:0F:56:5E:9E:F7:14:06:DC:3A:48:27:EB:D9:67:A8:AE:16
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E3BC0
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b5c7e63d253f9a810ad73e0bf61ee0e07001e5b2.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932800 (0xe3bc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=b5c7e63d253f9a810ad73e0bf61ee0e07001e5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:12:4b:08:39:d5:4f:38:f5:15:27:b9:fb:
                    6b:7d:29:a9:53:26:a3:4d:0e:7e:c5:88:39:2c:c9:
                    25:01:78:44:89:b9:6d:dc:db:5b:91:c2:bb:84:c8:
                    6e:be:58:10:5c:bb:16:fd:7f:ae:50:7d:a7:03:68:
                    2a:54:c4:f0:08:a3:23:6c:11:16:e8:5d:f7:b0:0e:
                    1f:85:72:a0:a4:b0:3c:23:a2:fc:ea:64:5a:88:a2:
                    87:59:9d:56:36:f7:87:02:fc:1e:60:b3:f9:a2:5c:
                    0d:aa:52:d4:0a:c6:d5:42:5a:e3:56:c7:da:5d:bb:
                    bd:a4:d3:0b:0a:42:ed:44:99:2a:8d:4b:2c:20:3f:
                    55:27:cb:e6:d3:27:0c:37:c0:ad:b0:36:db:97:5d:
                    21:f7:9a:40:d3:15:1d:18:82:a5:ae:64:fb:68:b8:
                    f0:54:0a:1a:d0:25:e1:ab:b2:44:74:c6:a7:88:13:
                    4d:8d:f1:36:c6:03:08:e1:34:bf:44:ec:f4:4e:3a:
                    9f:8e:a5:4a:5a:ac:c7:e0:9a:8a:59:22:d4:d1:02:
                    29:8f:fb:cf:c2:04:3b:b8:53:88:30:ba:af:a9:db:
                    7f:b4:4b:58:92:c2:c3:37:09:e8:e4:1a:76:24:cc:
                    eb:bd:ec:6e:79:a2:cc:b8:ef:fa:61:dc:fa:69:e3:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:3F:0F:56:5E:9E:F7:14:06:DC:3A:48:27:EB:D9:67:A8:AE:16
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/b5c7e63d253f9a810ad73e0bf61ee0e07001e5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:a4:ca:50:ab:26:62:79:d6:7a:90:d1:cb:79:ae:98:1a:51:
         93:db:48:3e:9c:88:86:15:df:14:95:34:e7:6c:66:cb:c2:39:
         e0:b3:47:e6:9c:be:2d:de:83:8e:3f:65:94:f0:6d:d9:d2:cb:
         e6:75:ca:16:26:7e:86:36:9b:46:d8:f1:47:f3:93:28:31:45:
         69:d1:d3:d9:26:64:07:54:03:46:b7:1b:a2:f4:50:79:7f:20:
         ab:e1:cc:a7:24:d6:71:15:98:94:1c:a8:dd:32:cd:7d:bf:40:
         19:6d:7a:fa:86:51:d7:c6:c9:20:1a:22:09:18:10:cc:96:e5:
         a6:74:66:af:c2:f5:3c:4e:76:5f:74:48:f6:ec:ae:34:72:e7:
         e4:85:07:b9:38:59:a9:5b:45:44:7b:3f:69:a7:db:80:ae:1e:
         3d:c7:5f:77:07:0a:61:79:da:7e:ad:fc:48:b1:9d:e2:9e:82:
         e5:7d:59:ae:7f:6d:ac:dc:0e:16:42:5a:ee:8e:c6:37:77:77:
         6c:ac:1e:c1:a4:b1:ff:64:a4:5f:18:64:02:a0:13:40:75:d5:
         1a:69:c3:a8:6a:04:e2:0f:31:41:b9:5a:3c:01:5d:cc:d9:22:
         8c:dc:77:d4:d3:c0:0d:1b:3d:19:45:88:20:4b:bd:3d:a2:4b:
         4e:cd:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----