Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/b41dce2361829ddb4d0847f64b1c96581700bc7b.roa
File:                     b41dce2361829ddb4d0847f64b1c96581700bc7b.roa (raw, json)
Hash identifier:          pMP1X4OdSQ0Y/jLO3kWDqCGPaCy0YD4ZjuuBQA6D22g=
Subject key identifier:   0F:8E:45:21:89:64:EC:4C:02:8A:7B:C3:9A:F9:CF:B4:31:0F:61:A1
Certificate issuer:       /CN=0e18b91516586380fb9819f57c1b133f3fdbccd0
Certificate serial:       0DC097
Authority key identifier: 7F:E9:89:4D:CE:99:B6:CD:11:41:6D:97:7A:6B:F4:F9:84:75:CF:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e18b91516586380fb9819f57c1b133f3fdbccd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/b41dce2361829ddb4d0847f64b1c96581700bc7b.roa
Signing time:             Wed 24 Mar 2021 14:31:27 +0000
ROA not before:           Wed 24 Mar 2021 14:31:27 +0000
ROA not after:            Tue 24 Mar 2026 14:31:27 +0000
asID:                     264678
IP address blocks:        2803:dd40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901271 (0xdc097)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e18b91516586380fb9819f57c1b133f3fdbccd0
        Validity
            Not Before: Mar 24 14:31:27 2021 GMT
            Not After : Mar 24 14:31:27 2026 GMT
        Subject: CN=b41dce2361829ddb4d0847f64b1c96581700bc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:2e:13:a6:70:04:e8:e3:e9:e1:a2:be:5b:
                    a4:da:1a:cd:6f:fa:ad:53:77:aa:5f:78:0f:ca:0a:
                    10:79:24:63:6a:61:3e:c9:c4:09:8b:8b:1e:16:4d:
                    7f:5f:3d:39:a7:6e:dc:e4:bb:4c:12:3d:57:fc:ff:
                    ce:a3:a3:af:a4:9c:b9:fc:2a:f3:1f:17:36:bd:96:
                    95:d4:8b:a5:1d:20:e7:d5:73:d4:6b:77:de:5e:83:
                    3c:65:29:b2:84:7c:d5:8c:d5:08:4a:c6:48:12:f8:
                    a8:43:36:74:a6:7f:09:32:5e:3a:9f:d1:30:3e:f8:
                    19:b1:9a:9f:39:d3:fc:3f:ca:e7:73:1a:d3:77:cd:
                    51:dd:18:cf:f1:b7:6a:e0:c8:4b:92:9f:87:e5:47:
                    3b:6e:17:8e:57:f2:8e:a8:ad:ce:f7:f8:64:ca:d0:
                    8b:e7:3a:49:65:86:32:bc:ec:7a:ba:78:a7:21:b5:
                    17:ea:24:c5:1c:7e:83:5a:ab:97:53:71:bc:c1:2e:
                    5e:9d:1e:22:f2:b5:9c:3b:f9:d7:f7:6c:a0:30:44:
                    e2:1f:04:04:9b:b8:08:f8:80:30:d3:2e:c8:32:f9:
                    6a:6b:39:84:af:e5:6e:ab:b3:67:d2:c2:c8:eb:05:
                    c8:3e:4f:78:42:53:51:3b:dd:c6:cc:bd:af:99:24:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8E:45:21:89:64:EC:4C:02:8A:7B:C3:9A:F9:CF:B4:31:0F:61:A1
            X509v3 Authority Key Identifier:
                keyid:7F:E9:89:4D:CE:99:B6:CD:11:41:6D:97:7A:6B:F4:F9:84:75:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e18b91516586380fb9819f57c1b133f3fdbccd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/b41dce2361829ddb4d0847f64b1c96581700bc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/0e18b91516586380fb9819f57c1b133f3fdbccd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:42:c2:30:2a:9e:f4:7b:8c:76:04:fe:14:0b:b6:b7:22:
         12:84:18:d1:00:0a:30:51:94:7d:27:f2:f3:94:ab:95:74:7a:
         23:64:62:9a:80:80:9d:8f:01:ed:9c:49:8f:65:7f:6b:5c:4b:
         e7:26:c8:f1:c5:91:9d:4b:86:ac:8b:ac:fd:18:b6:62:a9:6d:
         98:27:fe:6c:27:5d:52:b2:be:94:92:4e:13:cd:d1:6a:36:57:
         e3:e0:24:7d:b4:68:b8:a9:84:b6:a8:6c:b6:ea:79:42:3c:15:
         de:85:d3:7d:50:7a:04:bd:5c:4a:a0:4a:fa:14:24:9c:ce:ce:
         92:99:cf:ab:17:ca:ee:38:02:02:70:88:f0:59:5c:7f:04:e3:
         5a:7b:ed:46:02:28:3b:62:1c:4a:38:a3:d5:4f:ee:06:67:56:
         80:e2:fe:13:84:1c:ac:37:7a:3f:c1:3d:f2:96:13:3f:91:45:
         66:55:69:69:b4:b7:fc:9f:6b:f3:be:32:64:4d:f7:40:c2:6f:
         94:11:7c:78:6c:96:67:58:7f:1b:c6:11:57:4c:b4:86:45:ff:
         bb:d5:a2:c5:12:af:2b:80:4d:d1:ae:24:d3:03:66:73:c4:95:
         87:0b:86:d5:12:af:2b:f9:34:97:4c:5a:13:65:8d:7f:93:65:
         d7:64:45:6a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDcCXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBl
MThiOTE1MTY1ODYzODBmYjk4MTlmNTdjMWIxMzNmM2ZkYmNjZDAwHhcNMjEwMzI0
MTQzMTI3WhcNMjYwMzI0MTQzMTI3WjAzMTEwLwYDVQQDEyhiNDFkY2UyMzYxODI5
ZGRiNGQwODQ3ZjY0YjFjOTY1ODE3MDBiYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApfguE6ZwBOjj6eGivluk2hrNb/qtU3eqX3gPygoQeSRjamE+
ycQJi4seFk1/Xz05p27c5LtMEj1X/P/Oo6OvpJy5/CrzHxc2vZaV1IulHSDn1XPU
a3feXoM8ZSmyhHzVjNUISsZIEvioQzZ0pn8JMl46n9EwPvgZsZqfOdP8P8rncxrT
d81R3RjP8bdq4MhLkp+H5Uc7bheOV/KOqK3O9/hkytCL5zpJZYYyvOx6uninIbUX
6iTFHH6DWquXU3G8wS5enR4i8rWcO/nX92ygMETiHwQEm7gI+IAw0y7IMvlqazmE
r+Vuq7Nn0sLI6wXIPk94QlNRO93GzL2vmSR+wQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFA+ORSGJZOxMAop7w5r5z7QxD2GhMB8GA1UdIwQYMBaAFH/piU3OmbbNEUFt
l3pr9PmEdc98MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGUxOGI5
MTUxNjU4NjM4MGZiOTgxOWY1N2MxYjEzM2YzZmRiY2NkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY1OWU5NjItMzZhMC00NDk4LWIxZWMtZmQ3NDE5
ODkzZGM2L2I0MWRjZTIzNjE4MjlkZGI0ZDA4NDdmNjRiMWM5NjU4MTcwMGJjN2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjU5ZTk2Mi0zNmEwLTQ0OTgtYjFlYy1mZDc0
MTk4OTNkYzYvMGUxOGI5MTUxNjU4NjM4MGZiOTgxOWY1N2MxYjEzM2YzZmRiY2Nk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD3UAwDQYJKoZIhvcNAQELBQADggEBAEefQsIwKp70e4x2
BP4UC7a3IhKEGNEACjBRlH0n8vOUq5V0eiNkYpqAgJ2PAe2cSY9lf2tcS+cmyPHF
kZ1LhqyLrP0YtmKpbZgn/mwnXVKyvpSSThPN0Wo2V+PgJH20aLiphLaobLbqeUI8
Fd6F031QegS9XEqgSvoUJJzOzpKZz6sXyu44AgJwiPBZXH8E41p77UYCKDtiHEo4
o9VP7gZnVoDi/hOEHKw3ej/BPfKWEz+RRWZVaWm0t/yfa/O+MmRN90DCb5QRfHhs
lmdYfxvGEVdMtIZF/7vVosUSryuATdGuJNMDZnPElYcLhtUSryv5NJdMWhNljX+T
ZddkRWo=
-----END CERTIFICATE-----