Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/34f6f697eb0b1eb84f7b8c596189422adfdc11eb.roa
File:                     34f6f697eb0b1eb84f7b8c596189422adfdc11eb.roa (raw, json)
Hash identifier:          cRHgySVHe8dRDX6dQQuU7RgZJ3YPm78BUt6KX0J3QXE=
Subject key identifier:   8B:8A:F9:8A:51:D5:29:4E:F1:37:56:5F:D4:63:D4:8B:58:49:38:DE
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       0E7E86
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/34f6f697eb0b1eb84f7b8c596189422adfdc11eb.roa
Signing time:             Mon 19 Apr 2021 20:48:20 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Sun 19 Apr 2026 03:00:00 +0000
asID:                     10620
IP address blocks:        2800:485::/32 maxlen: 48
                          2800:484::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949894 (0xe7e86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 19 03:00:00 2026 GMT
        Subject: CN=34f6f697eb0b1eb84f7b8c596189422adfdc11eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:d8:23:df:a7:96:ad:d9:bc:fc:22:7e:10:
                    26:bc:3d:8c:93:50:ab:87:bf:22:6c:41:46:c0:68:
                    ec:28:39:48:d1:e4:33:89:c7:92:20:7d:7d:39:8c:
                    b6:47:37:60:d2:48:47:dd:5f:dc:06:3e:83:a6:ad:
                    97:bf:09:07:ba:0f:ef:a0:cf:b5:ba:4e:9a:4e:cf:
                    08:cf:33:3b:95:82:ae:0e:2d:45:3e:e5:66:8c:28:
                    0b:f2:99:a0:ac:b8:45:08:4d:f5:8c:7f:57:03:e3:
                    b6:a9:63:bd:37:fc:5f:db:6b:ba:4c:8c:00:24:05:
                    89:9b:91:b4:25:44:e1:0d:8b:23:db:a7:25:21:de:
                    ee:e3:17:7d:92:09:d1:5f:45:2f:e3:59:b5:6b:fb:
                    eb:36:91:d4:7f:00:c1:2d:8d:e9:98:99:6e:b4:b2:
                    b7:e7:8d:00:21:30:b3:45:57:f8:bf:ab:fe:af:45:
                    6c:13:66:7a:94:7a:a7:c7:22:eb:98:ab:da:8e:82:
                    70:1a:a1:9e:e4:79:43:ab:39:ff:ce:b4:c8:e1:cb:
                    ae:ec:bf:19:0a:47:80:06:ce:d4:b9:ba:35:28:19:
                    79:13:c6:f9:97:d1:7a:92:cc:40:10:c4:3e:e4:12:
                    8a:ee:c4:84:e0:d5:df:85:ec:a8:7a:bf:c1:96:76:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8A:F9:8A:51:D5:29:4E:F1:37:56:5F:D4:63:D4:8B:58:49:38:DE
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/34f6f697eb0b1eb84f7b8c596189422adfdc11eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:484::/31

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:37:62:02:78:23:4c:4d:61:2d:40:55:a6:6e:e9:23:02:
         d8:3d:a2:82:38:6d:7a:ec:af:7e:8d:53:79:35:49:81:03:c5:
         6d:b8:73:83:ef:b8:d6:9c:9d:b5:3d:7c:df:e2:a5:3f:a5:92:
         42:e7:d6:83:47:17:aa:a4:eb:22:22:07:03:7b:28:77:f0:24:
         18:fc:b6:d8:8c:e0:55:83:9c:11:dd:90:ed:39:cf:cc:39:5c:
         36:9b:06:64:00:d5:4b:d6:c6:09:f8:5c:d1:1b:a7:70:7c:60:
         8a:b7:75:0c:e4:09:5b:ca:97:9f:d2:c3:d7:9e:cd:02:f2:03:
         d2:d7:f4:d9:10:80:ab:45:0a:1f:60:3b:97:20:64:4e:f6:35:
         09:47:9e:e5:9f:22:b1:18:35:c5:3d:70:60:6b:aa:d7:90:0f:
         29:20:19:7f:ba:72:77:3a:45:73:b5:08:17:98:b9:30:2c:61:
         c1:ef:0b:a1:d3:d6:ea:28:cb:17:79:9b:85:fd:e7:7d:46:1a:
         59:30:af:7d:af:bf:3a:f9:79:e7:3c:28:21:d5:d7:b7:d9:92:
         9b:1c:41:9f:97:e3:2d:11:12:13:0c:fd:a1:7e:dd:0a:eb:57:
         48:c5:98:b4:ad:c4:5e:14:26:0b:57:c9:6a:bd:82:d2:46:52:
         d8:d9:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----