Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/3e23c56a1323091b4db4347754156780dd52c7fe.roa
File:                     3e23c56a1323091b4db4347754156780dd52c7fe.roa (raw, json)
Hash identifier:          yreUu+59TDtU1/LT3KXNW+nJYR2uoYCk94jadWF0wys=
Subject key identifier:   65:52:B6:2C:5C:10:A1:D5:14:12:5E:35:26:CF:23:3F:05:84:94:C5
Certificate issuer:       /CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
Certificate serial:       02E13B
Authority key identifier: F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/3e23c56a1323091b4db4347754156780dd52c7fe.roa
Signing time:             Wed 24 Mar 2021 14:43:13 +0000
ROA not before:           Wed 24 Mar 2021 14:43:12 +0000
ROA not after:            Tue 24 Mar 2026 14:43:12 +0000
asID:                     265584
IP address blocks:        2801:c4:26:1::/64 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188731 (0x2e13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
        Validity
            Not Before: Mar 24 14:43:12 2021 GMT
            Not After : Mar 24 14:43:12 2026 GMT
        Subject: CN=3e23c56a1323091b4db4347754156780dd52c7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:56:53:4f:d6:b3:23:37:fc:be:fa:92:80:
                    04:3e:e1:59:35:37:92:05:5c:60:c0:b9:16:a0:e4:
                    c2:25:fd:ad:f4:62:45:fc:cf:7d:2d:82:0c:4d:55:
                    df:39:74:91:a2:40:e1:45:21:fd:80:b4:dd:0d:9d:
                    3c:bf:b7:48:6e:d5:7d:66:94:40:ba:0a:c0:fa:96:
                    4f:20:6d:9c:c7:9e:af:6a:e6:56:18:20:b9:14:d5:
                    df:b4:b8:23:11:b1:f2:f6:62:76:a5:d9:bc:26:5d:
                    3e:58:a6:51:ea:c0:2a:73:7d:78:e4:30:9b:c2:e9:
                    bc:78:0b:28:9a:a9:5e:6b:35:e2:a1:88:28:1b:3c:
                    93:28:a1:b9:42:d5:f2:ad:9e:00:84:09:b5:66:a8:
                    d1:f1:52:cf:5c:66:6e:ed:be:b4:86:9f:9b:b5:f7:
                    d4:f9:e0:c2:e9:a7:76:a3:79:70:c1:96:93:d0:fb:
                    58:98:b7:b2:f4:48:1b:07:95:94:82:e5:fb:32:15:
                    2c:29:56:70:87:c2:e3:21:79:d5:bb:3c:6d:5f:92:
                    76:82:63:d6:99:8d:e0:61:0a:58:61:84:0c:eb:0f:
                    71:29:39:23:ff:9b:48:5f:13:da:dc:68:f7:58:14:
                    14:13:7a:97:db:b6:46:01:9f:b7:e7:93:7e:60:75:
                    aa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:52:B6:2C:5C:10:A1:D5:14:12:5E:35:26:CF:23:3F:05:84:94:C5
            X509v3 Authority Key Identifier:
                keyid:F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/3e23c56a1323091b4db4347754156780dd52c7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:26:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         c6:e1:53:e2:56:47:c7:e3:b0:52:b0:bd:62:17:fa:57:d2:54:
         76:4f:56:05:1f:a0:b4:3e:5b:4b:0b:f4:37:08:18:00:9f:22:
         08:26:10:ba:6a:64:c1:34:78:94:40:a0:6c:fe:49:a7:e6:8b:
         3a:2c:68:60:d8:b3:b1:fc:06:cf:e7:ee:8e:df:77:ec:bd:d6:
         6e:82:d7:2f:81:28:31:28:ea:ba:9a:8b:f3:f1:19:c6:38:43:
         a1:b1:10:e7:d3:f2:11:d2:55:c1:ff:87:d0:7c:30:01:d6:b0:
         87:9b:af:0f:03:95:7e:88:c5:67:df:bc:02:ae:a2:4c:ae:1c:
         3a:1e:3f:0b:98:f9:c7:ab:54:e7:63:43:0f:94:2c:89:f9:29:
         ef:6b:38:60:13:97:fa:c3:7d:9c:b4:d5:98:f8:32:a6:80:19:
         69:79:ab:44:4c:bd:95:a6:4f:53:16:ed:19:c1:18:17:47:02:
         51:59:a0:ec:39:e6:af:a8:26:21:d4:e6:66:b4:4b:b6:8d:12:
         58:1a:51:67:99:61:5b:32:1c:bf:7b:74:e9:a3:2d:f4:28:3d:
         2a:3d:67:92:3e:4d:27:0a:94:81:28:f3:21:10:dd:42:e6:0f:
         fe:1f:76:a3:74:16:4e:da:64:5f:22:83:dc:83:a8:9a:0c:52:
         68:cd:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----