Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/11eeb197d73b47cfb9d0d6c425ce3e7941eb66ae.roa
File:                     11eeb197d73b47cfb9d0d6c425ce3e7941eb66ae.roa (raw, json)
Hash identifier:          l89IexI/jdc0ZbYUHI41Ur7Hbnt13CdYLqlt92NpCbY=
Subject key identifier:   5E:F2:BD:A6:84:BD:57:19:43:D3:24:73:7D:06:B7:0D:75:71:65:E3
Certificate issuer:       /CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
Certificate serial:       0CFD99
Authority key identifier: DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/11eeb197d73b47cfb9d0d6c425ce3e7941eb66ae.roa
Signing time:             Wed 24 Mar 2021 14:48:19 +0000
ROA not before:           Wed 24 Mar 2021 14:48:18 +0000
ROA not after:            Tue 24 Mar 2026 14:48:18 +0000
asID:                     264844
IP address blocks:        2803:8280::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851353 (0xcfd99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
        Validity
            Not Before: Mar 24 14:48:18 2021 GMT
            Not After : Mar 24 14:48:18 2026 GMT
        Subject: CN=11eeb197d73b47cfb9d0d6c425ce3e7941eb66ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:14:c1:2e:bf:67:28:45:2d:fa:1b:0c:9c:6a:
                    19:c1:60:e2:fb:ed:83:d5:6f:49:c7:21:b9:a5:79:
                    7c:47:3b:5d:73:05:8a:96:99:f4:9e:cb:16:e2:39:
                    03:88:18:f4:7f:12:3a:64:4b:77:45:e5:9d:3f:f8:
                    16:f1:3b:28:44:05:48:00:27:ae:8b:17:18:08:5e:
                    31:f7:85:f1:6b:4d:0c:c1:b8:45:74:d3:9e:38:4c:
                    3d:39:6c:76:e3:df:e6:8b:7e:09:27:f3:a3:1f:53:
                    1e:ca:ae:77:91:17:82:e4:7b:81:29:9d:06:9d:bb:
                    ef:76:c7:17:da:0b:e0:27:79:ae:09:0d:24:91:b5:
                    36:e6:a4:89:40:b3:95:12:c1:54:d8:da:90:da:d8:
                    0f:80:df:7d:ae:1c:3f:80:5e:72:82:b5:b0:5e:14:
                    2e:d3:33:17:20:ac:bb:a0:f7:df:11:6b:4f:ae:3e:
                    d4:20:c0:3c:9c:28:9d:9b:01:c1:f9:46:20:50:0f:
                    e5:91:3b:9f:31:00:3e:2c:e6:69:a6:13:50:15:e0:
                    a6:a4:de:f2:48:11:0d:bf:ed:66:86:3c:8d:0b:57:
                    e4:f0:b4:98:62:9d:72:67:d8:7b:3d:6c:91:63:e2:
                    c1:4c:89:92:13:b8:c2:51:7f:22:dd:1b:7a:1e:2e:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F2:BD:A6:84:BD:57:19:43:D3:24:73:7D:06:B7:0D:75:71:65:E3
            X509v3 Authority Key Identifier:
                keyid:DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/11eeb197d73b47cfb9d0d6c425ce3e7941eb66ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8280::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:04:3e:d2:52:ea:ba:05:89:f5:d5:60:5b:42:2f:a0:cc:
         04:0b:bd:cb:11:f1:2d:ec:d5:b0:b3:76:c7:63:21:23:ac:0c:
         ef:c8:8a:8f:65:39:bb:b7:5c:f5:e9:91:1f:de:eb:56:1d:c7:
         5f:58:ed:a8:fa:f5:8b:83:75:91:36:8d:54:99:44:1b:b8:1a:
         d7:a3:7b:30:87:8c:7b:48:84:e9:3a:75:1d:c0:24:ca:90:fb:
         fa:ae:34:14:f9:7f:72:51:3b:29:a3:44:09:77:5e:96:22:48:
         7e:d7:b8:cc:fb:38:e5:1a:47:0d:ff:81:fb:7c:29:64:fb:47:
         1b:9b:32:1a:fb:3c:29:e1:e0:a0:bf:37:df:0e:8e:bb:9b:6a:
         bf:b4:dc:d7:e9:dd:6b:dc:58:11:40:99:91:d4:84:3e:c7:78:
         d2:3e:2f:4c:86:68:9b:22:d1:f6:7d:59:60:08:7e:45:1e:61:
         54:e1:b5:98:5d:db:eb:0e:3e:c7:e0:de:66:f4:23:f1:0d:06:
         a8:2e:e0:1e:60:19:df:17:20:1a:b6:cf:41:66:07:79:c0:da:
         42:d8:4d:c5:01:9b:b8:ba:98:99:ac:22:2c:c3:b7:2e:77:be:
         28:6b:df:1b:8c:f4:f8:90:43:a3:e1:50:18:42:04:e8:89:76:
         25:3e:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----