Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f99a663c25387dc5821a742f7c703d05b71a99f5.roa
File:                     f99a663c25387dc5821a742f7c703d05b71a99f5.roa (raw, json)
Hash identifier:          0Ott0IB8TiPwFHFN9Wt/8ZO+StWvKf/t2wR7hxHGqAY=
Subject key identifier:   66:E8:F0:22:60:F8:FD:90:4F:18:4D:11:BC:1D:B3:DB:E8:44:CB:79
Certificate issuer:       /CN=f678e11049659c38ac02262c4abce83a57481a23
Certificate serial:       0D2612
Authority key identifier: A3:F4:AC:E9:6C:20:E7:A8:66:85:4F:7B:7D:DD:29:4A:2D:B7:58:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f678e11049659c38ac02262c4abce83a57481a23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f99a663c25387dc5821a742f7c703d05b71a99f5.roa
Signing time:             Wed 24 Mar 2021 14:45:06 +0000
ROA not before:           Wed 24 Mar 2021 14:45:05 +0000
ROA not after:            Tue 24 Mar 2026 14:45:05 +0000
asID:                     264843
IP address blocks:        2801:14:d000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861714 (0xd2612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f678e11049659c38ac02262c4abce83a57481a23
        Validity
            Not Before: Mar 24 14:45:05 2021 GMT
            Not After : Mar 24 14:45:05 2026 GMT
        Subject: CN=f99a663c25387dc5821a742f7c703d05b71a99f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:fb:74:6b:d1:0b:97:c7:48:31:67:91:ad:
                    2a:24:ee:1a:68:7a:27:0d:06:3a:9e:e0:5f:b0:bb:
                    a1:f8:60:15:a1:b9:5e:b2:c7:4d:b2:fc:31:6d:af:
                    a4:74:6e:fc:19:cb:9f:d3:fd:7c:d6:d7:c0:88:b9:
                    b2:f8:ae:cc:23:45:5d:62:e2:45:c2:71:1a:41:c8:
                    32:ae:e1:7b:66:e6:98:80:e5:ba:2f:3a:b7:32:80:
                    4d:6a:7e:e3:10:c5:d9:56:f1:ec:26:f4:38:79:15:
                    b3:e9:96:8b:6c:a2:05:d4:ed:d7:21:dd:9e:77:02:
                    2a:33:d1:de:d1:70:49:2e:a4:83:8d:08:c7:89:56:
                    6d:08:9a:9a:f3:c9:f0:27:1f:95:e2:d5:af:44:07:
                    85:34:22:0c:42:cd:45:fb:7a:93:b1:d0:72:9f:37:
                    2c:c0:a8:57:c9:33:e7:f1:5e:9c:8a:35:a5:92:0f:
                    1f:6c:ae:05:f3:ce:df:d5:7a:83:ae:22:6d:db:d7:
                    f0:ac:97:7b:e7:98:1c:a0:72:d6:d2:67:d6:a0:00:
                    86:92:e0:54:dc:9b:87:97:9d:e0:ae:9e:2f:a9:e6:
                    5b:06:fb:4f:49:da:b9:5c:ce:fa:00:32:90:b3:e9:
                    bb:82:57:7d:b0:f8:be:7f:5e:18:96:b6:a1:61:2a:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:F0:22:60:F8:FD:90:4F:18:4D:11:BC:1D:B3:DB:E8:44:CB:79
            X509v3 Authority Key Identifier:
                keyid:A3:F4:AC:E9:6C:20:E7:A8:66:85:4F:7B:7D:DD:29:4A:2D:B7:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f678e11049659c38ac02262c4abce83a57481a23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f99a663c25387dc5821a742f7c703d05b71a99f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f678e11049659c38ac02262c4abce83a57481a23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:2c:9c:e7:51:cd:8e:c5:64:12:97:87:9c:f0:41:34:51:
         96:61:42:21:49:04:91:4b:5e:bb:79:7e:b2:1f:d5:a3:47:1f:
         17:17:75:18:71:26:4c:d9:7d:c8:c6:10:48:72:d6:f4:41:b5:
         1e:a8:77:98:5e:d7:94:3a:7b:ca:3f:02:f3:a4:74:6e:ed:33:
         ba:cf:e5:b0:96:83:b2:0f:48:22:1a:af:68:89:25:e4:4e:e0:
         f0:fe:22:1f:15:91:26:5b:5f:53:94:55:7a:8d:b3:c4:42:8a:
         9b:f5:3f:48:60:d5:69:2a:2f:b6:eb:3d:6d:97:52:fe:eb:e6:
         31:2c:b8:01:6d:25:88:7d:08:25:ca:ef:11:86:f1:a2:20:67:
         7c:db:12:02:cd:11:5e:3d:de:2f:c5:b7:98:12:bb:36:96:a2:
         df:5c:b6:78:21:61:1e:52:6e:6a:ca:e3:6e:98:c6:dd:d6:fa:
         d0:41:20:c5:78:50:39:9a:b9:b0:d1:6d:b0:06:a9:9d:0a:fd:
         8f:51:4c:51:a0:f7:20:ef:aa:62:f0:21:b3:6e:42:d0:3f:41:
         48:ce:a6:8c:11:42:25:26:c3:f3:9a:95:57:8f:9e:48:34:85:
         91:72:c8:b0:a4:7a:69:ae:50:f1:42:c6:c7:61:48:14:70:82:
         25:82:f4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----