Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/69e524fbc6dffa6032e983fb5454e75b9b9c0f72.roa
File:                     69e524fbc6dffa6032e983fb5454e75b9b9c0f72.roa (raw, json)
Hash identifier:          wVSFoqTl1dGU3TLayMmNuaNwqDNLF99OxxZ+LsKJHIU=
Subject key identifier:   04:50:52:99:6A:6D:73:E5:49:0D:95:B9:64:A1:FF:D5:F0:EF:F7:30
Certificate issuer:       /CN=00932e972389ea7205865b22c4909bed7cdcbf7e
Certificate serial:       0D6064
Authority key identifier: D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/69e524fbc6dffa6032e983fb5454e75b9b9c0f72.roa
Signing time:             Wed 24 Mar 2021 14:34:48 +0000
ROA not before:           Wed 24 Mar 2021 14:34:48 +0000
ROA not after:            Tue 24 Mar 2026 14:34:48 +0000
asID:                     61499
IP address blocks:        2801:19:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876644 (0xd6064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00932e972389ea7205865b22c4909bed7cdcbf7e
        Validity
            Not Before: Mar 24 14:34:48 2021 GMT
            Not After : Mar 24 14:34:48 2026 GMT
        Subject: CN=69e524fbc6dffa6032e983fb5454e75b9b9c0f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:25:7b:a6:9d:d4:eb:3b:2b:e9:a8:77:8a:fd:
                    09:33:01:75:a7:c1:03:87:aa:65:18:56:89:25:e8:
                    ec:42:16:0b:c6:a5:3b:35:09:61:0e:d3:5f:82:83:
                    6d:87:a1:73:8d:35:9f:59:a2:4c:d5:40:2e:64:6e:
                    80:b1:e9:3c:2a:e3:0e:d0:a7:ae:95:60:ea:0e:da:
                    7a:ab:48:55:1e:21:82:7c:6e:25:c2:49:96:57:f9:
                    b2:3e:67:da:5d:4d:c7:3f:73:d4:2b:62:7e:6d:3a:
                    70:34:d1:f2:b5:73:da:da:ab:bd:18:55:c3:96:4c:
                    f5:5e:66:b1:5d:c1:e3:58:c9:ad:e3:50:9c:60:d7:
                    fa:86:c4:d2:21:b3:e8:03:9b:80:8c:7b:f4:4a:d6:
                    59:7f:9b:8e:29:9a:b1:03:e4:28:f1:58:fc:3e:78:
                    09:3e:d6:90:db:b9:22:86:3e:41:d6:d0:26:79:d6:
                    00:8b:ac:df:2a:c3:f5:15:68:da:2d:25:02:ca:4f:
                    8e:6b:cc:14:dc:25:58:ba:0d:ae:c6:1f:3d:ed:d4:
                    da:f3:fb:97:27:21:5d:3f:95:dd:84:54:f1:52:99:
                    75:fb:03:4a:97:89:9a:95:84:2b:14:92:6c:55:0c:
                    ec:4c:bc:ea:9e:72:1d:35:dd:eb:ed:56:ad:32:d0:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:50:52:99:6A:6D:73:E5:49:0D:95:B9:64:A1:FF:D5:F0:EF:F7:30
            X509v3 Authority Key Identifier:
                keyid:D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/69e524fbc6dffa6032e983fb5454e75b9b9c0f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:c8:c6:f5:67:73:d0:42:94:c5:52:6c:0a:d7:31:92:43:94:
         29:ac:b6:33:db:f3:ea:78:14:22:67:56:4b:19:62:6f:d8:a8:
         73:ea:e5:83:e0:b8:18:da:1a:fa:f8:fb:7d:d4:4d:95:94:45:
         e3:dd:4b:5f:83:d4:fb:83:f7:37:9c:6f:4a:11:76:51:6e:58:
         15:d4:ef:0e:c8:09:7b:9c:e8:db:da:d0:d0:a9:74:8c:f4:40:
         93:59:70:60:62:11:b8:3e:e3:96:63:5c:f4:b4:f7:b8:e4:1a:
         36:19:4e:e8:5f:1f:ca:00:07:c1:a4:32:21:a9:5e:93:52:a1:
         5a:ce:e1:38:d8:dd:f3:44:5f:ff:4e:6e:24:70:55:fa:f7:a4:
         45:89:f2:c1:a5:d7:b5:31:97:a9:bc:43:66:da:ac:37:22:84:
         a1:ca:c9:bb:67:5a:81:8e:37:2d:d1:3c:33:25:f9:ea:d6:0d:
         6c:f9:f6:6d:7e:cd:8d:93:22:c8:ea:0e:2a:3f:9d:a8:2b:ec:
         b7:07:fc:a5:d9:5b:ae:97:90:0b:1a:d0:c0:d5:23:94:a1:a9:
         d3:d1:38:f0:78:66:01:bd:0f:d5:55:d6:2f:45:df:11:6e:6e:
         e7:d0:df:74:22:b2:ee:2e:7d:dd:80:64:9b:51:dd:5f:a2:c0:
         54:f1:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----