Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c336abdf09df7a23037938226582a6bf65d0ac8b.roa
File:                     c336abdf09df7a23037938226582a6bf65d0ac8b.roa (raw, json)
Hash identifier:          DvQ4yFgzirGJe9d87lBNQiDCrIhcSkgTkM/fBVOda/A=
Subject key identifier:   25:09:55:98:A6:B2:90:C7:D1:96:46:BA:3C:2C:09:AD:1E:20:DA:A7
Certificate issuer:       /CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
Certificate serial:       158FC9
Authority key identifier: 71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c336abdf09df7a23037938226582a6bf65d0ac8b.roa
Signing time:             Sat 19 Feb 2022 17:10:04 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265787
IP address blocks:        2803:bfc0::/32 maxlen: 32
                          2803:bfc0::/48 maxlen: 48
                          2803:bfc0:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413065 (0x158fc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=c336abdf09df7a23037938226582a6bf65d0ac8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:c9:20:86:af:c6:50:c3:5c:5f:90:58:25:
                    9c:42:c5:af:ad:3d:42:9d:6d:36:3e:18:ec:99:ba:
                    28:69:d2:94:ab:81:1b:98:11:ac:a8:a2:52:03:dc:
                    b5:d1:13:1b:33:4e:07:ae:3e:d1:ec:8e:45:5e:37:
                    12:c3:62:7f:5e:24:6a:dd:39:e4:62:0a:84:3c:29:
                    26:e6:b9:c6:37:62:90:5f:d0:29:4f:c5:4e:a2:48:
                    81:ec:37:56:f1:5a:22:98:e5:cf:fa:e3:5a:d0:a6:
                    34:63:b3:04:8c:d0:72:3f:e4:78:ba:81:4e:38:63:
                    b1:81:7d:cb:e3:73:90:0d:74:b4:31:69:f1:8a:42:
                    f8:77:8e:45:6e:e5:06:90:06:14:59:fb:b5:1f:b5:
                    83:7d:f0:e9:69:04:9c:85:4d:b3:a7:7e:2f:01:4c:
                    1a:5c:f7:80:84:66:4a:de:6f:3c:bf:9d:bb:46:ee:
                    c0:75:89:5a:55:fb:a9:88:ce:b0:8e:a0:d7:aa:56:
                    d7:e6:5b:fb:7b:7e:6b:03:ad:72:12:c4:75:d4:3f:
                    38:d8:a7:36:99:10:56:a0:90:03:ae:a7:79:1c:ab:
                    df:fd:3f:11:90:2f:0e:99:b1:2c:e6:69:d2:f9:ab:
                    88:09:bc:92:42:09:a8:90:52:64:10:ea:c3:02:ed:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:09:55:98:A6:B2:90:C7:D1:96:46:BA:3C:2C:09:AD:1E:20:DA:A7
            X509v3 Authority Key Identifier:
                keyid:71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c336abdf09df7a23037938226582a6bf65d0ac8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:25:14:85:0e:e4:a6:e2:59:5c:0a:4f:0b:71:e9:d5:c6:
         3c:6f:5c:6b:bf:77:43:c8:32:7d:f1:e2:14:37:12:6c:28:85:
         6e:97:4d:d6:c2:de:05:cf:54:f2:56:64:e2:a5:7a:85:85:06:
         e1:06:c2:ca:44:2f:58:e8:93:8b:2a:ed:f7:33:2e:ac:6b:61:
         a0:83:43:fd:40:10:a6:6d:f0:61:c8:4f:2e:2e:05:07:2a:bf:
         d2:3c:82:dd:52:50:56:1a:f8:e5:77:d3:a6:dc:94:8d:d0:73:
         83:22:64:3f:46:ad:68:ac:95:f3:46:4a:d1:5b:78:c9:80:90:
         e8:68:82:68:d6:29:6d:88:58:74:57:84:86:1b:2d:39:f7:fe:
         61:cd:d4:e8:20:1e:a9:c4:6c:d5:07:20:32:f2:2a:cf:55:7b:
         27:5a:2a:ec:5e:b7:00:6e:28:64:cd:94:b3:cd:47:61:ed:e8:
         aa:38:83:e4:cc:87:c0:6a:5d:26:9c:a1:d6:b7:c4:96:83:51:
         4c:74:e9:a9:f0:15:00:82:f7:53:d8:79:ad:e7:84:9e:c2:09:
         2c:7f:3d:e0:83:54:50:c3:41:64:ab:5a:47:0a:cb:00:29:54:
         41:e7:4f:78:b2:8e:a0:39:8e:32:54:e7:92:62:80:9f:b8:b7:
         ad:9e:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----