Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/941947cf6b7b70e3531f2d7ca484cdb09c65a0ef.roa
File:                     941947cf6b7b70e3531f2d7ca484cdb09c65a0ef.roa (raw, json)
Hash identifier:          9Dis4bQ7yLM1FvbJhzRgFt6N5afZwQ5QEPJYU7Al8uM=
Subject key identifier:   AF:CB:9D:92:C7:09:DC:EA:1F:DA:E2:E5:19:68:44:54:41:3C:7E:0D
Certificate issuer:       /CN=cc56b1d6e22a6578e9b3925dd80168e599cb5bfb
Certificate serial:       05E4
Authority key identifier: 8C:9B:3D:F9:AB:49:50:D0:4C:5F:D7:81:14:EE:B5:9C:6D:22:78:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc56b1d6e22a6578e9b3925dd80168e599cb5bfb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/941947cf6b7b70e3531f2d7ca484cdb09c65a0ef.roa
Signing time:             Mon 20 Dec 2021 17:42:39 +0000
ROA not before:           Mon 20 Dec 2021 03:00:00 +0000
ROA not after:            Wed 20 Dec 2023 03:00:00 +0000
asID:                     271977
IP address blocks:        2803:5e10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508 (0x5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc56b1d6e22a6578e9b3925dd80168e599cb5bfb
        Validity
            Not Before: Dec 20 03:00:00 2021 GMT
            Not After : Dec 20 03:00:00 2023 GMT
        Subject: CN=941947cf6b7b70e3531f2d7ca484cdb09c65a0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a8:27:c0:5f:9d:44:5f:47:9d:02:1f:10:41:
                    b7:9b:6a:bd:74:49:58:7a:08:99:db:8c:81:0b:6d:
                    ba:3f:06:2f:09:bf:fa:8b:22:80:3b:22:69:21:93:
                    20:89:2e:77:dc:b4:96:b8:53:82:0c:df:f5:0d:b2:
                    c9:7f:ba:b4:fc:9d:26:36:63:98:0b:cc:ed:79:69:
                    5b:4f:68:b8:eb:b5:61:4a:d4:90:4d:29:d0:a6:47:
                    b0:ca:7b:28:ac:a5:71:3e:0d:18:cf:c4:28:6b:79:
                    ec:b5:d5:07:3c:46:1b:14:43:a3:11:46:9e:0d:e5:
                    be:2e:ab:00:fe:97:fc:f7:66:f1:75:13:ba:bb:dd:
                    0a:eb:f5:62:20:6b:10:5d:e1:fe:7a:8a:86:62:58:
                    42:1a:fb:e3:19:8d:d2:c9:03:f6:98:7b:54:a0:29:
                    48:c9:53:99:7d:7d:8c:b3:2d:6e:70:e4:60:1a:71:
                    d0:cd:94:44:2c:fa:44:cc:69:f1:63:59:b6:ef:eb:
                    7b:09:71:c9:ef:90:e2:4f:13:d4:10:d5:0c:5a:db:
                    1b:50:4f:70:4c:83:95:39:8b:da:74:03:e5:3d:8f:
                    8e:f4:ab:7b:dc:b5:b1:ae:74:20:5c:42:91:52:77:
                    d3:10:2a:3e:6b:ee:95:80:87:71:e8:a2:98:07:eb:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CB:9D:92:C7:09:DC:EA:1F:DA:E2:E5:19:68:44:54:41:3C:7E:0D
            X509v3 Authority Key Identifier:
                keyid:8C:9B:3D:F9:AB:49:50:D0:4C:5F:D7:81:14:EE:B5:9C:6D:22:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc56b1d6e22a6578e9b3925dd80168e599cb5bfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/941947cf6b7b70e3531f2d7ca484cdb09c65a0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/cc56b1d6e22a6578e9b3925dd80168e599cb5bfb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:62:cc:7a:8a:18:43:93:20:8f:06:f8:f2:c7:78:e1:9f:
         a2:2d:7b:b1:92:72:51:72:aa:f6:f5:61:99:7a:4c:91:8f:2c:
         ed:2d:77:e0:3c:37:a7:34:69:9b:6f:c0:45:73:36:0e:b1:8c:
         12:1c:92:0d:5f:7f:00:6c:b9:b2:41:3d:35:6b:aa:ab:a4:69:
         86:5f:fd:fc:9c:84:4a:d4:a7:c6:e2:41:6d:74:57:a9:13:51:
         4c:f5:e1:f0:98:2a:21:95:92:11:fb:69:3a:01:34:b0:b6:5e:
         6a:fc:db:6a:c9:50:99:3d:12:4f:db:87:03:ad:b7:f2:98:67:
         88:75:33:2c:ca:7d:a1:d4:02:22:1a:c6:f1:f7:14:95:1a:ce:
         b8:e3:cd:51:bc:ab:04:d1:2c:1a:f7:8c:25:94:d4:5d:a3:aa:
         c1:b3:1b:4d:33:37:18:c9:97:95:67:bf:d4:63:5b:72:19:0a:
         af:4c:be:0d:ae:fb:45:9a:3e:34:4e:79:67:db:ec:f5:25:f3:
         33:99:ff:4a:5b:a3:1e:64:59:80:20:22:4f:d1:cc:6c:c9:dc:
         18:bb:65:78:03:27:38:c4:51:c4:55:aa:0a:50:8f:b5:1f:e4:
         10:f6:47:86:e7:61:6e:c6:c6:03:75:2e:75:23:98:fb:90:c3:
         a2:15:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----