Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/1f94cc587b4e38f68a8561a00e5d51b65ca9238d.roa
File:                     1f94cc587b4e38f68a8561a00e5d51b65ca9238d.roa (raw, json)
Hash identifier:          QRFxgYF1C+ynER7+FnuYCv0RhxOqkFMBU2T49ru/zsw=
Subject key identifier:   69:2C:24:FE:19:FE:ED:70:75:E6:C2:E4:77:45:ED:49:CE:72:7D:A1
Certificate issuer:       /CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
Certificate serial:       0D6193
Authority key identifier: 19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/1f94cc587b4e38f68a8561a00e5d51b65ca9238d.roa
Signing time:             Wed 24 Mar 2021 14:41:30 +0000
ROA not before:           Wed 24 Mar 2021 14:41:30 +0000
ROA not after:            Tue 24 Mar 2026 14:41:30 +0000
asID:                     264668
IP address blocks:        2803:c220::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876947 (0xd6193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
        Validity
            Not Before: Mar 24 14:41:30 2021 GMT
            Not After : Mar 24 14:41:30 2026 GMT
        Subject: CN=1f94cc587b4e38f68a8561a00e5d51b65ca9238d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:d8:f6:cd:36:4a:e8:77:3f:b4:4d:1d:d0:
                    73:6c:78:67:1f:72:56:59:a7:fc:5c:c3:af:a5:b0:
                    e8:10:4f:a8:4d:fb:b4:6e:24:50:0f:a6:d6:c1:b4:
                    bf:fd:14:63:e4:e3:58:0c:95:29:06:28:72:86:06:
                    a8:d6:3d:a3:42:62:3b:c1:d9:51:b3:a7:52:c2:9d:
                    c8:d2:0f:14:f2:fe:8c:ec:e9:4e:9e:e8:04:fb:bc:
                    07:f4:28:19:c2:aa:d4:52:aa:23:5e:af:03:94:b7:
                    8c:06:87:9e:d1:2e:ca:a7:ad:88:c1:a8:96:7e:29:
                    e4:80:87:9f:f7:90:2a:f7:32:2f:8d:19:1f:ff:8b:
                    e4:cd:ff:bc:65:07:b3:84:34:bc:70:42:d6:49:11:
                    a7:bf:24:5c:c9:fa:9b:ce:0e:c9:58:1b:77:3a:17:
                    4c:ec:2b:5d:a6:b1:f1:a7:2c:d7:e8:5b:f4:7b:e4:
                    0f:62:c0:06:08:c2:3c:22:9f:4d:a8:cc:8d:5d:86:
                    c4:d0:81:35:14:89:4f:c2:8b:f2:ab:46:65:45:e0:
                    1d:5b:12:84:12:75:c8:d8:76:99:e1:a9:3d:6c:dc:
                    ae:c3:10:33:8c:f3:4d:9e:47:4d:3d:a3:ff:7b:88:
                    80:48:e8:eb:04:e5:2a:2f:15:cf:28:51:59:c3:36:
                    9a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:24:FE:19:FE:ED:70:75:E6:C2:E4:77:45:ED:49:CE:72:7D:A1
            X509v3 Authority Key Identifier:
                keyid:19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/1f94cc587b4e38f68a8561a00e5d51b65ca9238d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c220::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:f3:71:3e:81:d8:17:91:21:7d:b0:6c:46:a7:14:99:5f:
         e2:7f:ec:8c:b0:48:e7:c5:a1:b1:52:16:0f:c3:48:13:29:0d:
         82:e6:10:88:89:f2:8f:44:ac:53:89:87:49:3f:0a:0a:97:db:
         36:9e:68:a2:ea:1a:02:10:1a:e4:ce:6c:2f:b8:db:1f:53:63:
         f5:c9:f7:26:10:31:e6:81:0c:16:93:f2:2c:41:e7:3f:63:af:
         b2:1e:9d:0d:9b:c0:ee:38:c8:04:57:36:fb:71:d0:16:ce:63:
         94:49:63:50:d8:32:23:c7:ae:ac:35:09:b6:e7:a8:fb:04:db:
         e8:93:3e:32:b1:92:06:47:7a:72:7d:66:27:cd:d9:6c:55:6d:
         df:3a:be:64:cd:3a:e2:7d:06:49:b0:07:7b:43:75:88:50:a2:
         74:b1:3e:89:e4:2f:31:6d:ab:d2:ae:c2:d6:e4:d4:88:20:11:
         07:14:0b:2f:9d:b2:40:96:52:29:f7:78:ca:39:d4:5b:b6:4f:
         22:85:6e:65:5b:2e:55:5f:44:be:01:69:f1:da:4c:1d:f8:3a:
         3b:5b:03:d5:c0:e3:d6:07:9a:77:fa:ef:a4:b2:83:d7:a8:a0:
         17:8f:65:24:c8:0c:c7:48:eb:5c:5d:19:68:89:80:f0:dd:d1:
         39:b3:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----